-
mlgualtieri acfou campuscodi thezedwards eliyastein @jeromesegura adtechmadness swodinsky Generally most sites with the xmlrpc file remove any permissions it has to effect the parent site, but it is part of the WordPress Core, so sites can't remove it and easily stay to date through the upgrade process.
-
mlgualtieri acfou campuscodi thezedwards eliyastein @jeromesegura adtechmadness swodinsky That said, plenty of smaller older sites do not. I'm not sure it is even on by default anymore, if you set up a new install.