1
votes

I'm looking at the wordpress XML RPC documentation and it seems that the username and password are required in the plain on every request.

Is there a token based alternative to this to stop this?

1

1 Answers

1
votes

An alternative would be to expose the xmlrpc service only over ssl.