What is checked?
HTTP response from /xmlrpc.php and common WordPress XML-RPC indicators.
Sam1337 ToolsWORDPRESS EXPOSURE CHECK
Paste a domain list or upload a TXT file. The tool performs a lightweight check of xmlrpc.php without brute force, credentials, or exploit payloads. Use only on assets you own or are authorized to test.
Up to 5,000 domains per batch. One domain or URL per line.
HTTP response from /xmlrpc.php and common WordPress XML-RPC indicators.
Up to 5,000 domains can be processed from one list. Checks are sent in controlled stages to keep the browser and server stable.
No brute force, credential attempts, method enumeration, or exploit payloads.