WORDPRESS EXPOSURE CHECK

Check multiple domains at once.

Paste a domain list or upload a TXT file. The tool performs a lightweight check of xmlrpc.php without brute force, credentials, or exploit payloads. Use only on assets you own or are authorized to test.

Batch XML-RPC Exposure Check

Up to 5,000 domains per batch. One domain or URL per line.

0 / 5000
No file selected

An exposed endpoint does not automatically mean a website is vulnerable. Results only report endpoint accessibility and can be downloaded after the batch completes.

What is checked?

HTTP response from /xmlrpc.php and common WordPress XML-RPC indicators.

Batch limit

Up to 5,000 domains can be processed from one list. Checks are sent in controlled stages to keep the browser and server stable.

What is not performed?

No brute force, credential attempts, method enumeration, or exploit payloads.