• Resolved protected22

    (@protected22)


    Due to multiple bruteforce attacks hourly since last month on my website using XML-RPC, My hosting disabled the XML-RPC.php file as them deem it depreciated and a big security-issue. These attacks also caused my website to be very slow and offline sometimes. But eversince this, my Jetpack plugin doesnt seem to work anymore, the stats doesnt update (showing zero visits) and I see a error-notification on my dashboard stating: “XML-RPC authentication is disabled. Jetpack is currently active and requires XML-RPC authentication to work correctly. Manage Settings”.

    So now my question is. How can I use Jetpack without XML-RPC? And why does Jetpack use this XML-RPC?

    The page I need help with: [ log in to see the link]

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Support lastsplash (a11n)

    (@lastsplash)

    Hi @protected22

    Jetpack relies on the XML-RPC file to communicate with your WordPress site, and it’s essential for features like Stats, Jetpack Monitor, and others to function correctly. If XML-RPC is disabled, those features will not work, which is why you’re seeing the notification and experiencing issues with the stats not updating.

    You can read more about why and how we use it here:

    https://jetpack.com/support/jetpack-and-xml-rpc/

    In situations like yours, we recommend allow listing our IPs and allowing us to access your site via XML-RPC. We have instructions on how to do this at:

    https://jetpack.com/support/how-to-add-jetpack-ips-allowlist/

    It sounds like you may need to contact your hosting provider to ask for their assistance with this.

    Plugin Contributor Stef (a11n)

    (@erania-pinnera)

    Hi there, @protected22 ,

    Do you have updates about that? We usually close inactive threads after one week of no movement, but we want to make sure we’re all set before marking it as solved. Thanks!

Viewing 2 replies - 1 through 2 (of 2 total)