
© Piotr Sikora 2026 | All Rights Reserved
How I cleaned a hacked WordPress site full of thousands of spam HTML files injected under wp-content/uploads/et_temp, plus tips to check your own instance.
Learn what WordPress XML-RPC is, why xmlrpc.php is a security risk, and how to disable it using .htaccess.