[wp-hackers] XML-RPC Exploit?

[Denis de Bernardy]

> So if you do not allow pingbacks, it's safe to delete it?
> 

Then you _should_ delete it, because 1.5.1.3 introduces a bug whereby
pingbacks will get inserted in your site even as you do not allow them.

> (Does it also handle trackbacks?)
> 

Nope

D.