xmlrpc.php

The default XML-RPC URL for Wordpress. WordPress XML-RPC lets you post to a WordPress blog and perform other functions using popular weblog clients. It can be extended by WordPress plugins. It is used by the mobile application and the JetPack plugin for example.

Since this API is enabled by default, it is a favourite target for attacking Wordpress sites.

Documentation. Protecting against XML RPC attacks.