Often when I find resources about XML-RPC vulnerabilities with respect to the
xmlrpc.php file commonly found exposed on WordPress sites, I find alongside the recommendation to remove or block the
xmlrpc.php file that it is also recommended to remove
wlwmanifest.xml (Windows Live Writer Manifest link).
So far as I can tell
wlwmanifest.xml does not offer up any WordPress version information, nor does it seem able to be leveraged for testing username/password credentials as
Most of the content in the sources below states, in summary, "remove code if not using as it is unnecessary."
Can anyone shed some light as to why this file should also be removed/blocked? If this is not a security concern, is this just simply an optimization?
Sources (that suggest removal/block of