xmlrpc.php file enabled - data.gov

How it was found

Wordpress that have xmlrpc.php enabled for pingbacks, trackbacks, etc. can be made as a part of a huge botnet causing a major DDOS. this website www.data.gov has the xmlrpc.php file enabled.

Impact

This can be automated from multiple hosts and be used to cause a mass DDOS attack on the victim.