In reply to Syed Balkhi.

Me too. I don't use any apps to manage my WordPress sites, so I always disable XML-RPC! I wrote a guide at my blog http://www.deluxeblogtips.com/2013/08/disable-xml-rpc-wordpress.html just in case anyone want to do the same thing.