Is there a risk of having xmlrpc.php on my site? I recently noticed that all of my sites have the file xmlrpc.php.

Searching it led me to "Gain Control of WordPress by Exploiting XML-RPC", and also to "Drupal Core - Critical - Multiple Vulnerabilities - SA-CORE-2016-001".

I'm running Drupal 7.56.

Does this file pose a threat whatsoever to my site?
Should I just delete it to be safe?

If I should keep it, what added benefit does it give me?
You are save. At least to what we know now.

The first linked article is wordpress related. This is totally different code. Not drupal related at all!


  Drupal had a known security flaw in versions lower than 6.38 / 7.43 /
  8.04


So your version 7.56 is patched. Always make sure to update to the latest version and you're good.