[spaceisaman]

Well i am currently looking for vulnerabilities in a website.
I have found i can access this file /xmlrpc.php and the output is:

XML-RPC server accepts POST requests only.

and also the xmlrpc.php?rsd: where the source code is:

Code

<rsd version="1.0"><service><engineName>WordPress</engineName><engineLink>wordpress</engineLink><homePageLink>.website</homePageLink><apis><api name="WordPress" blogID="1" preferred="true" apiLink="xmlrpc.php"/><api name="Movable Type" blogID="1" preferred="false" apiLink="xmlrpc.php"/><api name="MetaWeblog" blogID="1" preferred="false" apiLink="xmlrpc.php"/><api name="Blogger" blogID="1" preferred="false" apiLink="xmlrpc.php"/><api name="WP-API" blogID="1" preferred="false" apiLink="/wp-json/"/></apis></service></rsd>

I can also read the wp-json/wp/v2/posts/.The code i get is:

[{"id":131315,"date":"2018-06-02T18:50:19","date_gmt":"2018-06-02T15:50:19","guid":{"rendered":"website\/?p=131315"},"modified":"2018-06-02T18:50:19","modified_gmt":"2018-06-

Are these things a security flaw or its totally normal for an anonymous user to access it?
I am new and i am just trying to learn new thing.Thank you in advance