WordPress Setup Configuration File
Severity:
Medium
Summary
Invicti detected a WordPress setup configuration file.
Impact
This is the setup URL that new installations of WordPress use. If the attacker finds that URL and it contains a setup page, it indicates that someone has recently installed WordPress on their server but has not yet configured it. At this point, it is very easy for an attacker to take over not just the new WordPress website, but the entire hosting account and all other websites on that hosting account.
Remediation
If you use a server with .htaccess, you can put this in that file (at the very top) to deny access to anyone surfing for it.
order deny,allowdeny from allallow from <your ip>
Required Skills for Successful Exploitation
Actions To Take
Vulnerability Index
You can search and find all vulnerabilities
Select Category
Select Vulnerability
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Build your resistance to threats. And save hundreds of hours each month.
