fix: harden WordPress against WPScan findings

2026-07-23 19:10:11 +02:00
parent 0762b98fc6
commit 472b8616b4
10 changed files with 74 additions and 6 deletions
@@ -1,4 +1,4 @@
-FROM wordpress:7.0.0-php8.3-apache
+FROM wordpress:7.0.2-php8.3-apache

 COPY php.ini /usr/local/etc/php/conf.d/azionelab.ini
 COPY .htaccess /opt/azionelab/.htaccess
@@ -10,6 +10,14 @@ TraceEnable Off
    Require all denied
 </LocationMatch>

+<LocationMatch "^/(readme\.html|license\.txt|wp-admin/install\.php|wp-cron\.php)$">
+    Require all denied
+</LocationMatch>
+
+<LocationMatch "^/wp-content/mu-plugins/">
+    Require all denied
+</LocationMatch>
+
 <LocationMatch "^/wp-admin/includes/">
    Require all denied
 </LocationMatch>