fix: harden WordPress against WPScan findings

2026-07-23 19:10:11 +02:00
parent 0762b98fc6
commit 472b8616b4
10 changed files with 74 additions and 6 deletions
@@ -10,6 +10,14 @@ TraceEnable Off
    Require all denied
 </LocationMatch>

+<LocationMatch "^/(readme\.html|license\.txt|wp-admin/install\.php|wp-cron\.php)$">
+    Require all denied
+</LocationMatch>
+
+<LocationMatch "^/wp-content/mu-plugins/">
+    Require all denied
+</LocationMatch>
+
 <LocationMatch "^/wp-admin/includes/">
    Require all denied
 </LocationMatch>