WordPress

XML-RPC, user enumeration, exposed debug logs and backups.

Articles in this category

• WordPress XML-RPC endpoint is active
• The list of WordPress users is publicly accessible
• A wp-config.php backup is publicly accessible