FALKEN'S MAZE / CHECKS / EXPOSED FILES
Exposed files
What Joshua checks
Looks for debug logs, backups and directory listings in wp-content.
Why it matters
Debug logs and backups often contain credentials.
How to fix it
Delete the file, set WP_DEBUG_LOG off in production, and block directory listing.
In the Maze Score
- Worth
- 10 points (half for a warning)
- Severity
- High
- Runs on
- Plans with the Plugin Recon add-on, on domains with verified ownership
Related checks
- WordPress core versionPlugin Recon
- Plugin versionsPlugin Recon
- User enumerationPlugin Recon
- Theme versionsPlugin Recon
- XML-RPCPlugin Recon
- Known vulnerabilitiesPlugin Recon
- PHP and WordPress settingsPlugin Recon
- Abandoned pluginsPlugin Recon
- Login protectionPlugin Recon
How does your domain do? Scan it free and get a Maze Score in about a minute.