FALKEN'S MAZE / CHECKS / PHP AND WORDPRESS SETTINGS

PHP and WordPress settings

What Joshua checks

Uses the Plugin Recon WordPress plugin to check the PHP version, error display, the built-in file editor and automatic core updates.

Why it matters

An unsupported PHP version gets no security fixes, visible errors leak file paths, and the file editor lets a stolen admin login run code.

How to fix it

Set WP_DEBUG_DISPLAY to false, add DISALLOW_FILE_EDIT to wp-config.php, keep automatic core updates on, and stay on a supported PHP version.

In the Maze Score

Worth

5 points (half for a warning)

Severity

Medium

Runs on

Plans with the Plugin Recon add-on

Related checks

• WordPress core versionPlugin Recon
• Plugin versionsPlugin Recon
• User enumerationPlugin Recon
• Theme versionsPlugin Recon
• XML-RPCPlugin Recon
• Known vulnerabilitiesPlugin Recon
• Exposed filesPlugin Recon
• Abandoned pluginsPlugin Recon
• Login protectionPlugin Recon