Description

WordPress root directory contains a file named readme.html. The readme.html file may reveal sensitive information and is not needed from a functional perspective.

Remediation

Delete the /readme.html file from the WordPress root directory.

References

OWASP Wordpress Security Implementation Guideline

Related Vulnerabilities

Unrestricted access to AnythingLLM API

WordPress Plugin PAYPAL CURRENCY CONVERTER BASIC FOR WOOCOMMERCE Arbitrary File Disclosure (1.3)

WordPress Plugin File Manager Information Disclosure (6.4)

Yii2 weak secret key

Squid Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-18679)

Severity

Info

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Configuration Information Disclosure Test Files CWE-200