Wordpress Directory Listing

It is possible to list the contents Wordpress directories.

  • wordpress
  • directory
  • listing
  • enumeration

Directory listing allows an attacker retrieve the files and folders hosted on the web server. This can be exploited to obtain sensitive information that may aid in further attacks.

Impact

Attackers may be able to identify files and folders with sensitive content.

Solution

Disable directory listing for all Wordpress paths.

Was this page helpful?