wp-content/dumps/ is publically accessible and might leak internal data. #1

Closed
opened 2026-09-24 19:14:37 +02:00 by Hellcat · 1 comment
Owner

Currently the dump data is stored in .../wp-content/dumps/
Like all WP files, this directory, and its contents, is/are publically accessible through the webserver.
The data in the dumps might contain internal information not supposed to be exposed to the public.

Need to find a way to remedy this.

Currently the dump data is stored in .../wp-content/dumps/ Like all WP files, this directory, and its contents, is/are publically accessible through the webserver. The data in the dumps might contain internal information not supposed to be exposed to the public. Need to find a way to remedy this.
Hellcat self-assigned this 2026-09-25 20:12:08 +02:00
Hellcat added reference feature/crypt-io 2026-09-25 20:12:28 +02:00
Author
Owner

done ✅

done ✅
Sign in to join this conversation.
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
Hellcats-Stuff/wp-plugin-sf-vardump#1
No description provided.