This is the reason why i do not use Wordpress on my projects! Besides you can build your own system with ease by creating your own databases and php files, basically Wordpress installs a lot of stuff that most of the website owners do not use at all.
Plugins are the major problem you need to check plugin by plugin, check forums and updates provided. I found some issues with wordpress in this function: functions/theme-mail.php (check if that exists on your theme folder).
You should prevent direct Access to Files: If you identify the snippet above within your theme, add the following code after your opening PHP tags to prevent direct access to the file and further exploitation:
If you develop themes or plugins and they include files that shouldn’t be used outside of the original theme or plugin, consider using this trick to prevent direct access to the files.
Even so, that should fix the issue at least. WordPress users should also keep these issues in mind and employ preventative measures such as a Web Application Firewall (WAF).
I hope this guidelines help you on your further development.
Plugins are the major problem you need to check plugin by plugin, check forums and updates provided. I found some issues with wordpress in this function: functions/theme-mail.php (check if that exists on your theme folder).
You should prevent direct Access to Files: If you identify the snippet above within your theme, add the following code after your opening PHP tags to prevent direct access to the file and further exploitation:
PHP Code:
if ( basename($_SERVER['PHP_SELF']) == basename(_FILE_) )
{
die('Access Denied');
}
If you develop themes or plugins and they include files that shouldn’t be used outside of the original theme or plugin, consider using this trick to prevent direct access to the files.
Even so, that should fix the issue at least. WordPress users should also keep these issues in mind and employ preventative measures such as a Web Application Firewall (WAF).
I hope this guidelines help you on your further development.
