WordPress Root Directory Check: Unknown wp-config.??? Files | Web Security Vulnerability

Attention WordPress site owners: regularly check the file list in your site’s root directory for various extended filenames and extensions based on the wp-config file, as shown below.

Recently, while checking the system backend, I found that foreign hacker groups are actively mass-scanning wp-config-related files in WordPress site root directories. Since this file holds the most important database security information and various critical site settings for the entire system, it is suspected that this may be a window in which a WP vulnerability is being exploited.

Below are the names of wp-config-related files that have been scanned, including names extended from the original wp-config.php file as well as structures involving changed extensions and backups.

WordPress Security Vulnerability Concerns: wp-config-Related Files

• wp-config-good
• wp-config_good
• wp-config.good
• wp-config.phporiginal
• wp-config.php-original
• wp-config.php_original
• wp-config.php.original
• wp-config.php_orig
• wp-config.php.orig
• wp-config.php_
• wp-config.php~
• wp-config.php.save
• wp-config.php.backup
• wp-config.php.bak
• wp-config.php.old
• wp-config.php.new
• wp-config.bak
• wp-config.php.disabled
• wp-config.php.swp

Avoid themes and plugins from unknown sources, and install at least one security protection program (such as Wordfence); both can maximize site security protection.

In addition, regularly check the site directory and become familiar with the basic file names and counts so you can spot suspicious files at a glance. Find redundant backups and unfamiliar files (provided there are other secure backups and site operation is unaffected) and directly remove files that do not need to be kept. These actions can further improve site security (provided the correct concepts are established).

References

1. Common Hacker Attack Viruses, Worms and Backdoor Dangerous File List in Website Directories | WordPress Joomla CMS Content Sites.
2. Security Vulnerability: 11 WordPress Plugins and Themes Security Issues.