Behaviour Verification
Verification is needed that the following scripts should not be directly accessible as is currently the behaviour, or if some installs might need them to be accessible:
-
wp-activate.php
: This probably does what the entrypoint script does if no database tables are found -
wp-blog-header.php
-
wp-comments-post.php
-
wp-load.php
-
wp-mail.php
-
wp-signup.php
-
wp-traceback.php
Edited by Dom Sekotill