diff --git a/WordPress-Security-Tips.md b/WordPress-Security-Tips.md index e688dc9..0afd08a 100644 --- a/WordPress-Security-Tips.md +++ b/WordPress-Security-Tips.md @@ -22,7 +22,7 @@ WordPress will look inside the web root directory for the wp-config.php file as **6. Turn off directory listing on your web server.** -WordPress suffers from many [Full Path Disclosure](https://www.owasp.org/index.php/Full_Path_Disclosure) (FPD) vulnerabilities which can be used to facilitate in further attacks such as [Path Traversal](https://www.owasp.org/index.php/Path_Traversal) attacks. A bandaid for these bugs is to turn off directory listing in your web server's configuration file. +WordPress suffers from many [Full Path Disclosure](https://www.owasp.org/index.php/Full_Path_Disclosure) (FPD) vulnerabilities which can be used to facilitate in further attacks such as [Path Traversal](https://www.owasp.org/index.php/Path_Traversal). A bandaid for these bugs is to turn off directory listing in your web server's configuration file. **7. Ensure any TimThumb files are up to date.**