Skip to content

Sensitive Data: WordPress Debug Log - Exposure

Identifier: wordpress_debug_log

Scanner(s) Support

GraphQL Scanner REST Scanner WebApp Scanner ASM Scanner

Description

WordPress debug log exposure reveals sensitive debugging information including errors, stack traces, and potentially sensitive data that should not be publicly accessible.

How we test: We test for exposed WordPress debug logs by attempting to access debug log files and analyzing responses to detect if debugging information is exposed that could aid attackers.

Configuration

Example

Example configuration:

---
security_tests:
  wordpress_debug_log:
    skip: false

Reference

skip

Type : boolean

Skip the test if true.