Behaviour Verification
Verification is needed that the following scripts should not be directly accessible as is currently the behaviour, or if some installs might need them to be accessible:
-
wp-activate.php: This probably does what the entrypoint script does if no database tables are found -
wp-blog-header.php -
wp-comments-post.php -
wp-load.php -
wp-mail.php -
wp-signup.php -
wp-traceback.php
Edited by Dom Sekotill