New answers tagged


If you run the WordPress as user www-data, an attacker can do everything the user www-data can do. That's usually quite a lot: Wide read access. You could test what you can access e.g. using sudo su -s /bin/bash www-data. Write access to all the other sites run as www-data. You should treat every site as potentially compromised. To prevent that in the ...

Top 50 recent answers are included