WordPress Configuration File Deletion

Ethan Andrews@eandrews

•updated Jun 10, 2026•1•0•2

Detects the arbitrary deletion of the critical WordPress configuration file (wp-config.php), which is a known impact of PHP object injection attacks (e.g., CVE-2025-7384) aiming to cause a denial of service.