███████ - Publicly Accessible public_html Directory Exposing WordPress Configuration

Summary

A security researcher discovered a publicly accessible directory containing sensitive WordPress configuration files, including database credentials, authentication keys, and API secrets. The vulnerability allowed unauthorized access to critical system information through a downloadable zip file. The exposure posed significant risks including potential database compromise and source code disclosure. The security team successfully validated the report, coordinated with the appropriate remediation team, and confirmed the vulnerability was resolved through retesting. We appreciate the responsible disclosure of this information security issue, which helped strengthen our overall security posture.