Wordpress Alert: Public debug logs containing secrets

What it looks like

A debug or error log can be downloaded by visitors.

Why it matters

Stack traces, tokens, or personal data may be exposed.

What to check

Check log locations and public access rules.

Documentation

This is an exploit pattern to check in installed components, not a claim that every WordPress site has this flaw. Confirm the product and version against its advisories before treating a site as affected. See WordPress hardening guide.