Which accounts installed WordPress

AthensMatt

• September 01, 2020 08:43

Is there a report that I can use to determine which accounts installed WordPress? Background: Our Information Security Team scanned our cPanel/WHM server and notified us that several cname records are running old versions of WordPress. The scan doesn't provide the DNS so I need to manually look thru all sites or find a way to get WHM to tell me which sites have installed WordPress so I can notify the owners to update or we'll suspend their site. Thanks!

• 

  AthensMatt

  • September 01, 2020 14:54

  I went through them manually, but if anyone has a faster way for future reference please share. Thanks!

  0
• 

  ffeingol

  • September 01, 2020 15:25

  Assuming you have not disabled mlocate you should be able to run: locate wp-config.php wp-config.php is the WordPress configuration file. The locate command will give you all the 'places' where the file is located, so you'll get /home/XXX/public_html/blah where "XXX" is the cPanel account. You can then get the list of domains from the cPanel account. It may not be the fastest or 100% accurate (there is a random chance that someone calls a file wp-config.php that is not WordPress) but it should be pretty quick/accurate.

  0
• 

  cPanelLauren

  • September 02, 2020 20:08

  IF your users install WordPress with the cpaddons site software the interface at WHM>>cPanel>>Manage cPAddons Site Software will list these.

  0
• 

  kamm

  • November 14, 2023 13:38

  Pretty late to the party, but I use: find /home -type d -name 'wp-includes'

  0

Please sign in to leave a comment.