WordPress Security Quiz

Which of the following is a typical WordPress Core vulnerability?

• Outdated REST API exposing sensitive data

• Missing alt text in images

• CSS not rendering properly

• Theme not loading correctly

What sensitive file in WordPress Core must be protected to avoid database credential leaks?

• style.css

• functions.php

• wp-config.php

• index.php

A WordPress site has not been updated for over 2 years. Attackers successfully used a known exploit to gain admin access. What caused the breach?

• Zero-day vulnerability

• Misconfiguration of SSL

• Outdated Core not patched

• Strong password policy

Why are free themes from untrusted sources dangerous?

• They cannot be customized

• They may contain hidden malicious code or backdoors

• They slow down the website only

• They use too many colors

Which of the following is considered poor coding practice in WordPress themes?

• Escaping HTML output

• Using wp_kses() for filtering

• Hard-coded admin credentials in PHP files

• Validating input before saving

A student downloads a free theme. After installing, attackers upload malicious PHP files through the theme’s unsecured file upload function. Which vulnerability is this?

• Cross-Site Scripting (XSS)

• Remote File Inclusion (RFI)

• SQL Injection

• Directory Traversal

Which plugin vulnerability was exploited in the famous Slider Revolution attack?

• CSRF

• File Upload vulnerability

• SQL Injection

• XSS

Why are abandoned plugins a major risk?

• They increase site loading time

• They may never receive patches for known vulnerabilities

• They cannot be uninstalled

• They break SSL certificates

A developer’s WordPress.org account was hacked, and attackers uploaded a backdoored update to a popular plugin. Thousands of websites got compromised after updating. What type of attack is this?

• Brute-force

• Supply Chain Attack

• XSS

• SQL Injection

What is the main target of brute-force attacks in WordPress?

• wp-content/uploads/

• /wp-login.php and /xmlrpc.php

• style.css

• sitemap.xml