Which accounts installed WordPress

AthensMatt

Active Member
Mar 24, 2015
31
0
56
Athens
cPanel Access Level
Root Administrator
Is there a report that I can use to determine which accounts installed WordPress?

Background: Our Information Security Team scanned our cPanel/WHM server and notified us that several cname records are running old versions of WordPress. The scan doesn't provide the DNS so I need to manually look thru all sites or find a way to get WHM to tell me which sites have installed WordPress so I can notify the owners to update or we'll suspend their site.

Thanks!
 

ffeingol

Well-Known Member
PartnerNOC
Nov 9, 2001
438
107
343
cPanel Access Level
DataCenter Provider
Assuming you have not disabled mlocate you should be able to run:

locate wp-config.php

wp-config.php is the WordPress configuration file. The locate command will give you all the 'places' where the file is located, so you'll get /home/XXX/public_html/blah where "XXX" is the cPanel account. You can then get the list of domains from the cPanel account.

It may not be the fastest or 100% accurate (there is a random chance that someone calls a file wp-config.php that is not WordPress) but it should be pretty quick/accurate.