#WordPress security is such a bane & nuisance, even for people who aren't even using it. In the past 24h I've been bombarded again with dozens of WP login spam emails, and my (static) sites had >4600 requests obviously scanning for all sorts of WP-related files & vulnerabilities...
Second to that is another group of scans (~1080) looking for mistakenly uploaded credential files in `.aws/*`, `.env.*`, `.ssh/*` etc.
😡😤