Fatal Error in requests to “http(s)://DOMAIN/wp-includes/blocks/”

Hi,

for unknown reasons bots started to request the uri [Our-Domain]/wp-includes/blocks/ which are all ending in a fatal error.

PHP Fatal error: require(): Failed opening required ‘ABSPATHWPINC/blocks/archives.php’ in …/wp-includes/blocks/index.php on line 9

In your documentation you advise to restrict the access to /wp-includes/, but the .htaccess snippet does not prevent access to subfolders in wp-includes/ except for wp-includes/theme-compat/

Hardening WordPress

“/wp-includes/blocks/” is probably not intended to be accessed directly but i do not know if it is really save to block it.

Any advice would be very helpful!

We use WP 5.7.2 and WP 5.8

Best,

Max

• This topic was modified 4 years, 9 months ago by r1baum.