Description
WPEngine is a provider of managed WordPress hosting. WPEngine creates a folder named _wpeprivate that contains the config.json file. This file contains highly sensitive information (such as WPEngine database credentials) and should not be publicly accessible. It was confirmed that it's possible to access this file without authorization.
Remediation
You should restrict access to the _wpeprivate directory by adjusting your web server configuration.
References
Related Vulnerabilities
WordPress Plugin Email newsletter 'option' Parameter Information Disclosure (8.0)
Ektron CMS unauthenticated code execution and Local File Read
WordPress Plugin WordPress File Upload Multiple Vulnerabilities (2.7.6)
Unrestricted access to NGINX+ Status module
WordPress Plugin Super Refer A Friend Information Disclosure (1.0)