[ad_1]
I have no idea how this happened, but I suspect either ManageWP placed them there during a restore process from a backup performed a few months back. But in two different websites, there was a full backup of the entire DB SQL file just sitting in the public directory.
Once I realized this I deleted them. But how could this have happened? The file names were appended with random strings of text like… db_name_backup_9338838383.sql
My other concern is if anyone could have downloaded these databases by somehow viewing the content of the directory.
[ad_2]