Wp includes access control

Considering you got an Apache server, use this full code in the .htaccess file:

# Block the include-only files.
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^wp-admin/includes/ - [F,L]
RewriteRule !^wp-includes/ - [S=3]
RewriteRule ^wp-includes/[^/]+\.php$ - [F,L]
RewriteRule ^wp-includes/js/tinymce/langs/.+\.php - [F,L]
RewriteRule ^wp-includes/theme-compat/ - [F,L]
</IfModule>
# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>
# END WordPress

As a bonus, I would also add this: 

<IfModule mod_autoindex.c>
    Options -Indexes
</IfModule>

Related Posts:

  1. How to show one post different from the rest?
  2. Display posts side by side with custom query
  3. active link for most recent post on vertical tabs
  4. Declare inline background image in functions.php
  5. Stylesheet won’t load even when linked
  6. database query with more than a couple meta hangs and doesn’t complete
  7. Gallery shortcode numerical sorting
  8. Check return value of get_posts
  9. How Can I Change The Tax Query For The Main Loop For Taxonomy Archives?
  10. Query post with meta value in set of values
  11. get_template_part causes 500 error
  12. Finding WordPress Posts assigned to multiple categories
  13. The most effective way to split by post type in custom query?
  14. Does meta_value (array) work with ‘orderby’?
  15. Get a list of posts by specific category
  16. WordPress Query String: get_posts(‘cat=5’) vs WP_Query( ‘cat=5’) vs URL: /site/?cat=5
  17. WP_Query – Adding “offset” posts to the end of the loop
  18. Shortcode for custom query not returning results when attributes are added
  19. wp_query is showing posts from other categories
  20. Multiple wordpress queries with nested output (odd – even)
  21. Get posts in taxonomy randomly
  22. Page navigation doesn’t seem to work when I add offset?
  23. it’s possible make a WP_Query with math operations?
  24. show posts with range meta key
  25. how to write wordpress query for multiple metakeys checking?
  26. Trying to add a class to post links
  27. Using a Shortcode to List Posts from Multiple Categories
  28. How to display a list of posts in same child category as current post
  29. querying posts with a custom status
  30. is_404() – where does this get set?
  31. wp_query on page template not working (Genesis framework)
  32. Display post meta conditionally based on it’s value
  33. Max Posts and Memory Limit
  34. How can i show pagenavi in my author.php?
  35. Randomly select one of last 3 posts
  36. Query multiple meta key values for template
  37. WordPress | WP_Query does not return anything with s=a
  38. Using WP_Query with multiple loops on one page in search.php
  39. WP_Query Pagination
  40. Order by post meta not working with pre_get_posts filter
  41. WP_Query orderby
  42. ACF: How to query for a given value count of an array like field? (e.g.: How many rows has a `flexible_content` field?)
  43. Using Ajax and WP_Query to load more posts on category page fails
  44. is_user_logged_in not working from WP-API (wp-json)
  45. WordPress private post won’t display to other admins
  46. Only show tag with the same id as the post
  47. I have problems with the search query using multiple post types
  48. ACF: How can I publish values of ACF fields in a loop while using wp_query?
  49. Sort by price wpdb
  50. How to check if logged in user have pending custom post?
  51. WP_Query random ordering not working since 5.4
  52. Show a message if there are no active posts in category
  53. How can I re-query post_type and rewrite the url?
  54. Where my home page and font options has gone?
  55. How to get the latest post list (of the parent custom custom type)
  56. Problem with my loops
  57. Repeat array inside array through while loop
  58. What’s causing an infinite loop?
  59. Logging search queries for logged-in users
  60. pages shortcode filtering by category
  61. How to order posts, that have already been filtered by custom taxonomy, by their category names?
  62. WP query retrieve the src of attached image
  63. How to set up pagination for a custom loop on a global template (author.php, tag.php, archive.php?)
  64. Ignoring ‘a’ when sorting posts
  65. Featured Image as Background with Offset
  66. custom WP_Query results in showing same posts in all pagination pages
  67. counting post from a wp-query using sticky_post
  68. Duplicate a Query Built with PHP and Mysql but now in WordPress
  69. How to take parameters from a function and make them editable as attributes in a shortcode
  70. Show recent posts from excluded category
  71. What method does this eventually call: do_action_ref_array( ‘parse_query’, array( &$this ) );
  72. WP_Query secondary query failing
  73. List posts of terms but exclude one term
  74. Hiding all posts/products/pages from a site based on a custom taxonomy/domain name
  75. Custom search (wp query by custom fields)
  76. pre_get_posts or $where, which one to use?
  77. Passing query variables to a custom page template
  78. Query child’s child categories
  79. $wp_query issue when trying to create a virtual page
  80. add_query_vars does not work
  81. Limit the number of posts from a specific category on index.php
  82. Some images not being returned with wp_get_attachment_image
  83. Retrieve posts in custom post type and specific taxonomies
  84. Why is WP_Query’s meta_query not filtering results?
  85. Get users query makes the site loading time too big?
  86. Query for page content, and query for posts on the same page?
  87. How to write short code with if else to get page_id?
  88. Limit the number of posts via wpquery
  89. How to retrieve _embed (etc) fields in get_posts custom query?
  90. WP query with multiple custom meta not respecting orderby
  91. AJAX search function resets wp_query vars
  92. I need to get all categories from a WP_Query
  93. WordPress Ajax search filter on dropdown select
  94. Unexpected number of loops in while
  95. Can’t override post type using custom Elementor query
  96. Passing a variable containing a comma separated list of values in a meta-query
  97. Adding a language rule and displaying posts with a custom taxonomy term on its archive page
  98. Use custom url params with value from a custom field to return the post containing the field value
  99. WP_Query on custom taxonomy -> Location and Activity
  100. Custom tag template to list posts in ASC order