.php cgi-bin images admin includes search .html cache login modules templates plugins wp-admin themes js index xmlrpc wp-includes media wp-content css language tmp scripts register misc install ...

Disable DOCTYPE Disable external entities Disable external DTD loading Enable secure processing mode Disable XInclude Limit entity expansion Do not use legacy XML parsers Never parse untrusted XML ...