diff --git a/plinth/modules/wordpress/data/etc/apache2/conf-available/wordpress-freedombox.conf b/plinth/modules/wordpress/data/etc/apache2/conf-available/wordpress-freedombox.conf
index a55211a21..24ea002c4 100644
--- a/plinth/modules/wordpress/data/etc/apache2/conf-available/wordpress-freedombox.conf
+++ b/plinth/modules/wordpress/data/etc/apache2/conf-available/wordpress-freedombox.conf
@@ -54,3 +54,8 @@ Alias /wordpress /usr/share/wordpress
         Require all granted
     </IfFile>
 </Directory>
+
+# Harden security by following wpscan's suggestions. Issue #2244
+<LocationMatch "^/wordpress/(readme.html|xmlrpc.php|wp-cron.php)">
+    Deny from All
+</LocationMatch>