CMS Security
Joomla Cron Access Check
Joomla cron can be exploited for DoS attacks if publicly accessible. Learn how to secure or disable it.
What this test checks
This test checks whether Joomla cron is publicly accessible. Like WordPress, an accessible cron can be used for denial‑of‑service (DoS) attacks by repeatedly invoking it, which can saturate your server resources.
Our recommendation
Protect Joomla cron by adding a password or restricting allowed IP addresses. Configure a system cron (via crontab) to execute scheduled tasks rather than using the web cron, which reduces attack risks and improves reliability.
Security tests
Read more
CMS Security