A quick and simple Google search underlies the problem with people using WordPress. 111,000 sites exposed themselves completely and have their databases exposed to the Internet. This includes all manner of websites from independent music sites to doctor offices and even some government websites. WPScan is available as a standalone application or available in the Kali distribution is called WPScan. This is a purpose build WordPress security scanning tool that can help you find issues before someone pops your site. If you are in fact running local backups at least put a control in place to block access to them like the plugins from Wordfence or Sucuri.”]
Source: https://www.csoonline.com/article/2136246/110-000-wordpress-databases-exposed.html