WordPress - general stuff

Configuration file is…

wp-config.php

Usually somewhere is /var/www/html

It has the password in it

WordPress Priv Esc

https://blog.ripstech.com/2018/wordpress-file-delete-to-code-execution/