Description :
Your WordPress site is currently configured so that anyone can register as a user. If you are not using this functionality, it's recommended to disable user registration as it caused some security issues in the past and is increasing the attack surface.
If the vendor directory is part of the web root you can also find the config in the provided path. Of course you've then also some more problems besides that ;)