Mahimman rauni a cikin plugins na WordPress tare da shigarwa sama da dubu 400

A cikin shahararrun plugins guda uku don tsarin sarrafa abun ciki na gidan yanar gizon WordPress, tare da shigarwa sama da dubu 400, gano m vulnerabilities:

• Varfafawa a cikin plugin Abokin ciniki mara iyaka WP, wanda ke da kayan aiki sama da dubu 300, yana ba ku damar haɗawa ba tare da tantancewa azaman mai gudanar da rukunin yanar gizo ba. Tunda an ƙera plugin ɗin don haɗa kan gudanar da rukunoni da yawa akan sabar, mai hari zai iya samun iko da duk rukunin yanar gizon da aka yi aiki ta amfani da Abokin ciniki na InfiniteWP lokaci guda. Don kai hari, ya isa ka san shigan mai amfani tare da haƙƙin gudanarwa, sannan aika buƙatar POST da aka ƙera ta musamman (nuni siga “add_site” ko “readd_site”), zaku iya shigar da tsarin gudanarwa tare da haƙƙin wannan mai amfani. Rashin lahani yana faruwa ta hanyar kuskure a aiwatar da aikin shiga ta atomatik.
  matsala shafe a cikin sakin InfiniteWP Abokin ciniki 1.9.4.5.

• Lalacewar biyu a cikin plugin WP Database Sake saitin, wanda ake amfani da shi akan kusan shafuka dubu 80. Rashin lahani na farko yana ba ku damar sake saita abubuwan da ke cikin kowane tebur a cikin bayanan zuwa yanayin farko ba tare da wucewa ba (sakamakon yanayin sabon shigarwa na WordPress, share bayanan da ke da alaƙa da rukunin yanar gizon). Matsalolin na faruwa ne ta hanyar binciken izini da ya ɓace lokacin aiwatar da aikin sake saiti.

  Lalaci na biyu a cikin Sake saitin Database na WP yana buƙatar samun ingantacciyar hanya (asusu mai ƙarancin haƙƙin biyan kuɗi ya isa) kuma yana ba ku damar samun gata na masu gudanar da rukunin yanar gizo (zaku iya share duk masu amfani daga teburin wp_users, bayan haka sauran mai amfani na yanzu za a kula da shi azaman admin). Abubuwan da aka warware a cikin sakin 3.15.

• Varfafawa a cikin plugin WP Lokutan Kaya, wanda yana da fiye da 20 dubu shigarwa, ba ka damar haɗi tare da haƙƙin gudanarwa ba tare da tantancewa ba. Don kai hari, ya isa ƙara layin IWP_JSON_PREFIX zuwa buƙatun POST, kuma idan akwai, aikin wptc_login_as_admin ana kiransa ba tare da bincika ba. Matsala shafe a cikin saki 1.21.16.
  

source: budenet.ru