Bofokoli ho li-plugins tsa WordPress tse kentsoeng ho feta milione

Bafuputsi ba ts'ireletso ho tsoa ho Wordfence le WebARX ba hlokometse likotsi tse 'maloa tse kotsi ho li-plugins tse hlano bakeng sa sistimi ea taolo ea dikahare tsa webo ea WordPress, tse etsang kakaretso e fetang milione.

• Ho ba tlokotsing ka har'a plugin Tumello ea Cookie ea GDPR, e nang le lisebelisoa tse fetang likete tse 700. Taba ena e lekantsoe Severity Level 9 ho 10 (CVSS). Kotsi e lumella mosebelisi ea netefalitsoeng ea nang le litokelo tsa ba ngolisitseng ho hlakola kapa ho pata (ho fetola boemo ho sengoloa se sa phatlalatsoang) leqephe lefe kapa lefe la sebaka sa marang-rang, hammoho le ho kenya litaba tsa bona maqepheng.
  Ho ba tlokotsing felisitsoe ho lokolloa 1.8.3.

• Ho ba tlokotsing ka har'a plugin Moemeli oa Pontšo ea ThemeGrill, palo ea lisebelisoa tse fetang likete tse 200 (litlhaselo tsa sebele tsa libaka li ile tsa tlalehoa, ka mor'a hore ho qalehe ha eona le ponahalo ea data e mabapi le ho ba kotsing, palo ea lisebelisoa e se e fokotsehile ho 100 tse likete). Kotsi e lumella moeti ea sa netefatsoang ho hlakola litaba tsa polokelo ea sebaka sa marang-rang le ho beha botjha polokelong boemong bo bocha ba ho instola. Haeba ho na le mosebelisi ea bitsoang admin sebakeng sa polokelo ea litaba, ho ba kotsing ho boetse ho u lumella ho fumana taolo e felletseng holim'a sebaka seo. Kotsi e bakoa ke ho hloleha ho netefatsa mosebelisi ea lekang ho fana ka litaelo tse khethehileng ka /wp-admin/admin-ajax.php script. Bothata bo lokisitsoe ho mofuta oa 1.6.2.
• Ho ba tlokotsing ka har'a plugin ThemeREX Addons, e sebelisoang libakeng tse likete tse 44. Taba ena e abetsoe boemo bo boima ba 9.8 ho 10. Kotsi e lumella mosebedisi ea sa netefatsoang hore a phethe khoutu ea hae ea PHP ho seva mme a nkele sebaka sa akhaonto ea mookameli oa sebaka ka ho romela kopo e khethehileng ka REST-API.
  Linyeoe tsa tlhekefetso ea ho ba kotsing li se li tlalehiloe marang-rang, empa ntlafatso e nang le tokiso ha e so fumanehe. Basebelisi ba eletsoa ho tlosa plugin ena kapele kamoo ho ka khonehang.

• Ho ba tlokotsing ka har'a plugin wpCentral, palo ea batho ba likete tse 60 ba kentsoeng. Taba ena e abetsoe boemo bo boima ba 8.8 ho ba 10. Kotsi e lumella moeti leha e le ofe ea tiisitsoeng, ho kenyeletsa le ba nang le litokelo tsa ba ngolisitseng, ho eketsa litokelo tsa bona ho mookameli oa sebaka kapa ho fumana monyetla oa ho kena ho wpCentral control panel. Bothata bo lokisitsoe ho mofuta oa 1.5.1.
• Ho ba tlokotsing ka har'a plugin Moetsi oa Boemo, e nang le lisebelisoa tse ka bang likete tse 65. Taba ena e abetsoe boemo bo boima ba 10 ho ba 10. Bofokoli bo lumella mosebedisi ea sa netefatsoang hore a thehe akhaonto e nang le litokelo tsa mookameli (plugin e u lumella ho etsa liforomo tsa ho ngolisa 'me mosebedisi a ka fetisa tšimo e eketsehileng ka karolo ea mosebedisi, a abeloa. ke boemo ba motsamaisi). Bothata bo lokisitsoe ho mofuta oa 3.1.1.

Ho phaella moo, ho ka hlokomeloa ho lemoha marang-rang bakeng sa ho aba li-plugins tsa Trojan le lihlooho tsa WordPress. Bahlaseli ba ile ba beha likopi tsa pirated tsa li-plugins tse lefuoang libakeng tsa marang-rang tse iqapetsoeng, ba se ba kentse kamore e ka morao ho tsona ho fumana phihlello e hole le ho jarolla litaelo ho tsoa ho seva sa taolo. Hang ha e kentsoe, khoutu e kotsi e ile ea sebelisoa ho kenya papatso e kotsi kapa e thetsang (mohlala, litemoso mabapi le tlhoko ea ho kenya antivirus kapa ho nchafatsa sebatli sa hau), hammoho le ho ntlafatsa enjine ea patlo ho khothaletsa libaka tse abang li-plugins tse kotsi. Ho latela lintlha tsa pele, libaka tse fetang likete tse 20 li ile tsa senyeha ho sebelisoa li-plugins tsena. Har'a bahlaseluoa ho ne ho e-na le sethala sa merafo se ikemetseng, feme ea khoebo, banka, lik'hamphani tse ngata tse kholo, moqapi oa tharollo ea litefello tse sebelisang likarete tsa mokitlane, lik'hamphani tsa IT, joalo-joalo.

Source: opennet.ru