بهره‌برداری هکرها از نقص روز صفر در افزونه BackupBuddy وردپرس در ۵ میلیون تلاش

???? ??????WordPress ???? Wordfence ??? ???? ??? ?? ?? ??? ??? ??? ?? ?? ?????? ?????? ?? ??? BackupBuddy ?????? ???? ?? ??? ??????????? ???[?].

??? ???? ?? ??? ???? ???[?]: “??? ?????????? ??? ????? ?? ???? ??????? ????????? ????? ?????? ?? ???????? ?????? ?? ?? ???? ????????? ?????? ???? ?? ???????? ???? ??????? ???? ????.”

BackupBuddy ?? ??????? ??? ????? ?? ?????? ?? ?? ?? ??? ?????? ??? ?? ???? ???????? ?????? ???????? ??? ?????? ??????? ???????? ??????? ? ???????? ???????? ? ????? ???? ??????? ???? ????.

????? ??? ?????? ?? ??? ?????? ???? ?????? ??? ???? ????? ???? ?? ??? ??? (CVE-2022-31474? ?????? CVSS: 7.5) ?? ???????? ??????? ?? ??????? ????? ????????. ?? ???? ????? ???????? ?? ? ??????? ???? ????? ??? ???.

??? ???? ???? ?? ????? ?? ??? Local Directory Copy ???? ?? ???? ????? ?? ??? ???? ?? ???????? ??????? ????? ??? ???. ??? ???? Wordfence? ??? ?????????? ????? ?? ?????????? ????? ??? ?? ?? ?? ???? ????? ????? ???? ????? ?????? ?? ???? ?????? ?? ??? ???? ?????? ???.

?????? ????? ?? ???? ??? ??? ?? ???? ?? ?????????? ???? ?? ??? ??????? ? ????? ??????????? ?? ?? ????? ??? ???.

??????????? ??? ??????? iThemes? ???????[?]: «??? ?????????? ???????? ?? ????? ????? ??? ?????? ?? ????? ?? ??? ???? ??? ?? ?? ??? ?????? ??? ??????????? ???? ?????? ???. “??? ???????? ???? ???? wp-config.php ?????? ? ???? ?? ??????? ???? ???? ???????? ???? ????? /etc/passwd ????.”

Wordfence ???????? ??? ?? ??? ???? ???? CVE-2022-31474 ?? ?? ??? ???? ???? ?? ? ????? ?? ??? ?????? ???? ?? ?? ???? ????? ?????????? ????? ???? ???. ???? ???????? ??? ???????? ???????? ??? ?? ???????:

• /etc/passwd
• /wp-config.php
• .my.cnf
• .accesshash

?? ??????? ?????? BackupBuddy ????? ?????? ?? ??? ?????? ?? ?? ????? ???? ????? ????. ??? ??????? ????? ???? ?? ???? ??? ?? ??? ?????? ?????? ????? ?????? ??? ???? ?????? ???? ?? ????? ????? Salts ?????? ?? ????? ???? ? ??????? API ????????? ?? wp-config.php ?? ????????.

?????

[?] https://ithemes.com/backupbuddy

[?] https://www.wordfence.com/blog/2022/09/psa-nearly-5-million-attacks-blocked-targeting-0-day-in-backupbuddy-plugin

[?] https://ithemes.com/blog/wordpress-vulnerability-report-special-edition-september-6-2022-backupbuddy

[?] https://thehackernews.com/2022/09/hackers-exploit-zero-day-in-wordpress.html

پویش #دو_درجه_کمتر