بهرهبرداری هکرها از آسیبپذیری WordPress Elementor Pro: میلیونها سایت در معرض خطر!
????? ????? ?????? ?????? ???? ?? ?? ?????????? ?????? ?????? ????????? ?? ?????? ?????? ??????? Elementor Pro ???? ?????? ??????????? ???????.
??? ??? ?? ???????? ?? ???? ????? ?????? ????? ????? ??????? ???????? ?????? ? ??? ?? ?? ?? ??? ????? ???? ??????. ?? ???? ?????? ?? ?? ?? ???? ????? ??? ???????? ??? ?????? ?? ?? ????????.
??? ???? ?? ??????????? ??????????? ??? ???[?]: “????? ?? ?????? ?? ????? WooCommerce ????? ????? ???.” ????? ??? ??????[?] ?? ?????? ??????? ?? ??? ?? ?? ?????? ???? ??????? ???.
??????????? ??????????? ?? ??? ??? ?? ??? ???? ?? ?? ????? ???????? ????? ?????? ?? ????? ?? ???? ??????? ?? ?? WooCommerce ?? ???? ???? ???? ?????? ???? ?? ?????? ????.
Patchstack ?? ?????? ?? ?? ???? ???? ???[?]: “??? ????? ?? ???? ?? ????? ???? ????? ?????? ?? ???? ??????? ?? (?? ???? ??????? ????) ???? ??? ? ??? ??????? ????? ?? ??? ???? ????? ??? ?? ?????? ?? ???? ?????? ????? ??? ?? ????? ????? ???????? ?????? ????.”.
“????????? ????? ???????? ???? ?? ?? ????? ???? ????? ????? ??????? ?? ?? ?????? ?? ?? ???? ???? ?? ???? ??????????? ????? ?? ???? ????? ???????.”
Jerome Bruandet? ???? ????? NinTechNet? ?? ??? ? ?????[?] ??? ?????????? ?? ?? ???? ???? ?????? ????.
Patchstack ?????? ???????? ??? ?? ??? ??? ?? ??? ???? ?? ??? ??????? ?? ????? ???? IP ?? ??? ???????? ???????? ????? PHP ? ZIP ?????? ?? ?????? ???? ??????????? ???? ???????.
?? ??????? ?????? Elementor Pro ????? ?????? ???? ???? ??????? ???????? ?? ???? ??? ?? ???? ?????? ?? ?????? ?? ????? ???? ???? ??????????? ????.
??? ????? ??? ?? ?? ??? ?????????? ???? ?? ?????? Essential Addons for Elementor ???? ?? ?????????? ????? ???[?]? ????? ?????? ?? ???????? ???? ?? ????? ?? ?????? ?? ??????????? ?? ???? ??? ???.
???? ?????? ?????? ??????????????? ??????? ?? ???? ????? ??? ???? ?? ??????? ??? ?? ?????? ?????????? WooCommerce ????? ???[?] ?? ?? ??????? ????? ???? ???? ????? ?????? ?? ?? ???????? ????????? ?????? ?????? ????? ?????.
?????
[?] https://elementor.com/pro/changelog/#:~:text=Loop%20Grid%20widget-,3.11.7%20%2D%202023%2D03%2D22,-Tweak%3A%20Improved%20code
[?] https://patchstack.com/articles/critical-elementor-pro-vulnerability-exploited
[?] https://blog.nintechnet.com/high-severity-vulnerability-fixed-in-wordpress-elementor-pro-plugin
[?] https://apa.aut.ac.ir/?p=8705
[?] https://thehackernews.com/2023/03/critical-woocommerce-payments-plugin.html
[?] https://thehackernews.com/2023/04/hackers-exploiting-wordpress-elementor.html
??????? :
???? ??????
???? :
