falha crítica DEIXA MAIS DE 1.000.000 de sites em risco

[{"selector":"#anim-3c79f4b5-f27c-47b3-b2f4-0fb4b5aefcd6","keyframes":{"opacity":[0,1]},"delay":250,"duration":2000,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-ef910dce-73ac-4c01-ab7b-cb5c967e982e","keyframes":{"opacity":[0,1]},"delay":500,"duration":2000,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-6a170cd0-d5d0-4096-8c7f-1444d27b6375","keyframes":{"opacity":[0,1]},"delay":1500,"duration":2000,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-7c3e1b64-fc07-41f1-991d-107a890d9dfe","keyframes":{"opacity":[0,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] Cybersecurity Plus

VULNERABILIDADE DE SEGURANÇA NO NINJA FORMS

[{"selector":"#anim-59f8c7ac-e450-4ac1-991c-28586352c0fb","keyframes":{"transform":["translate3d(-145.98539%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-ac697c5d-8000-43c5-9fcc-8ba7ac5cd594","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-4c36562f-fe4b-46c8-a69d-f2f0f84da77d","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}] [{"selector":"#anim-657ef12d-51ec-4763-b324-6baf9a726fbc","keyframes":{"transform":["translate3d(-116.84211%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-a7a5c562-a38b-4920-bb74-54b1ee82f28b","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-3680028c-32e6-46ef-aa27-6dfd4df80e84","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}] [{"selector":"#anim-d62b9f70-1b7d-44b4-aa0b-9e8122640cd6","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-989ce2e2-17c0-4cd9-b6ca-04aaa897b078","keyframes":{"opacity":[0,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] Arrow

Quando aconteceu a falha

[{"selector":"#anim-bd067df8-8f28-437a-9d50-bdab417b6aa6","keyframes":{"transform":["translate3d(-116.84211%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-18fff688-8088-471e-8931-8723da801f14","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-0ac13bd1-89ef-4fb5-b793-93b345a0e2dc","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}] [{"selector":"#anim-07dd43fb-d3b1-48b5-963d-e5c681c9ac89","keyframes":{"opacity":[0,1]},"delay":500,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-5d6accaa-4f49-42b8-b3e1-085ca1fd15b0","keyframes":{"opacity":[0,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-a0e4f892-9a27-4e71-bed9-ec62ab620f31","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] Dot

RISCOS PARA SITES QUE AINDA NÃO ATUALIZARAM O PLUGIN NINJA FORMS

[{"selector":"#anim-8eea02a9-f68d-4884-b8fc-04e009350bc9","keyframes":{"transform":["translate3d(-118.59649%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-42854417-4d6e-48ed-98c3-08f6762ed606","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-489bab75-fda8-4982-ad90-5c309184c6d4","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}] [{"selector":"#anim-0b6f2044-1562-428f-bd91-c16dc581bc82","keyframes":{"opacity":[0,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-20bb8098-81d1-491b-bce7-cb48e4d41fbd","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-cf6b0d7b-52c6-418e-9f3a-238eab775a76","keyframes":{"transform":["translate3d(-117.43421%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] Dot - Acesso de Administrador ao WordPress - Comprometimento do Servidor - Credenciais/Senhas expostas Green Star

entendendo a falha crítica

[{"selector":"#anim-788a9257-3244-455d-95f8-52071801cfec","keyframes":{"transform":["translate3d(-120.70176%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-a5774a9d-77d7-4613-8cc7-880b4360a70c","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-d9933310-5124-4ae7-82de-1fdfcbdbe6c7","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}] [{"selector":"#anim-916b0e76-c0ec-4c6d-ac55-8ab66f982a14","keyframes":{"opacity":[0,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-5955e36e-65c2-4196-816e-06da64301e55","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-da2a6a4a-234f-449f-b0e9-855eb500cd68","keyframes":{"transform":["translate3d(-125.89642%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] Dot A exploração bem-sucedida da falha pode permitir que um invasor alcance a execução remota de código e assuma completamente um site WordPress vulnerável.

report do wordfence

[{"selector":"#anim-ab6ee9e3-aa33-491b-9057-c729a3963b73","keyframes":{"transform":["translate3d(-118.59649%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-5d8524a1-a778-49b6-ab3b-48b889b76973","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-1fea7afa-511c-4d0b-96d5-84688189a2c5","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}] [{"selector":"#anim-becd3d48-44a3-491f-a376-92dcf5b70d1d","keyframes":{"opacity":[0,1]},"delay":500,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-e1d47d54-6309-43c7-936d-908b40bece5a","keyframes":{"opacity":[0,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] Dot

730.000 sites já atualiuzaram o plugin

[{"selector":"#anim-dfb78beb-5cd8-489e-8c41-4fb3b2ea79bb","keyframes":{"opacity":[0,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-f4ecdd38-1050-48b2-9c2e-b263582a4fd2","keyframes":{"opacity":[1,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-79ad8aba-8d1e-47f5-b365-80a4bfebb0b0","keyframes":{"transform":["scale(3)","scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}]

730.000 sites já atualiuzaram o plugin

[{"selector":"#anim-8934539c-c320-4b44-880f-34bb54d3dd58","keyframes":{"opacity":[0,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-b349fad6-0175-4aaa-a025-e12dee864cae","keyframes":{"transform":["translate3d(124.82517%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-288fed07-79ab-4625-9769-90d0ee84d82a","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-a7eae17b-bf5e-4783-8caf-390038f6b9e8","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}] De acordo com as estatísticas de downloads do Ninja Forms , a atualização de segurança foi lançada mais de 730.000 vezes desde que o patch foi lançado. Se o plug-in ainda não foi atualizado automaticamente para a versão corrigida, você também pode aplicar manualmente a atualização de segurança do painel (a versão mais recente protegida contra ataques é 3.6.11 ).

Não acredite em Papai Noel

[{"selector":"#anim-9ab4a955-472b-4f71-987f-94fd1e1025c9","keyframes":{"opacity":[0,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-7e008ce3-2f6f-4a42-a0ff-97befd751c08","keyframes":{"opacity":[0,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-6b22e7d6-d633-4e13-92dd-77ea2e83d69f","keyframes":[{"offset":0,"transform":"translate3d(0, -355.55549%, 0)","easing":"cubic-bezier(.5, 0, 1, 1)"},{"offset":0.29,"transform":"translate3d(0, 0%, 0)","easing":"cubic-bezier(0, 0, .5, 1)"},{"offset":0.45,"transform":"translate3d(0, -99.982203788%, 0)","easing":"cubic-bezier(.5, 0, 1, 1)"},{"offset":0.61,"transform":"translate3d(0, 0%, 0)","easing":"cubic-bezier(0, 0, .5, 1)"},{"offset":0.71,"transform":"translate3d(0, -33.991104844000006%, 0)","easing":"cubic-bezier(.5, 0, 1, 1)"},{"offset":0.8,"transform":"translate3d(0, 0%, 0)","easing":"cubic-bezier(0, 0, .5, 1)"},{"offset":0.85,"transform":"translate3d(0, -12.764442091000001%, 0)","easing":"cubic-bezier(.5, 0, 1, 1)"},{"offset":0.92,"transform":"translate3d(0, 0%, 0)","easing":"cubic-bezier(0, 0, .5, 1)"},{"offset":0.96,"transform":"translate3d(0, -5.546665644%, 0)","easing":"cubic-bezier(.5, 0, 1, 1)"},{"offset":1,"transform":"translate3d(0, 0%, 0)","easing":"cubic-bezier(0, 0, .5, 1)"}],"delay":0,"duration":1000,"fill":"both"}] [{"selector":"#anim-18f96509-fc73-4d6d-a154-b4f77ee18add","keyframes":[{"offset":0,"transform":"translate3d(0, -455.55542%, 0)","easing":"cubic-bezier(.5, 0, 1, 1)"},{"offset":0.29,"transform":"translate3d(0, 0%, 0)","easing":"cubic-bezier(0, 0, .5, 1)"},{"offset":0.45,"transform":"translate3d(0, -128.102184104%, 0)","easing":"cubic-bezier(.5, 0, 1, 1)"},{"offset":0.61,"transform":"translate3d(0, 0%, 0)","easing":"cubic-bezier(0, 0, .5, 1)"},{"offset":0.71,"transform":"translate3d(0, -43.551098152%, 0)","easing":"cubic-bezier(.5, 0, 1, 1)"},{"offset":0.8,"transform":"translate3d(0, 0%, 0)","easing":"cubic-bezier(0, 0, .5, 1)"},{"offset":0.85,"transform":"translate3d(0, -16.354439578%, 0)","easing":"cubic-bezier(.5, 0, 1, 1)"},{"offset":0.92,"transform":"translate3d(0, 0%, 0)","easing":"cubic-bezier(0, 0, .5, 1)"},{"offset":0.96,"transform":"translate3d(0, -7.106664552%, 0)","easing":"cubic-bezier(.5, 0, 1, 1)"},{"offset":1,"transform":"translate3d(0, 0%, 0)","easing":"cubic-bezier(0, 0, .5, 1)"}],"delay":800,"duration":1600,"fill":"both"}] [{"selector":"#anim-e67c72d3-bbd6-490d-b6f8-292e3fceed2d","keyframes":{"opacity":[0,1]},"delay":1200,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] Dot

Seja WPRaiz

[{"selector":"#anim-bc7dd0e2-7765-484c-8c54-0cd8a22fbdf8","keyframes":[{"offset":0,"transform":"translate3d(0, -255.15876%, 0)","easing":"cubic-bezier(.5, 0, 1, 1)"},{"offset":0.29,"transform":"translate3d(0, 0%, 0)","easing":"cubic-bezier(0, 0, .5, 1)"},{"offset":0.45,"transform":"translate3d(0, -71.75064331200001%, 0)","easing":"cubic-bezier(.5, 0, 1, 1)"},{"offset":0.61,"transform":"translate3d(0, 0%, 0)","easing":"cubic-bezier(0, 0, .5, 1)"},{"offset":0.71,"transform":"translate3d(0, -24.393177456%, 0)","easing":"cubic-bezier(.5, 0, 1, 1)"},{"offset":0.8,"transform":"translate3d(0, 0%, 0)","easing":"cubic-bezier(0, 0, .5, 1)"},{"offset":0.85,"transform":"translate3d(0, -9.160199484%, 0)","easing":"cubic-bezier(.5, 0, 1, 1)"},{"offset":0.92,"transform":"translate3d(0, 0%, 0)","easing":"cubic-bezier(0, 0, .5, 1)"},{"offset":0.96,"transform":"translate3d(0, -3.980476656%, 0)","easing":"cubic-bezier(.5, 0, 1, 1)"},{"offset":1,"transform":"translate3d(0, 0%, 0)","easing":"cubic-bezier(0, 0, .5, 1)"}],"delay":0,"duration":1600,"fill":"both"}] [{"selector":"#anim-d0f48a40-0495-4a7f-a71d-dc8fa188538e","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}]

wpraiz.com.br

[{"selector":"#anim-dbe7acca-c72a-4311-b23c-6e096989011f","keyframes":[{"offset":0,"transform":"translate3d(0, -328.01937%, 0)","easing":"cubic-bezier(.5, 0, 1, 1)"},{"offset":0.29,"transform":"translate3d(0, 0%, 0)","easing":"cubic-bezier(0, 0, .5, 1)"},{"offset":0.45,"transform":"translate3d(0, -92.239046844%, 0)","easing":"cubic-bezier(.5, 0, 1, 1)"},{"offset":0.61,"transform":"translate3d(0, 0%, 0)","easing":"cubic-bezier(0, 0, .5, 1)"},{"offset":0.71,"transform":"translate3d(0, -31.358651771999998%, 0)","easing":"cubic-bezier(.5, 0, 1, 1)"},{"offset":0.8,"transform":"translate3d(0, 0%, 0)","easing":"cubic-bezier(0, 0, .5, 1)"},{"offset":0.85,"transform":"translate3d(0, -11.775895383%, 0)","easing":"cubic-bezier(.5, 0, 1, 1)"},{"offset":0.92,"transform":"translate3d(0, 0%, 0)","easing":"cubic-bezier(0, 0, .5, 1)"},{"offset":0.96,"transform":"translate3d(0, -5.117102171999999%, 0)","easing":"cubic-bezier(.5, 0, 1, 1)"},{"offset":1,"transform":"translate3d(0, 0%, 0)","easing":"cubic-bezier(0, 0, .5, 1)"}],"delay":0,"duration":1600,"fill":"both"}] [{"selector":"#anim-ca78a490-e219-4ee0-8c6d-4a897fafe860","keyframes":{"opacity":[0,1]},"delay":1000,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-3968e741-a1be-4ff3-be52-04b6b2d1ef07","keyframes":[{"offset":0,"transform":"translate3d(0, -3321.10715%, 0)","easing":"cubic-bezier(.5, 0, 1, 1)"},{"offset":0.29,"transform":"translate3d(0, 0%, 0)","easing":"cubic-bezier(0, 0, .5, 1)"},{"offset":0.45,"transform":"translate3d(0, -933.89533058%, 0)","easing":"cubic-bezier(.5, 0, 1, 1)"},{"offset":0.61,"transform":"translate3d(0, 0%, 0)","easing":"cubic-bezier(0, 0, .5, 1)"},{"offset":0.71,"transform":"translate3d(0, -317.49784354%, 0)","easing":"cubic-bezier(.5, 0, 1, 1)"},{"offset":0.8,"transform":"translate3d(0, 0%, 0)","easing":"cubic-bezier(0, 0, .5, 1)"},{"offset":0.85,"transform":"translate3d(0, -119.227746685%, 0)","easing":"cubic-bezier(.5, 0, 1, 1)"},{"offset":0.92,"transform":"translate3d(0, 0%, 0)","easing":"cubic-bezier(0, 0, .5, 1)"},{"offset":0.96,"transform":"translate3d(0, -51.80927154%, 0)","easing":"cubic-bezier(.5, 0, 1, 1)"},{"offset":1,"transform":"translate3d(0, 0%, 0)","easing":"cubic-bezier(0, 0, .5, 1)"}],"delay":0,"duration":1600,"fill":"both"}] [{"selector":"#anim-44d4beeb-f3f4-4b2e-8b15-242e593e9045","keyframes":{"opacity":[0,1]},"delay":2000,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] visite nosso site

falha crítica DEIXA MAIS DE 1.000.000 de sites em risco

VULNERABILIDADE DE SEGURANÇA NO NINJA FORMS

Sites WordPress usando Ninja Forms, um plugin de criação de formulários com mais de 1 milhão de instalações

Quando aconteceu a falha

A vulnerabilidade foi resolvida no início desta semana com o lançamento das versões 3.0.34.2, 3.1.10, 3.2.28, 3.3.21.4, 3.4.34.2, 3.5.8.4 e 3.6.11 do Ninja Forms.

RISCOS PARA SITES QUE AINDA NÃO ATUALIZARAM O PLUGIN NINJA FORMS

entendendo a falha crítica

report do wordfence

De acordo com o Wordfence, o bug "possibilitou que invasores não autenticados chamassem um número limitado de métodos em várias classes Ninja Forms, incluindo um método que não serializava o conteúdo fornecido pelo usuário, resultando em Injeção de Objeto".

730.000 sites já atualiuzaram o plugin

730.000 sites já atualiuzaram o plugin

Não acredite em Papai Noel

Saia da Nutelagem

Utilize plugins originais

Seja WPRaiz

wpraiz.com.br

TUTORIAIS WORDPRESS

FORMULÁRIO CAMPEÃO INTERNACIONAL DO ELEMENTOR

ACESSE