Olay Raporu · USOM

TR-26-0215 (WordPress Eklenti Güvenlik Bildirimi)

Dil: TR USOM #11321 Aktif

Genel Bilgi

WordPress'in bazı eklentilerinde güvenlik zafiyeti tespit edilmiştir.

Etki

Mevcut güvenlik açıklıkları nedeniyle WordPress içerik yönetim sistemini kullanan websitelerinin siber saldırganlar tarafından ele geçirilmesi veya içeriğin tahribata uğratılması ihtimal dâhilindedir. CVE kodları şöyledir:

CVE-2026-4935, CVE-2026-7448, CVE-2026-7332, CVE-2026-7457, CVE-2026-6672, CVE-2026-6344, CVE-2026-7330, CVE-2026-5127, CVE-2026-7652, CVE-2026-8198, CVE-2022-50970, CVE-2022-50961, CVE-2022-50960, CVE-2022-50959, CVE-2022-50958, CVE-2022-50956, CVE-2022-50955, CVE-2022-50954, CVE-2022-50949, CVE-2022-50947, CVE-2022-50946 ve CVE-2022-50945

Çözüm

Siber Güvenlik Başkanlığı ilgili dokümanın gözden geçirilmesi ve gerekli önlemlerin alınmasını tavsiye etmektedir.

Kaynaklar

https://www.wordfence.com/threat-intel/vulnerabilities/id/5c0f02ad-f5f1-42b1-8116-e391aaa85430?source=cve

https://www.wordfence.com/threat-intel/vulnerabilities/id/a2e802a6-d2f1-47cc-883a-89110e569168?source=cve

https://www.wordfence.com/threat-intel/vulnerabilities/id/cc815ef2-dd02-4faa-b202-dd1552f889db?source=cve

https://www.wordfence.com/threat-intel/vulnerabilities/id/436ab843-7729-4d57-9c9e-2ede2f101ddb?source=cve

https://plugins.trac.wordpress.org/browser/wp-auto-affiliate-links/tags/6.8.6/aal_stats.php#L225

https://plugins.trac.wordpress.org/browser/wp-auto-affiliate-links/tags/6.8.6/aal_stats.php#L278

https://plugins.trac.wordpress.org/browser/wp-auto-affiliate-links/tags/6.8.6/aal_stats.php#L304

https://plugins.trac.wordpress.org/browser/wp-auto-affiliate-links/tags/6.8.8/aal_stats.php#L225

https://plugins.trac.wordpress.org/browser/wp-auto-affiliate-links/tags/6.8.8/aal_stats.php#L278

https://plugins.trac.wordpress.org/browser/wp-auto-affiliate-links/tags/6.8.8/aal_stats.php#L304

https://plugins.trac.wordpress.org/browser/wp-auto-affiliate-links/trunk/aal_stats.php#L225

https://plugins.trac.wordpress.org/browser/wp-auto-affiliate-links/trunk/aal_stats.php#L278

https://plugins.trac.wordpress.org/browser/wp-auto-affiliate-links/trunk/aal_stats.php#L304

https://plugins.trac.wordpress.org/changeset/3519003/wp-auto-affiliate-links/trunk/aal_stats.php