{"id":853,"date":"2023-07-04T14:53:32","date_gmt":"2023-07-04T14:53:32","guid":{"rendered":"https:\/\/www.cert.hr\/novosti\/otkrivena-je-kriticna-ranjivost-ultimate-member-wordress-dodatka-zakrpe-nema\/"},"modified":"2026-11-04T08:52:35","modified_gmt":"2026-11-04T08:52:35","slug":"otkrivena-je-kriticna-ranjivost-ultimate-member-wordress-dodatka-zakrpe-nema","status":"publish","type":"post","link":"https:\/\/cert.hr\/en\/ranjivosti\/otkrivena-je-kriticna-ranjivost-ultimate-member-wordress-dodatka-zakrpe-nema\/","title":{"rendered":"Otkrivena je kriti\u010dna ranjivost &#8216;Ultimate Member&#8217; WordPress dodatka. Zakrpe nema."},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>'Ultimate Member' je dodatak koji omogu\u0107uje registraciju i upravljanje zajednicama na WordPress stranicama.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Kriti\u010dna ranjivost <strong>(<a href=\"https:\/\/cve.report\/CVE-2023-3460\" target=\"_blank\" rel=\"noreferrer noopener\">CVE-2023-3460<\/a>) <\/strong>'Ultimate Member' WordPress dodatka dobila je <strong>ocjenu 9.8<\/strong>. Ranjive su sve verzije dodatka koji broji vi\u0161e od 200 000 aktivnih instalacija.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Iskori\u0161tavanjem ove ranjivosti, <strong>napada\u010d mo\u017ee registrirati nove admin ra\u010dune.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ranjivost su poku\u0161ali otkloniti ve\u0107e nekoliko puta, ali jo\u0161 uvijek postoje mehanizmi za zaobila\u017eenje sigurnosnih mjera i njezino iskori\u0161tavanje.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Preporuka je ukloniti ovaj dodatak do izdavanja zakrpe.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Indikatori kompromitacije:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>pojava novih admin ra\u010duna<\/li><li>pojava korisni\u010dkih imena kao \u0161to su: wpenginer, wpadmins, wpengine_backup, se_brutal, segs_brutal<\/li><li>u logovima se pojavljuju IP adrese za koje je poznato da iskori\u0161tavaju ovu ranjivost (146.70.189[.]245, 103.187.5[.]128, 103.30.11[.]160, 103.30.11[.]146, and 172.70.147[.]176)<\/li><li>pojava korisni\u010dkih ra\u010duna s \"exelica[.]com\" domenom<\/li><li>instalirani su novi WordPress dodaci<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Ako je stranica kompromitirana, uklanjanje dodatka ne\u0107e rije\u0161iti problem. Potrebno je napraviti cjelovito skeniranje stranice i ukloniti sve potencijalne prijetnje koje je napada\u010d mogao postaviti.<\/p>\n\n\n\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6af19eba7b694&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6af19eba7b694\" class=\"wp-block-image size-large wp-lightbox-container\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"\/wp-content\/uploads\/2023\/07\/wordpress-upozorenje-1.png\" alt=\"\" class=\"wp-image-110953\"\/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewBox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>&#8216;Ultimate Member&#8217; je dodatak koji omogu\u0107uje registraciju i upravljanje zajednicama na WordPress stranicama. Kriti\u010dna ranjivost (CVE-2023-3460) &#8216;Ultimate Member&#8217; WordPress dodatka dobila je ocjenu 9.8. Ranjive su sve verzije dodatka koji broji vi\u0161e od 200 000 aktivnih instalacija. Iskori\u0161tavanjem ove ranjivosti, napada\u010d mo\u017ee registrirati nove admin ra\u010dune. Ranjivost su poku\u0161ali otkloniti ve\u0107e nekoliko puta, ali jo\u0161 [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":1348,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":[],"meta":{"_acf_changed":false,"footnotes":""},"categories":[27],"tags":[],"tema":[],"class_list":["post-853","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ranjivosti"],"acf":[],"_links":{"self":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/853","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/comments?post=853"}],"version-history":[{"count":1,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/853\/revisions"}],"predecessor-version":[{"id":1352,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/853\/revisions\/1352"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media\/1348"}],"wp:attachment":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media?parent=853"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/categories?post=853"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tags?post=853"},{"taxonomy":"tema","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tema?post=853"},{"taxonomy":"format","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/format?post=853"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}