{"id":253,"date":"2026-08-09T10:42:57","date_gmt":"2026-08-09T08:42:57","guid":{"rendered":"https:\/\/helloblog.io\/el\/bdthemes-supply-chain-epithesi-iocs-elegxos\/"},"modified":"2026-08-09T10:42:57","modified_gmt":"2026-08-09T08:42:57","slug":"bdthemes-supply-chain-epithesi-iocs-elegxos","status":"publish","type":"post","link":"https:\/\/helloblog.io\/el\/bdthemes-supply-chain-epithesi-iocs-elegxos\/","title":{"rendered":"BdThemes: \u03b5\u03c0\u03af\u03b8\u03b5\u03c3\u03b7 supply chain \u03bc\u03ad\u03c3\u03c9 \u03b4\u03b7\u03bb\u03b7\u03c4\u03b7\u03c1\u03b9\u03b1\u03c3\u03bc\u03ad\u03bd\u03bf\u03c5 API \u03ba\u03b1\u03b9 \u03ad\u03bb\u03b5\u03b3\u03c7\u03bf\u03c2 IoCs"},"content":{"rendered":"\n<p>\u039c\u03b9\u03b1 \u03c0\u03b1\u03c1\u03b1\u03b2\u03af\u03b1\u03c3\u03b7 \u03c3\u03c4\u03b7\u03bd \u03b1\u03bb\u03c5\u03c3\u03af\u03b4\u03b1 \u03b5\u03c6\u03bf\u03b4\u03b9\u03b1\u03c3\u03bc\u03bf\u03cd \u03c4\u03bf\u03c5 \u03bf\u03b9\u03ba\u03bf\u03c3\u03c5\u03c3\u03c4\u03ae\u03bc\u03b1\u03c4\u03bf\u03c2 BdThemes \u03b5\u03c0\u03ad\u03c4\u03c1\u03b5\u03c8\u03b5 \u03c4\u03b7\u03bd \u03b5\u03ba\u03c4\u03ad\u03bb\u03b5\u03c3\u03b7 \u03ba\u03b1\u03ba\u03cc\u03b2\u03bf\u03c5\u03bb\u03bf\u03c5 JavaScript \u03c3\u03b5 \u03b5\u03bd\u03b5\u03c1\u03b3\u03ad\u03c2 \u03c3\u03c5\u03bd\u03b5\u03b4\u03c1\u03af\u03b5\u03c2 \u03b4\u03b9\u03b1\u03c7\u03b5\u03b9\u03c1\u03b9\u03c3\u03c4\u03ce\u03bd WordPress. \u0397 \u03b5\u03c0\u03af\u03b8\u03b5\u03c3\u03b7 \u03b4\u03b5\u03bd \u03ac\u03bb\u03bb\u03b1\u03be\u03b5 \u03bf\u03cd\u03c4\u03b5 \u03ad\u03bd\u03b1 \u03b1\u03c1\u03c7\u03b5\u03af\u03bf \u03c3\u03c4\u03b1 \u03b1\u03c0\u03bf\u03b8\u03b5\u03c4\u03ae\u03c1\u03b9\u03b1 \u03c4\u03bf\u03c5 WordPress.org: \u03bf\u03b9 \u03b4\u03c1\u03ac\u03c3\u03c4\u03b5\u03c2 \u03b1\u03bb\u03bb\u03bf\u03af\u03c9\u03c3\u03b1\u03bd \u03b1\u03c0\u03bf\u03bc\u03b1\u03ba\u03c1\u03c5\u03c3\u03bc\u03ad\u03bd\u03b5\u03c2 \u03b1\u03c0\u03b1\u03bd\u03c4\u03ae\u03c3\u03b5\u03b9\u03c2 JSON \u03c0\u03bf\u03c5 \u03c4\u03c1\u03bf\u03c6\u03bf\u03b4\u03bf\u03c4\u03bf\u03cd\u03c3\u03b1\u03bd \u03b4\u03b9\u03b1\u03c6\u03b7\u03bc\u03b9\u03c3\u03c4\u03b9\u03ba\u03ac banners \u03c3\u03c4\u03bf <code>wp-admin<\/code>.<\/p>\n\n\n\n<p>\u0391\u03bd \u03c7\u03c1\u03b7\u03c3\u03b9\u03bc\u03bf\u03c0\u03bf\u03b9\u03b5\u03af\u03c4\u03b5 \u03ba\u03ac\u03c0\u03bf\u03b9\u03bf \u03b1\u03c0\u03cc \u03c4\u03b1 \u03b5\u03c0\u03b7\u03c1\u03b5\u03b1\u03b6\u03cc\u03bc\u03b5\u03bd\u03b1 plugins, \u03b1\u03bd\u03c4\u03b9\u03bc\u03b5\u03c4\u03c9\u03c0\u03af\u03c3\u03c4\u03b5 \u03c4\u03b7\u03bd \u03b5\u03b3\u03ba\u03b1\u03c4\u03ac\u03c3\u03c4\u03b1\u03c3\u03b7 \u03c9\u03c2 \u03c0\u03b9\u03b8\u03b1\u03bd\u03ce\u03c2 \u03c0\u03b1\u03c1\u03b1\u03b2\u03b9\u03b1\u03c3\u03bc\u03ad\u03bd\u03b7. \u0395\u03bb\u03ad\u03b3\u03be\u03c4\u03b5 \u03ac\u03bc\u03b5\u03c3\u03b1 \u03bb\u03bf\u03b3\u03b1\u03c1\u03b9\u03b1\u03c3\u03bc\u03bf\u03cd\u03c2, \u03b1\u03c1\u03c7\u03b5\u03af\u03b1 plugin, \u03c4\u03bf\u03bd \u03ba\u03b1\u03c4\u03ac\u03bb\u03bf\u03b3\u03bf Must-Use plugins \u03ba\u03b1\u03b9 \u03c4\u03b9\u03c2 \u03b5\u03c0\u03b9\u03bb\u03bf\u03b3\u03ad\u03c2 \u03c4\u03b7\u03c2 \u03b2\u03ac\u03c3\u03b7\u03c2 \u03b4\u03b5\u03b4\u03bf\u03bc\u03ad\u03bd\u03c9\u03bd \u03b3\u03b9\u03b1 \u03c4\u03bf\u03c5\u03c2 \u03b4\u03b5\u03af\u03ba\u03c4\u03b5\u03c2 \u03c0\u03b1\u03c1\u03b1\u03b2\u03af\u03b1\u03c3\u03b7\u03c2 \u03c0\u03bf\u03c5 \u03b1\u03ba\u03bf\u03bb\u03bf\u03c5\u03b8\u03bf\u03cd\u03bd.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u03a4\u03b9 \u03c3\u03c5\u03bd\u03ad\u03b2\u03b7 \u03ba\u03b1\u03b9 \u03b3\u03b9\u03b1\u03c4\u03af \u03b5\u03af\u03bd\u03b1\u03b9 \u03b4\u03b9\u03b1\u03c6\u03bf\u03c1\u03b5\u03c4\u03b9\u03ba\u03cc \u03b1\u03c0\u03cc \u03bc\u03b9\u03b1 \u03c3\u03c5\u03bd\u03b7\u03b8\u03b9\u03c3\u03bc\u03ad\u03bd\u03b7 \u03b5\u03c0\u03af\u03b8\u03b5\u03c3\u03b7 supply chain;<\/h2>\n\n\n\n<p>\u0397 BdThemes \u03b4\u03b9\u03b1\u03bd\u03ad\u03bc\u03b5\u03b9 plugins \u03c0\u03bf\u03c5 \u03c0\u03b5\u03c1\u03b9\u03bb\u03b1\u03bc\u03b2\u03ac\u03bd\u03bf\u03c5\u03bd \u03c4\u03bf \u03b5\u03c3\u03c9\u03c4\u03b5\u03c1\u03b9\u03ba\u03cc \u03c3\u03cd\u03c3\u03c4\u03b7\u03bc\u03b1 <em>Biggopti<\/em>. \u03a4\u03bf \u03c3\u03cd\u03c3\u03c4\u03b7\u03bc\u03b1 \u03b1\u03bd\u03b1\u03ba\u03c4\u03ac promotional banners \u03b1\u03c0\u03cc API \u03ba\u03b1\u03b9 \u03c4\u03b1 \u03b5\u03bc\u03c6\u03b1\u03bd\u03af\u03b6\u03b5\u03b9 \u03c3\u03c4\u03bf\u03bd \u03c0\u03af\u03bd\u03b1\u03ba\u03b1 \u03b4\u03b9\u03b1\u03c7\u03b5\u03af\u03c1\u03b9\u03c3\u03b7\u03c2 \u03c4\u03bf\u03c5 WordPress. \u03a4\u03bf API \u03b4\u03b5\u03bd \u03b5\u03be\u03c5\u03c0\u03b7\u03c1\u03b5\u03c4\u03b5\u03af\u03c4\u03b1\u03b9 \u03b1\u03c0\u03cc \u03b4\u03c5\u03bd\u03b1\u03bc\u03b9\u03ba\u03cc application server: \u03b2\u03b1\u03c3\u03af\u03b6\u03b5\u03c4\u03b1\u03b9 \u03c3\u03b5 \u03c3\u03c4\u03b1\u03c4\u03b9\u03ba\u03ac \u03b1\u03c1\u03c7\u03b5\u03af\u03b1 JSON \u03c3\u03b5 bucket \u03c4\u03bf\u03c5 DigitalOcean Spaces, \u03c0\u03af\u03c3\u03c9 \u03b1\u03c0\u03cc Cloudflare.<\/p>\n\n\n\n<p>\u039f\u03b9 \u03b4\u03c1\u03ac\u03c3\u03c4\u03b5\u03c2 \u03b1\u03c0\u03ad\u03ba\u03c4\u03b7\u03c3\u03b1\u03bd \u03b4\u03b9\u03ba\u03b1\u03af\u03c9\u03bc\u03b1 \u03b5\u03b3\u03b3\u03c1\u03b1\u03c6\u03ae\u03c2 \u03c3\u03c4\u03bf bucket \u03ba\u03b1\u03b9 \u03b1\u03bd\u03c4\u03b9\u03ba\u03b1\u03c4\u03ad\u03c3\u03c4\u03b7\u03c3\u03b1\u03bd \u03bd\u03cc\u03bc\u03b9\u03bc\u03b5\u03c2 \u03b1\u03c0\u03b1\u03bd\u03c4\u03ae\u03c3\u03b5\u03b9\u03c2 JSON \u03bc\u03b5 \u03b5\u03b9\u03b4\u03b9\u03ba\u03ac \u03ba\u03b1\u03c4\u03b1\u03c3\u03ba\u03b5\u03c5\u03b1\u03c3\u03bc\u03ad\u03bd\u03b5\u03c2 \u03c4\u03b9\u03bc\u03ad\u03c2. \u0397 \u03b5\u03c5\u03c0\u03ac\u03b8\u03b5\u03b9\u03b1 XSS (Cross-Site Scripting, \u03b5\u03ba\u03c4\u03ad\u03bb\u03b5\u03c3\u03b7 script \u03c0\u03bf\u03c5 \u03ad\u03c7\u03b5\u03b9 \u03b5\u03b9\u03c3\u03b1\u03c7\u03b8\u03b5\u03af \u03c3\u03b5 \u03c3\u03b5\u03bb\u03af\u03b4\u03b1) \u03c5\u03c0\u03ae\u03c1\u03c7\u03b5 \u03ae\u03b4\u03b7 \u03c3\u03c4\u03bf\u03bd \u03ba\u03ce\u03b4\u03b9\u03ba\u03b1 \u03c0\u03bf\u03c5 \u03b5\u03bc\u03c6\u03ac\u03bd\u03b9\u03b6\u03b5 \u03c4\u03bf JSON. \u0388\u03c4\u03c3\u03b9, \u03c4\u03bf \u03ba\u03b1\u03ba\u03cc\u03b2\u03bf\u03c5\u03bb\u03bf script \u03b5\u03ba\u03c4\u03b5\u03bb\u03bf\u03cd\u03bd\u03c4\u03b1\u03bd \u03c3\u03b9\u03c9\u03c0\u03b7\u03c1\u03ac \u03c3\u03c4\u03bf\u03bd browser \u03ba\u03ac\u03b8\u03b5 \u03c3\u03c5\u03bd\u03b4\u03b5\u03b4\u03b5\u03bc\u03ad\u03bd\u03bf\u03c5 \u03b4\u03b9\u03b1\u03c7\u03b5\u03b9\u03c1\u03b9\u03c3\u03c4\u03ae, \u03c3\u03b5 \u03ba\u03ac\u03b8\u03b5 \u03c6\u03cc\u03c1\u03c4\u03c9\u03c3\u03b7 \u03c3\u03b5\u03bb\u03af\u03b4\u03b1\u03c2 \u03c4\u03bf\u03c5 <code>wp-admin<\/code>.<\/p>\n\n\n\n<p>\u0394\u03b5\u03bd \u03b1\u03c0\u03b1\u03b9\u03c4\u03ae\u03b8\u03b7\u03ba\u03b5 \u03b5\u03bd\u03b7\u03bc\u03ad\u03c1\u03c9\u03c3\u03b7 plugin \u03b3\u03b9\u03b1 \u03bd\u03b1 \u03bc\u03bf\u03bb\u03c5\u03bd\u03b8\u03b5\u03af \u03ad\u03bd\u03b1 site \u03ba\u03b1\u03b9 \u03b4\u03b5\u03bd \u03ac\u03bb\u03bb\u03b1\u03be\u03b5 \u03b1\u03c1\u03c7\u03b5\u03af\u03bf \u03c3\u03c4\u03bf\u03bd \u03b4\u03af\u03c3\u03ba\u03bf. \u0395\u03c0\u03bf\u03bc\u03ad\u03bd\u03c9\u03c2, \u03bf\u03b9 \u03ad\u03bb\u03b5\u03b3\u03c7\u03bf\u03b9 \u03b1\u03ba\u03b5\u03c1\u03b1\u03b9\u03cc\u03c4\u03b7\u03c4\u03b1\u03c2 \u03b1\u03c1\u03c7\u03b5\u03af\u03c9\u03bd \u03b4\u03b5\u03bd \u03ad\u03b2\u03bb\u03b5\u03c0\u03b1\u03bd \u03c4\u03b7\u03bd \u03b1\u03c1\u03c7\u03b9\u03ba\u03ae \u03b5\u03ba\u03c4\u03ad\u03bb\u03b5\u03c3\u03b7, \u03b5\u03bd\u03ce \u03ba\u03b1\u03b9 \u03ad\u03bd\u03b1 Web Application Firewall \u03b5\u03af\u03c7\u03b5 \u03b5\u03bb\u03ac\u03c7\u03b9\u03c3\u03c4\u03b7 \u03bf\u03c1\u03b1\u03c4\u03cc\u03c4\u03b7\u03c4\u03b1 \u03c3\u03b5 \u03b1\u03c5\u03c4\u03ae \u03c4\u03b7 \u03c1\u03bf\u03ae \u03c0\u03bf\u03c5 \u03b5\u03bd\u03b5\u03c1\u03b3\u03bf\u03c0\u03bf\u03b9\u03bf\u03cd\u03bd\u03c4\u03b1\u03bd \u03bc\u03ad\u03c3\u03b1 \u03c3\u03c4\u03b7\u03bd \u03b1\u03c5\u03b8\u03b5\u03bd\u03c4\u03b9\u03ba\u03bf\u03c0\u03bf\u03b9\u03b7\u03bc\u03ad\u03bd\u03b7 \u03c3\u03c5\u03bd\u03b5\u03b4\u03c1\u03af\u03b1 \u03c4\u03bf\u03c5 \u03b4\u03b9\u03b1\u03c7\u03b5\u03b9\u03c1\u03b9\u03c3\u03c4\u03ae.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u03a4\u03b1 \u03b5\u03c0\u03b7\u03c1\u03b5\u03b1\u03b6\u03cc\u03bc\u03b5\u03bd\u03b1 plugins<\/h2>\n\n\n\n<p>\u03a3\u03c4\u03b9\u03c2 7 \u0391\u03c5\u03b3\u03bf\u03cd\u03c3\u03c4\u03bf\u03c5 2026, \u03c4\u03b1 \u03c0\u03b1\u03c1\u03b1\u03ba\u03ac\u03c4\u03c9 plugins \u03ad\u03ba\u03bb\u03b5\u03b9\u03c3\u03b1\u03bd \u03c0\u03c1\u03bf\u03c3\u03c9\u03c1\u03b9\u03bd\u03ac \u03b1\u03c0\u03cc \u03c4\u03bf\u03bd \u03ba\u03b1\u03c4\u03ac\u03bb\u03bf\u03b3\u03bf plugins \u03c4\u03bf\u03c5 WordPress, \u03bc\u03ad\u03c7\u03c1\u03b9 \u03bd\u03b1 \u03bf\u03bb\u03bf\u03ba\u03bb\u03b7\u03c1\u03c9\u03b8\u03b5\u03af \u03bf \u03ad\u03bb\u03b5\u03b3\u03c7\u03bf\u03c2:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>Element Pack Addons for Elementor &#8211; slug <code>bdthemes-element-pack-lite<\/code><\/li>\n\n\n<li>Prime Slider Addons for Elementor &#8211; slug <code>bdthemes-prime-slider-lite<\/code><\/li>\n\n\n<li>Pixel Gallery Addons for Elementor &#8211; slug <code>pixel-gallery<\/code><\/li>\n\n\n<li>Ultimate Post Kit Addons for Elementor &#8211; slug <code>ultimate-post-kit<\/code><\/li>\n\n\n<li>Ultimate Store Kit &#8211; Addon For WooCommerce, EDD and Elementor &#8211; slug <code>ultimate-store-kit<\/code><\/li>\n\n\n<li>Live Copy Paste for Elementor &#8211; slug <code>live-copy-paste<\/code><\/li>\n\n\n<li>Smart Admin Assistant &#8211; slug <code>smart-admin-assistant<\/code><\/li>\n\n<\/ul>\n\n\n\n<p>\u0397 \u03b5\u03c5\u03c0\u03ac\u03b8\u03b5\u03b9\u03b1 \u03b1\u03c6\u03bf\u03c1\u03ac \u03b4\u03b9\u03ac\u03c6\u03bf\u03c1\u03b5\u03c2 \u03b5\u03ba\u03b4\u03cc\u03c3\u03b5\u03b9\u03c2 \u03c4\u03b7\u03c2 \u03b2\u03b9\u03b2\u03bb\u03b9\u03bf\u03b8\u03ae\u03ba\u03b7\u03c2 Biggopti \u03ba\u03b1\u03b9 \u03ad\u03c7\u03b5\u03b9 \u03b2\u03b1\u03b8\u03bc\u03bf\u03bb\u03bf\u03b3\u03af\u03b1 CVSS 5.4\/10, \u03b4\u03b7\u03bb\u03b1\u03b4\u03ae \u03bc\u03ad\u03c4\u03c1\u03b9\u03b1 \u03c3\u03bf\u03b2\u03b1\u03c1\u03cc\u03c4\u03b7\u03c4\u03b1. \u0394\u03b5\u03bd \u03c5\u03c0\u03ae\u03c1\u03c7\u03b5 patch \u03ba\u03b1\u03c4\u03ac \u03c4\u03bf\u03bd \u03c7\u03c1\u03cc\u03bd\u03bf \u03c4\u03b7\u03c2 \u03b4\u03b7\u03bc\u03bf\u03c3\u03af\u03b5\u03c5\u03c3\u03b7\u03c2 \u03c4\u03bf\u03c5 \u03c0\u03b5\u03c1\u03b9\u03c3\u03c4\u03b1\u03c4\u03b9\u03ba\u03bf\u03cd. \u0397 \u03c0\u03c1\u03b1\u03ba\u03c4\u03b9\u03ba\u03ae \u03b5\u03c0\u03af\u03c0\u03c4\u03c9\u03c3\u03b7 \u03cc\u03bc\u03c9\u03c2 \u03b5\u03af\u03bd\u03b1\u03b9 \u03c0\u03bf\u03bb\u03cd \u03c3\u03bf\u03b2\u03b1\u03c1\u03cc\u03c4\u03b5\u03c1\u03b7 \u03b1\u03c0\u03cc \u03c4\u03b7 \u03b2\u03b1\u03b8\u03bc\u03bf\u03bb\u03bf\u03b3\u03af\u03b1 \u03c4\u03b7\u03c2 \u03bc\u03b5\u03bc\u03bf\u03bd\u03c9\u03bc\u03ad\u03bd\u03b7\u03c2 XSS, \u03b5\u03c0\u03b5\u03b9\u03b4\u03ae \u03bf \u03b5\u03c0\u03b9\u03c4\u03b9\u03b8\u03ad\u03bc\u03b5\u03bd\u03bf\u03c2 \u03b5\u03ba\u03c4\u03b5\u03bb\u03b5\u03af \u03ba\u03ce\u03b4\u03b9\u03ba\u03b1 \u03c9\u03c2 \u03ae\u03b4\u03b7 \u03c3\u03c5\u03bd\u03b4\u03b5\u03b4\u03b5\u03bc\u03ad\u03bd\u03bf\u03c2 administrator.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u0397 \u03c4\u03b5\u03c7\u03bd\u03b9\u03ba\u03ae \u03b1\u03b9\u03c4\u03af\u03b1: \u03bc\u03b7 \u03b4\u03b9\u03b1\u03c6\u03c5\u03b3\u03ae \u03c4\u03bf\u03c5 <code>display_id<\/code><\/h2>\n\n\n\n<p>\u039a\u03ac\u03b8\u03b5 plugin \u03c0\u03bf\u03c5 \u03c7\u03c1\u03b7\u03c3\u03b9\u03bc\u03bf\u03c0\u03bf\u03b9\u03b5\u03af Biggopti \u03c6\u03bf\u03c1\u03c4\u03ce\u03bd\u03b5\u03b9 JavaScript \u03c3\u03c4\u03bf hook <code>admin_init<\/code>. \u03a4\u03bf asset \u03b5\u03ba\u03c4\u03b5\u03bb\u03b5\u03af\u03c4\u03b1\u03b9 \u03c7\u03c9\u03c1\u03af\u03c2 \u03c0\u03c1\u03bf\u03cb\u03c0\u03bf\u03b8\u03ad\u03c3\u03b5\u03b9\u03c2 \u03c3\u03b5 \u03ba\u03ac\u03b8\u03b5 \u03c6\u03cc\u03c1\u03c4\u03c9\u03c3\u03b7 \u03c4\u03bf\u03c5 <code>wp-admin<\/code>, \u03b6\u03b7\u03c4\u03ac \u03c4\u03b1 \u03b4\u03b5\u03b4\u03bf\u03bc\u03ad\u03bd\u03b1 \u03c4\u03c9\u03bd banners \u03b1\u03c0\u03cc endpoint \u03c4\u03bf\u03c5 \u03ba\u03b1\u03c4\u03b1\u03c3\u03ba\u03b5\u03c5\u03b1\u03c3\u03c4\u03ae \u03ba\u03b1\u03b9 \u03b4\u03b7\u03bc\u03b9\u03bf\u03c5\u03c1\u03b3\u03b5\u03af \u03c4\u03bf HTML \u03c4\u03bf\u03c5 notice \u03c3\u03c4\u03bf DOM.<\/p>\n\n\n\n<p>\u039f \u03ba\u03ce\u03b4\u03b9\u03ba\u03b1\u03c2 \u03ad\u03c0\u03b1\u03b9\u03c1\u03bd\u03b5 \u03c4\u03bf \u03c0\u03b5\u03b4\u03af\u03bf <code>display_id<\/code> \u03b1\u03c0\u03cc \u03c4\u03bf \u03b1\u03c0\u03bf\u03bc\u03b1\u03ba\u03c1\u03c5\u03c3\u03bc\u03ad\u03bd\u03bf JSON \u03ba\u03b1\u03b9 \u03c4\u03bf \u03c3\u03c5\u03bd\u03ad\u03b4\u03b5\u03b5 \u03b1\u03c0\u03b5\u03c5\u03b8\u03b5\u03af\u03b1\u03c2 \u03c3\u03b5 HTML attribute <code>id<\/code>, \u03c7\u03c9\u03c1\u03af\u03c2 escaping \u03c3\u03c4\u03bf\u03bd client:<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:.875rem;font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:block;padding:16px 0 0 16px;margin-bottom:-1px;width:100%;text-align:left;background-color:#24292e\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"54\" height=\"14\" viewBox=\"0 0 54 14\"><g fill=\"none\" fill-rule=\"evenodd\" transform=\"translate(1 1)\"><circle cx=\"6\" cy=\"6\" r=\"6\" fill=\"#FF5F56\" stroke=\"#E0443E\" stroke-width=\".5\"><\/circle><circle cx=\"26\" cy=\"6\" r=\"6\" fill=\"#FFBD2E\" stroke=\"#DEA123\" stroke-width=\".5\"><\/circle><circle cx=\"46\" cy=\"6\" r=\"6\" fill=\"#27C93F\" stroke=\"#1AAB29\" stroke-width=\".5\"><\/circle><\/g><\/svg><\/span><span role=\"button\" tabindex=\"0\" style=\"color:#e1e4e8;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>\/\/ \u0397 \u03c4\u03b9\u03bc\u03ae \u03ad\u03c1\u03c7\u03b5\u03c4\u03b1\u03b9 \u03b1\u03c0\u03cc \u03b1\u03c0\u03bf\u03bc\u03b1\u03ba\u03c1\u03c5\u03c3\u03bc\u03ad\u03bd\u03bf JSON.\nvar f = t.display_id || t.id || &quot;default&quot;;\nvar m = &quot;bdt-admin-biggopti-api-biggopti-&quot; + f;\n\n\/\/ \u039c\u03b7 \u03b1\u03c3\u03c6\u03b1\u03bb\u03ae\u03c2 \u03c3\u03cd\u03bd\u03b8\u03b5\u03c3\u03b7 HTML: \u03c4\u03bf f \u03b4\u03b5\u03bd \u03ad\u03c7\u03b5\u03b9 escaped.\nA = 'id=&quot;' + m + '&quot;';\n<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki github-dark\" style=\"background-color:#24292e;color:#e1e4e8\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color:#6A737D\">\/\/ \u0397 \u03c4\u03b9\u03bc\u03ae \u03ad\u03c1\u03c7\u03b5\u03c4\u03b1\u03b9 \u03b1\u03c0\u03cc \u03b1\u03c0\u03bf\u03bc\u03b1\u03ba\u03c1\u03c5\u03c3\u03bc\u03ad\u03bd\u03bf JSON.<\/span><\/span>\n<span class=\"line\"><span style=\"color:#F97583\">var<\/span><span style=\"color:#E1E4E8\"> f <\/span><span style=\"color:#F97583\">=<\/span><span style=\"color:#E1E4E8\"> t.display_id <\/span><span style=\"color:#F97583\">||<\/span><span style=\"color:#E1E4E8\"> t.id <\/span><span style=\"color:#F97583\">||<\/span><span style=\"color:#9ECBFF\"> \"default\"<\/span><span style=\"color:#E1E4E8\">;<\/span><\/span>\n<span class=\"line\"><span style=\"color:#F97583\">var<\/span><span style=\"color:#E1E4E8\"> m <\/span><span style=\"color:#F97583\">=<\/span><span style=\"color:#9ECBFF\"> \"bdt-admin-biggopti-api-biggopti-\"<\/span><span style=\"color:#F97583\"> +<\/span><span style=\"color:#E1E4E8\"> f;<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color:#6A737D\">\/\/ \u039c\u03b7 \u03b1\u03c3\u03c6\u03b1\u03bb\u03ae\u03c2 \u03c3\u03cd\u03bd\u03b8\u03b5\u03c3\u03b7 HTML: \u03c4\u03bf f \u03b4\u03b5\u03bd \u03ad\u03c7\u03b5\u03b9 escaped.<\/span><\/span>\n<span class=\"line\"><span style=\"color:#79B8FF\">A<\/span><span style=\"color:#F97583\"> =<\/span><span style=\"color:#9ECBFF\"> 'id=\"'<\/span><span style=\"color:#F97583\"> +<\/span><span style=\"color:#E1E4E8\"> m <\/span><span style=\"color:#F97583\">+<\/span><span style=\"color:#9ECBFF\"> '\"'<\/span><span style=\"color:#E1E4E8\">;<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p>\u03a3\u03c4\u03bf\u03bd \u03af\u03b4\u03b9\u03bf \u03ba\u03ce\u03b4\u03b9\u03ba\u03b1, \u03c4\u03bf attribute <code>data-display-id<\/code> \u03b4\u03b5\u03c7\u03cc\u03c4\u03b1\u03bd escaping \u03bc\u03b5 \u03c3\u03c5\u03bd\u03ac\u03c1\u03c4\u03b7\u03c3\u03b7 \u03c0\u03bf\u03c5 \u03b1\u03bd\u03c4\u03b9\u03ba\u03b1\u03b8\u03b9\u03c3\u03c4\u03bf\u03cd\u03c3\u03b5 \u03c4\u03b1 <code>&amp;<\/code>, <code>&lt;<\/code>, <code>&gt;<\/code>, \u03ba\u03b1\u03b9 <code>&quot;<\/code> \u03bc\u03b5 HTML entities. \u0397 \u03b4\u03b9\u03b1\u03c6\u03bf\u03c1\u03b5\u03c4\u03b9\u03ba\u03ae \u03bc\u03b5\u03c4\u03b1\u03c7\u03b5\u03af\u03c1\u03b9\u03c3\u03b7 \u03b4\u03b5\u03af\u03c7\u03bd\u03b5\u03b9 \u03cc\u03c4\u03b9 \u03c4\u03bf <code>id<\/code> \u03c0\u03b1\u03c1\u03ad\u03bc\u03b5\u03b9\u03bd\u03b5 \u03b5\u03ba\u03c4\u03b5\u03b8\u03b5\u03b9\u03bc\u03ad\u03bd\u03bf, \u03c0\u03b1\u03c1\u03cc\u03c4\u03b9 \u03bc\u03b5\u03c4\u03b1\u03b3\u03b5\u03bd\u03ad\u03c3\u03c4\u03b5\u03c1\u03b5\u03c2 \u03b5\u03ba\u03b4\u03cc\u03c3\u03b5\u03b9\u03c2 \u03c0\u03c1\u03cc\u03c3\u03b8\u03b5\u03c3\u03b1\u03bd sanitizer \u03bc\u03b5 <code>DOMParser<\/code> \u03b3\u03b9\u03b1 \u03c4\u03bf \u03c0\u03b5\u03b4\u03af\u03bf \u03c0\u03b5\u03c1\u03b9\u03b5\u03c7\u03bf\u03bc\u03ad\u03bd\u03bf\u03c5 \u03c4\u03bf\u03c5 banner. \u039f sanitizer \u03b1\u03c6\u03b1\u03b9\u03c1\u03bf\u03cd\u03c3\u03b5 \u03b5\u03c0\u03b9\u03ba\u03af\u03bd\u03b4\u03c5\u03bd\u03b1 HTML tags \u03ba\u03b1\u03b9 inline event handlers \u03b1\u03c0\u03cc \u03c4\u03bf \u03c0\u03b5\u03c1\u03b9\u03b5\u03c7\u03cc\u03bc\u03b5\u03bd\u03bf, \u03cc\u03c7\u03b9 \u03cc\u03bc\u03c9\u03c2 \u03b1\u03c0\u03cc \u03c4\u03bf <code>id<\/code>.<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:.875rem;font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:block;padding:16px 0 0 16px;margin-bottom:-1px;width:100%;text-align:left;background-color:#24292e\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"54\" height=\"14\" viewBox=\"0 0 54 14\"><g fill=\"none\" fill-rule=\"evenodd\" transform=\"translate(1 1)\"><circle cx=\"6\" cy=\"6\" r=\"6\" fill=\"#FF5F56\" stroke=\"#E0443E\" stroke-width=\".5\"><\/circle><circle cx=\"26\" cy=\"6\" r=\"6\" fill=\"#FFBD2E\" stroke=\"#DEA123\" stroke-width=\".5\"><\/circle><circle cx=\"46\" cy=\"6\" r=\"6\" fill=\"#27C93F\" stroke=\"#1AAB29\" stroke-width=\".5\"><\/circle><\/g><\/svg><\/span><span role=\"button\" tabindex=\"0\" style=\"color:#e1e4e8;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>function escapeHtml(value) {\n  return (value || &quot;&quot;)\n    .replace(\/&amp;\/g, &quot;&amp;amp;&quot;)\n    .replace(\/&lt;\/g, &quot;&amp;lt;&quot;)\n    .replace(\/&gt;\/g, &quot;&amp;gt;&quot;)\n    .replace(\/&quot;\/g, &quot;&amp;quot;&quot;);\n}\n<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki github-dark\" style=\"background-color:#24292e;color:#e1e4e8\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color:#F97583\">function<\/span><span style=\"color:#B392F0\"> escapeHtml<\/span><span style=\"color:#E1E4E8\">(<\/span><span style=\"color:#FFAB70\">value<\/span><span style=\"color:#E1E4E8\">) {<\/span><\/span>\n<span class=\"line\"><span style=\"color:#F97583\">  return<\/span><span style=\"color:#E1E4E8\"> (value <\/span><span style=\"color:#F97583\">||<\/span><span style=\"color:#9ECBFF\"> \"\"<\/span><span style=\"color:#E1E4E8\">)<\/span><\/span>\n<span class=\"line\"><span style=\"color:#E1E4E8\">    .<\/span><span style=\"color:#B392F0\">replace<\/span><span style=\"color:#E1E4E8\">(<\/span><span style=\"color:#9ECBFF\">\/<\/span><span style=\"color:#DBEDFF\">&#x26;<\/span><span style=\"color:#9ECBFF\">\/<\/span><span style=\"color:#F97583\">g<\/span><span style=\"color:#E1E4E8\">, <\/span><span style=\"color:#9ECBFF\">\"&#x26;amp;\"<\/span><span style=\"color:#E1E4E8\">)<\/span><\/span>\n<span class=\"line\"><span style=\"color:#E1E4E8\">    .<\/span><span style=\"color:#B392F0\">replace<\/span><span style=\"color:#E1E4E8\">(<\/span><span style=\"color:#9ECBFF\">\/<\/span><span style=\"color:#DBEDFF\">&#x3C;<\/span><span style=\"color:#9ECBFF\">\/<\/span><span style=\"color:#F97583\">g<\/span><span style=\"color:#E1E4E8\">, <\/span><span style=\"color:#9ECBFF\">\"&#x26;lt;\"<\/span><span style=\"color:#E1E4E8\">)<\/span><\/span>\n<span class=\"line\"><span style=\"color:#E1E4E8\">    .<\/span><span style=\"color:#B392F0\">replace<\/span><span style=\"color:#E1E4E8\">(<\/span><span style=\"color:#9ECBFF\">\/<\/span><span style=\"color:#DBEDFF\">><\/span><span style=\"color:#9ECBFF\">\/<\/span><span style=\"color:#F97583\">g<\/span><span style=\"color:#E1E4E8\">, <\/span><span style=\"color:#9ECBFF\">\"&#x26;gt;\"<\/span><span style=\"color:#E1E4E8\">)<\/span><\/span>\n<span class=\"line\"><span style=\"color:#E1E4E8\">    .<\/span><span style=\"color:#B392F0\">replace<\/span><span style=\"color:#E1E4E8\">(<\/span><span style=\"color:#9ECBFF\">\/<\/span><span style=\"color:#DBEDFF\">\"<\/span><span style=\"color:#9ECBFF\">\/<\/span><span style=\"color:#F97583\">g<\/span><span style=\"color:#E1E4E8\">, <\/span><span style=\"color:#9ECBFF\">\"&#x26;quot;\"<\/span><span style=\"color:#E1E4E8\">);<\/span><\/span>\n<span class=\"line\"><span style=\"color:#E1E4E8\">}<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p>\u03a4\u03bf \u03bc\u03b7 \u03b1\u03c3\u03c6\u03b1\u03bb\u03ad\u03c2 attribute \u03b5\u03b9\u03c3\u03ae\u03c7\u03b8\u03b7 \u03b1\u03c1\u03c7\u03b9\u03ba\u03ac \u03c3\u03c4\u03bf Prime Slider 4.1.9, \u03c3\u03c4\u03bf SVN revision <code>r3471891<\/code>, \u03c4\u03b7\u03bd 1\u03b7 \u039c\u03b1\u03c1\u03c4\u03af\u03bf\u03c5 2026. \u039f\u03b9 \u03b4\u03c1\u03ac\u03c3\u03c4\u03b5\u03c2 \u03ad\u03b2\u03b1\u03bb\u03b1\u03bd \u03c3\u03c4\u03bf <code>display_id<\/code> \u03c4\u03b9\u03bc\u03ae \u03c0\u03bf\u03c5 \u03ad\u03ba\u03bb\u03b5\u03b9\u03bd\u03b5 \u03c4\u03bf attribute \u03ba\u03b1\u03b9 \u03c0\u03c1\u03cc\u03c3\u03b8\u03b5\u03c4\u03b5 handler <code>onanimationstart<\/code>. \u0388\u03bd\u03b1 CSS animation \u03c4\u03bf\u03bd \u03b5\u03bd\u03b5\u03c1\u03b3\u03bf\u03c0\u03bf\u03b9\u03bf\u03cd\u03c3\u03b5 \u03c0\u03b5\u03c1\u03af\u03c0\u03bf\u03c5 10 ms \u03bc\u03b5\u03c4\u03ac \u03c4\u03b7 \u03b4\u03b7\u03bc\u03b9\u03bf\u03c5\u03c1\u03b3\u03af\u03b1 \u03c4\u03bf\u03c5 \u03c3\u03c4\u03bf\u03b9\u03c7\u03b5\u03af\u03bf\u03c5, \u03ac\u03c1\u03b1 \u03b7 \u03b5\u03ba\u03c4\u03ad\u03bb\u03b5\u03c3\u03b7 \u03b3\u03b9\u03bd\u03cc\u03c4\u03b1\u03bd \u03b1\u03b8\u03cc\u03c1\u03c5\u03b2\u03b1 \u03bc\u03b5 \u03c4\u03bf \u03ac\u03bd\u03bf\u03b9\u03b3\u03bc\u03b1 \u03bf\u03c0\u03bf\u03b9\u03b1\u03c3\u03b4\u03ae\u03c0\u03bf\u03c4\u03b5 \u03c3\u03b5\u03bb\u03af\u03b4\u03b1\u03c2 \u03b4\u03b9\u03b1\u03c7\u03b5\u03af\u03c1\u03b9\u03c3\u03b7\u03c2.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u03a0\u03ce\u03c2 \u03b5\u03be\u03b5\u03bb\u03b9\u03c3\u03c3\u03cc\u03c4\u03b1\u03bd \u03b7 \u03bc\u03cc\u03bb\u03c5\u03bd\u03c3\u03b7<\/h2>\n\n\n\n<p>\u0397 \u03ba\u03b1\u03bc\u03c0\u03ac\u03bd\u03b9\u03b1 \u03c7\u03c1\u03b7\u03c3\u03b9\u03bc\u03bf\u03c0\u03bf\u03af\u03b7\u03c3\u03b5 \u03b4\u03cd\u03bf \u03b5\u03bd\u03b1\u03bb\u03bb\u03b1\u03ba\u03c4\u03b9\u03ba\u03ac payloads, \u03b1\u03bd\u03ac\u03bb\u03bf\u03b3\u03b1 \u03bc\u03b5 \u03c4\u03bf endpoint \u03c0\u03bf\u03c5 \u03ba\u03b1\u03bb\u03bf\u03cd\u03c3\u03b5 \u03c4\u03bf plugin \u03ba\u03b1\u03b9 \u03c4\u03b7 \u03b4\u03b9\u03b1\u03b8\u03b5\u03c3\u03b9\u03bc\u03cc\u03c4\u03b7\u03c4\u03b1 \u03c4\u03b7\u03c2 \u03c5\u03c0\u03bf\u03b4\u03bf\u03bc\u03ae\u03c2 \u03c4\u03c9\u03bd \u03b4\u03c1\u03b1\u03c3\u03c4\u03ce\u03bd. \u039a\u03b1\u03b9 \u03c3\u03c4\u03b9\u03c2 \u03b4\u03cd\u03bf \u03c0\u03b5\u03c1\u03b9\u03c0\u03c4\u03ce\u03c3\u03b5\u03b9\u03c2, \u03b7 \u03b5\u03c0\u03af\u03b8\u03b5\u03c3\u03b7 \u03be\u03b5\u03ba\u03b9\u03bd\u03bf\u03cd\u03c3\u03b5 \u03b1\u03c0\u03cc \u03c4\u03bf \u03b4\u03b7\u03bb\u03b7\u03c4\u03b7\u03c1\u03b9\u03b1\u03c3\u03bc\u03ad\u03bd\u03bf JSON \u03c4\u03bf\u03c5 vendor.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\u039a\u03cd\u03c1\u03b9\u03bf payload: <code>w2.js<\/code><\/h3>\n\n\n\n<p>\u03a4\u03bf \u03ba\u03cd\u03c1\u03b9\u03bf payload \u03b5\u03be\u03c5\u03c0\u03b7\u03c1\u03b5\u03c4\u03bf\u03cd\u03bd\u03c4\u03b1\u03bd \u03bc\u03ad\u03c3\u03c9 \u03c4\u03bf\u03c5 endpoint <code>api-data-all-records<\/code>. \u038c\u03c4\u03b1\u03bd \u03c4\u03bf <code>w2.js<\/code> \u03b5\u03ba\u03c4\u03b5\u03bb\u03bf\u03cd\u03bd\u03c4\u03b1\u03bd \u03c3\u03c4\u03b7\u03bd \u03b5\u03bd\u03b5\u03c1\u03b3\u03ae \u03c3\u03c5\u03bd\u03b5\u03b4\u03c1\u03af\u03b1 \u03b4\u03b9\u03b1\u03c7\u03b5\u03b9\u03c1\u03b9\u03c3\u03c4\u03ae, \u03b1\u03ba\u03bf\u03bb\u03bf\u03c5\u03b8\u03bf\u03cd\u03c3\u03b5 \u03b1\u03c5\u03c4\u03ae \u03c4\u03b7\u03bd \u03b1\u03bb\u03c5\u03c3\u03af\u03b4\u03b1:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n\n<li>\u0395\u03c0\u03b9\u03ba\u03bf\u03b9\u03bd\u03c9\u03bd\u03bf\u03cd\u03c3\u03b5 \u03bc\u03b5 \u03c4\u03bf C2 endpoint <code>ia-cdn[.]com\/fz\/c<\/code>, \u03c3\u03c4\u03ad\u03bb\u03bd\u03bf\u03bd\u03c4\u03b1\u03c2 \u03c4\u03bf origin \u03c4\u03bf\u03c5 site \u03b3\u03b9\u03b1 \u03bd\u03b1 \u03bb\u03ac\u03b2\u03b5\u03b9 \u03bf\u03b4\u03b7\u03b3\u03af\u03b5\u03c2 \u03c3\u03c4\u03cc\u03c7\u03b5\u03c5\u03c3\u03b7\u03c2. \u03a3\u03c4\u03b1\u03bc\u03b1\u03c4\u03bf\u03cd\u03c3\u03b5 \u03b1\u03bd \u03bf server \u03b5\u03c0\u03ad\u03c3\u03c4\u03c1\u03b5\u03c6\u03b5 \u03ba\u03b1\u03c4\u03ac\u03c3\u03c4\u03b1\u03c3\u03b7 <code>skip<\/code> \u03ae <code>done<\/code>.<\/li>\n\n\n<li>\u0394\u03b7\u03bc\u03b9\u03bf\u03c5\u03c1\u03b3\u03bf\u03cd\u03c3\u03b5 \u03bd\u03ad\u03bf \u03c7\u03c1\u03ae\u03c3\u03c4\u03b7 \u03bc\u03b5 \u03c1\u03cc\u03bb\u03bf administrator \u03bc\u03ad\u03c3\u03c9 \u03c4\u03bf\u03c5 WordPress REST API, \u03b1\u03be\u03b9\u03bf\u03c0\u03bf\u03b9\u03ce\u03bd\u03c4\u03b1\u03c2 \u03c4\u03bf <code>X-WP-Nonce<\/code> \u03c4\u03b7\u03c2 \u03b5\u03bd\u03b5\u03c1\u03b3\u03ae\u03c2 \u03c3\u03c5\u03bd\u03b5\u03b4\u03c1\u03af\u03b1\u03c2. \u0391\u03bd \u03b1\u03c5\u03c4\u03cc \u03b1\u03c0\u03bf\u03c4\u03cd\u03b3\u03c7\u03b1\u03bd\u03b5, \u03c7\u03c1\u03b7\u03c3\u03b9\u03bc\u03bf\u03c0\u03bf\u03b9\u03bf\u03cd\u03c3\u03b5 \u03c4\u03b9\u03c2 \u03ba\u03bb\u03b1\u03c3\u03b9\u03ba\u03ad\u03c2 \u03c5\u03c0\u03bf\u03b2\u03bf\u03bb\u03ad\u03c2 \u03c6\u03cc\u03c1\u03bc\u03b1\u03c2 \u03c4\u03bf\u03c5 WordPress.<\/li>\n\n\n<li>\u039a\u03b1\u03c4\u03ad\u03b2\u03b1\u03b6\u03b5 ZIP \u03c0\u03bf\u03c5 \u03c0\u03b1\u03c1\u03bf\u03c5\u03c3\u03b9\u03b1\u03b6\u03cc\u03c4\u03b1\u03bd \u03c9\u03c2 plugin \u03b1\u03c0\u03cc \u03c4\u03bf\u03bd C2 server \u03ba\u03b1\u03b9 \u03c4\u03bf \u03b5\u03b3\u03ba\u03b1\u03b8\u03b9\u03c3\u03c4\u03bf\u03cd\u03c3\u03b5 \u03b1\u03c0\u03cc \u03c4\u03b7\u03bd \u03c4\u03c5\u03c0\u03b9\u03ba\u03ae \u03c6\u03cc\u03c1\u03bc\u03b1 \u03bc\u03b5\u03c4\u03b1\u03c6\u03cc\u03c1\u03c4\u03c9\u03c3\u03b7\u03c2 plugin. \u03a4\u03bf ZIP \u03c7\u03c1\u03b7\u03c3\u03b9\u03bc\u03bf\u03c0\u03bf\u03b9\u03bf\u03cd\u03c3\u03b5 slug \u03cc\u03c0\u03c9\u03c2 <code>wp-smart-thumbnails<\/code> \u03ae \u03ac\u03bb\u03bb\u03bf \u03bf\u03c5\u03b4\u03ad\u03c4\u03b5\u03c1\u03bf \u03cc\u03bd\u03bf\u03bc\u03b1 \u03ba\u03b1\u03b9 \u03c0\u03b5\u03c1\u03b9\u03b5\u03af\u03c7\u03b5 webshell \u03bc\u03b5 \u03cc\u03bd\u03bf\u03bc\u03b1 <code>emer-run.php<\/code>, \u03c4\u03bf \u03bf\u03c0\u03bf\u03af\u03bf \u03ba\u03b1\u03bb\u03bf\u03cd\u03bd\u03c4\u03b1\u03bd \u03b1\u03c0\u03b5\u03c5\u03b8\u03b5\u03af\u03b1\u03c2 \u03bc\u03ad\u03c3\u03c9 URL.<\/li>\n\n\n<li>\u03a4\u03bf <code>emer-run.php<\/code> \u03b5\u03b3\u03ba\u03b1\u03b8\u03b9\u03c3\u03c4\u03bf\u03cd\u03c3\u03b5 \u03b4\u03cd\u03bf modules \u03b5\u03c0\u03b9\u03bc\u03bf\u03bd\u03ae\u03c2 \u03c3\u03c4\u03bf\u03bd \u03ba\u03b1\u03c4\u03ac\u03bb\u03bf\u03b3\u03bf Must-Use plugins. \u03a4\u03b1 \u03b4\u03b5\u03af\u03b3\u03bc\u03b1\u03c4\u03b1 \u03b5\u03af\u03c7\u03b1\u03bd timestamp \u03c0\u03bf\u03c5 \u03ad\u03b4\u03b5\u03b9\u03c7\u03bd\u03b5 \u03a3\u03b5\u03c0\u03c4\u03ad\u03bc\u03b2\u03c1\u03b9\u03bf 2025, \u03ce\u03c3\u03c4\u03b5 \u03bd\u03b1 \u03bc\u03bf\u03b9\u03ac\u03b6\u03bf\u03c5\u03bd \u03bc\u03b5 \u03c0\u03b1\u03bb\u03b9\u03ac \u03bd\u03cc\u03bc\u03b9\u03bc\u03b1 \u03b1\u03c1\u03c7\u03b5\u03af\u03b1. \u03a4\u03b1 \u03bf\u03bd\u03cc\u03bc\u03b1\u03c4\u03b1 \u03b1\u03c1\u03c7\u03b5\u03af\u03c9\u03bd \u03bc\u03c0\u03bf\u03c1\u03bf\u03cd\u03bd \u03bd\u03b1 \u03b1\u03bb\u03bb\u03ac\u03b6\u03bf\u03c5\u03bd \u03b1\u03c0\u03cc \u03bc\u03cc\u03bb\u03c5\u03bd\u03c3\u03b7 \u03c3\u03b5 \u03bc\u03cc\u03bb\u03c5\u03bd\u03c3\u03b7.<\/li>\n\n\n<li>\u03a4\u03bf \u03c0\u03c1\u03ce\u03c4\u03bf MU plugin \u03c0\u03b1\u03c1\u03b5\u03af\u03c7\u03b5 magic-login backdoor: \u03b5\u03c0\u03ad\u03c4\u03c1\u03b5\u03c0\u03b5 \u03bc\u03b7 \u03b1\u03c5\u03b8\u03b5\u03bd\u03c4\u03b9\u03ba\u03bf\u03c0\u03bf\u03b9\u03b7\u03bc\u03ad\u03bd\u03b7 \u03c0\u03c1\u03cc\u03c3\u03b2\u03b1\u03c3\u03b7 \u03b4\u03b9\u03b1\u03c7\u03b5\u03b9\u03c1\u03b9\u03c3\u03c4\u03ae \u03bc\u03b5 \u03c0\u03b1\u03c1\u03ac\u03bc\u03b5\u03c4\u03c1\u03bf URL <code>?_wplogin=&lt;token&gt;<\/code> \u03ba\u03b1\u03b9 \u03c3\u03c4\u03cc\u03c7\u03b5\u03c5\u03b5 \u03c4\u03bf\u03bd \u03c0\u03b1\u03bb\u03b1\u03b9\u03cc\u03c4\u03b5\u03c1\u03bf \u03b5\u03b3\u03b3\u03b5\u03b3\u03c1\u03b1\u03bc\u03bc\u03ad\u03bd\u03bf administrator \u03c4\u03bf\u03c5 site.<\/li>\n\n\n<li>\u03a4\u03bf \u03b4\u03b5\u03cd\u03c4\u03b5\u03c1\u03bf MU plugin \u03bb\u03b5\u03b9\u03c4\u03bf\u03c5\u03c1\u03b3\u03bf\u03cd\u03c3\u03b5 \u03c9\u03c2 anti-analysis module. \u0388\u03ba\u03b1\u03bd\u03b5 hook \u03c3\u03c4\u03b1 database queries \u03c4\u03bf\u03c5 WordPress, \u03ad\u03ba\u03c1\u03c5\u03b2\u03b5 \u03c4\u03bf\u03c5\u03c2 \u03ba\u03b1\u03ba\u03cc\u03b2\u03bf\u03c5\u03bb\u03bf\u03c5\u03c2 \u03bb\u03bf\u03b3\u03b1\u03c1\u03b9\u03b1\u03c3\u03bc\u03bf\u03cd\u03c2 \u03b1\u03c0\u03cc \u03c4\u03b7 \u03bb\u03af\u03c3\u03c4\u03b1 \u03c7\u03c1\u03b7\u03c3\u03c4\u03ce\u03bd \u03ba\u03b1\u03b9 \u03bc\u03b5\u03af\u03c9\u03bd\u03b5 \u03b1\u03bd\u03c4\u03af\u03c3\u03c4\u03bf\u03b9\u03c7\u03b1 \u03c4\u03bf\u03bd \u03c3\u03c5\u03bd\u03bf\u03bb\u03b9\u03ba\u03cc \u03b1\u03c1\u03b9\u03b8\u03bc\u03cc \u03c7\u03c1\u03b7\u03c3\u03c4\u03ce\u03bd \u03c0\u03bf\u03c5 \u03b5\u03bc\u03c6\u03b1\u03bd\u03af\u03b6\u03b5\u03b9 \u03b7 \u03b4\u03b9\u03b1\u03c7\u03b5\u03af\u03c1\u03b9\u03c3\u03b7.<\/li>\n\n\n<li>\u0388\u03c3\u03c4\u03b5\u03bb\u03bd\u03b5 \u03c4\u03b1 \u03b1\u03c0\u03bf\u03c4\u03b5\u03bb\u03ad\u03c3\u03bc\u03b1\u03c4\u03b1 \u03ba\u03ac\u03b8\u03b5 \u03c3\u03c4\u03b1\u03b4\u03af\u03bf\u03c5 \u03c0\u03af\u03c3\u03c9 \u03c3\u03c4\u03bf\u03bd C2 server \u03bc\u03b5 <code>navigator.sendBeacon<\/code>.<\/li>\n\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\">\u0395\u03bd\u03b1\u03bb\u03bb\u03b1\u03ba\u03c4\u03b9\u03ba\u03cc payload: <code>x.js<\/code><\/h3>\n\n\n\n<p>\u03a4\u03bf \u03b4\u03b5\u03cd\u03c4\u03b5\u03c1\u03bf script, <code>x.js<\/code>, \u03c6\u03b9\u03bb\u03bf\u03be\u03b5\u03bd\u03bf\u03cd\u03bd\u03c4\u03b1\u03bd \u03b1\u03c0\u03b5\u03c5\u03b8\u03b5\u03af\u03b1\u03c2 \u03c3\u03c4\u03b7\u03bd \u03c5\u03c0\u03bf\u03b4\u03bf\u03bc\u03ae \u03c4\u03b7\u03c2 BdThemes \u03ba\u03b1\u03b9 \u03b5\u03be\u03c5\u03c0\u03b7\u03c1\u03b5\u03c4\u03bf\u03cd\u03bd\u03c4\u03b1\u03bd \u03c3\u03b5 plugins \u03c0\u03bf\u03c5 \u03c7\u03c1\u03b7\u03c3\u03b9\u03bc\u03bf\u03c0\u03bf\u03b9\u03bf\u03cd\u03c3\u03b1\u03bd \u03c4\u03bf endpoint <code>api-data-records<\/code>. \u0394\u03b7\u03bc\u03b9\u03bf\u03c5\u03c1\u03b3\u03bf\u03cd\u03c3\u03b5 \u03c0\u03c1\u03bf\u03b2\u03bb\u03ad\u03c8\u03b9\u03bc\u03b1 credentials administrator \u03b1\u03c0\u03cc \u03c4\u03bf hostname \u03c4\u03bf\u03c5 \u03b8\u03cd\u03bc\u03b1\u03c4\u03bf\u03c2: \u03c5\u03c0\u03bf\u03bb\u03cc\u03b3\u03b9\u03b6\u03b5 \u03ad\u03bd\u03b1\u03bd \u03b1\u03ba\u03ad\u03c1\u03b1\u03b9\u03bf hash, \u03c4\u03bf\u03bd \u03bc\u03b5\u03c4\u03ad\u03c4\u03c1\u03b5\u03c0\u03b5 \u03c3\u03b5 base36, \u03ba\u03c1\u03b1\u03c4\u03bf\u03cd\u03c3\u03b5 \u03c4\u03bf\u03c5\u03c2 \u03c0\u03c1\u03ce\u03c4\u03bf\u03c5\u03c2 \u03ad\u03be\u03b9 \u03c7\u03b1\u03c1\u03b1\u03ba\u03c4\u03ae\u03c1\u03b5\u03c2 \u03ba\u03b1\u03b9 \u03ad\u03c6\u03c4\u03b9\u03b1\u03c7\u03bd\u03b5 username \u03c4\u03b7\u03c2 \u03bc\u03bf\u03c1\u03c6\u03ae\u03c2 <code>bd_&lt;hash&gt;<\/code>.<\/p>\n\n\n\n<p>\u039f \u03ba\u03c9\u03b4\u03b9\u03ba\u03cc\u03c2 \u03b1\u03ba\u03bf\u03bb\u03bf\u03c5\u03b8\u03bf\u03cd\u03c3\u03b5 \u03c4\u03bf \u03bc\u03bf\u03c4\u03af\u03b2\u03bf <code>Bd@26!&lt;hash&gt;x<\/code> \u03ba\u03b1\u03b9 \u03c4\u03bf email \u03ae\u03c4\u03b1\u03bd <code>&lt;username&gt;@wordpress.org<\/code>. \u0395\u03c0\u03b5\u03b9\u03b4\u03ae \u03c4\u03b1 credentials \u03c0\u03b1\u03c1\u03ac\u03b3\u03bf\u03bd\u03c4\u03b1\u03b9 \u03bd\u03c4\u03b5\u03c4\u03b5\u03c1\u03bc\u03b9\u03bd\u03b9\u03c3\u03c4\u03b9\u03ba\u03ac \u03b1\u03c0\u03cc \u03c4\u03bf hostname, \u03bf\u03b9 \u03b4\u03c1\u03ac\u03c3\u03c4\u03b5\u03c2 \u03b4\u03b5\u03bd \u03c7\u03c1\u03b5\u03b9\u03ac\u03b6\u03b5\u03c4\u03b1\u03b9 \u03bd\u03b1 \u03ba\u03c1\u03b1\u03c4\u03bf\u03cd\u03bd \u03ba\u03b5\u03bd\u03c4\u03c1\u03b9\u03ba\u03ae \u03bb\u03af\u03c3\u03c4\u03b1 \u03bc\u03bf\u03bb\u03c5\u03c3\u03bc\u03ad\u03bd\u03c9\u03bd sites. \u0391\u03bd \u03b5\u03c1\u03b5\u03c5\u03bd\u03ac\u03c4\u03b5 \u03cd\u03c0\u03bf\u03c0\u03c4\u03bf domain, \u03bc\u03c0\u03bf\u03c1\u03b5\u03af\u03c4\u03b5 \u03bd\u03b1 \u03b1\u03bd\u03b1\u03b6\u03b7\u03c4\u03ae\u03c3\u03b5\u03c4\u03b5 \u03bb\u03bf\u03b3\u03b1\u03c1\u03b9\u03b1\u03c3\u03bc\u03cc \u03c0\u03bf\u03c5 \u03c4\u03b1\u03b9\u03c1\u03b9\u03ac\u03b6\u03b5\u03b9 \u03c3\u03c4\u03bf \u03bc\u03bf\u03c4\u03af\u03b2\u03bf \u03ba\u03b1\u03b9 \u03bd\u03b1 \u03c3\u03c5\u03c3\u03c7\u03b5\u03c4\u03af\u03c3\u03b5\u03c4\u03b5 \u03c4\u03bf\u03bd \u03ba\u03c9\u03b4\u03b9\u03ba\u03cc \u03bc\u03b5 \u03c4\u03bf\u03bd \u03c5\u03c0\u03bf\u03bb\u03bf\u03b3\u03b9\u03c3\u03bc\u03ad\u03bd\u03bf hash.<\/p>\n\n\n\n<p>\u03a4\u03bf script \u03b6\u03b7\u03c4\u03bf\u03cd\u03c3\u03b5 \u03c4\u03b7 \u03c3\u03b5\u03bb\u03af\u03b4\u03b1 <code>\/wp-admin\/user-new.php<\/code>, \u03ad\u03b2\u03c1\u03b9\u03c3\u03ba\u03b5 \u03c4\u03bf nonce \u03b4\u03b7\u03bc\u03b9\u03bf\u03c5\u03c1\u03b3\u03af\u03b1\u03c2 \u03c7\u03c1\u03ae\u03c3\u03c4\u03b7 \u03ba\u03b1\u03b9 \u03c5\u03c0\u03ad\u03b2\u03b1\u03bb\u03bb\u03b5 \u03c6\u03cc\u03c1\u03bc\u03b1 \u03c0\u03bf\u03c5 \u03cc\u03c1\u03b9\u03b6\u03b5 \u03c4\u03bf\u03bd \u03bd\u03ad\u03bf \u03bb\u03bf\u03b3\u03b1\u03c1\u03b9\u03b1\u03c3\u03bc\u03cc \u03c9\u03c2 administrator. \u0391\u03bd \u03b7 \u03b4\u03b7\u03bc\u03b9\u03bf\u03c5\u03c1\u03b3\u03af\u03b1 \u03c0\u03b5\u03c4\u03cd\u03c7\u03b1\u03b9\u03bd\u03b5 \u03ae \u03bf \u03c7\u03c1\u03ae\u03c3\u03c4\u03b7\u03c2 \u03c5\u03c0\u03ae\u03c1\u03c7\u03b5 \u03ae\u03b4\u03b7, \u03ad\u03c3\u03c4\u03b5\u03bb\u03bd\u03b5 \u03c3\u03c4\u03bf\u03bd C2 \u03c4\u03b7\u03bd \u03ba\u03b1\u03c4\u03ac\u03c3\u03c4\u03b1\u03c3\u03b7, \u03c4\u03bf username, \u03c4\u03bf\u03bd \u03ba\u03c9\u03b4\u03b9\u03ba\u03cc, \u03c4\u03bf origin, URL \u03b1\u03c0\u03bf\u03c3\u03cd\u03bd\u03b4\u03b5\u03c3\u03b7\u03c2 \u03ba\u03b1\u03b9 \u03c4\u03bf URL \u03c4\u03b7\u03c2 \u03c3\u03b5\u03bb\u03af\u03b4\u03b1\u03c2. \u0391\u03c0\u03bf\u03b8\u03ae\u03ba\u03b5\u03c5\u03b5 \u03b5\u03c0\u03af\u03c3\u03b7\u03c2 flag \u03c3\u03c4\u03bf <code>localStorage<\/code>, \u03cc\u03c4\u03b1\u03bd \u03b1\u03c5\u03c4\u03cc \u03ae\u03c4\u03b1\u03bd \u03b4\u03b9\u03b1\u03b8\u03ad\u03c3\u03b9\u03bc\u03bf, \u03ce\u03c3\u03c4\u03b5 \u03bd\u03b1 \u03bc\u03b7\u03bd \u03b5\u03c0\u03b1\u03bd\u03b1\u03bb\u03b1\u03bc\u03b2\u03ac\u03bd\u03b5\u03b9 \u03c4\u03b7 \u03b4\u03b9\u03b1\u03b4\u03b9\u03ba\u03b1\u03c3\u03af\u03b1 \u03c3\u03c4\u03bf\u03bd \u03af\u03b4\u03b9\u03bf browser.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u0394\u03b5\u03af\u03ba\u03c4\u03b5\u03c2 \u03c0\u03b1\u03c1\u03b1\u03b2\u03af\u03b1\u03c3\u03b7\u03c2<\/h2>\n\n\n\n<p>\u0391\u03bd\u03b1\u03b6\u03b7\u03c4\u03ae\u03c3\u03c4\u03b5 \u03cc\u03bb\u03bf\u03c5\u03c2 \u03c4\u03bf\u03c5\u03c2 \u03c0\u03b1\u03c1\u03b1\u03ba\u03ac\u03c4\u03c9 \u03b4\u03b5\u03af\u03ba\u03c4\u03b5\u03c2. \u039c\u03b7\u03bd \u03c0\u03b5\u03c1\u03b9\u03bf\u03c1\u03b9\u03c3\u03c4\u03b5\u03af\u03c4\u03b5 \u03c3\u03b5 \u03ad\u03bd\u03b1\u03bd \u03ad\u03bb\u03b5\u03b3\u03c7\u03bf \u03bb\u03af\u03c3\u03c4\u03b1\u03c2 \u03c7\u03c1\u03b7\u03c3\u03c4\u03ce\u03bd \u03bc\u03ad\u03c3\u03b1 \u03b1\u03c0\u03cc \u03c4\u03bf <code>wp-admin<\/code>, \u03b3\u03b9\u03b1\u03c4\u03af \u03c4\u03bf stealth MU plugin \u03bc\u03c0\u03bf\u03c1\u03b5\u03af \u03bd\u03b1 \u03b1\u03c0\u03bf\u03ba\u03c1\u03cd\u03c0\u03c4\u03b5\u03b9 \u03bb\u03bf\u03b3\u03b1\u03c1\u03b9\u03b1\u03c3\u03bc\u03bf\u03cd\u03c2 \u03ba\u03b1\u03b9 \u03bd\u03b1 \u03b1\u03bb\u03bb\u03bf\u03b9\u03ce\u03bd\u03b5\u03b9 \u03c4\u03b1 \u03b5\u03bc\u03c6\u03b1\u03bd\u03b9\u03b6\u03cc\u03bc\u03b5\u03bd\u03b1 \u03c3\u03cd\u03bd\u03bf\u03bb\u03b1.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\u0394\u03af\u03ba\u03c4\u03c5\u03bf \u03ba\u03b1\u03b9 \u03b1\u03c0\u03bf\u03bc\u03b1\u03ba\u03c1\u03c5\u03c3\u03bc\u03ad\u03bd\u03bf\u03b9 \u03c0\u03cc\u03c1\u03bf\u03b9<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>\u039a\u03cd\u03c1\u03b9\u03bf payload: <code>ia-cdn[.]com\/fz\/w2.js<\/code><\/li>\n\n\n<li>C2 beacon endpoint: <code>ia-cdn[.]com\/fz\/c<\/code><\/li>\n\n\n<li>\u0394\u03b7\u03bb\u03b7\u03c4\u03b7\u03c1\u03b9\u03b1\u03c3\u03bc\u03ad\u03bd\u03bf endpoint: <code>api[.]sigmative[.]io\/prod\/store\/api\/biggopti\/api-data-all-records<\/code><\/li>\n\n\n<li>\u0394\u03b7\u03bb\u03b7\u03c4\u03b7\u03c1\u03b9\u03b1\u03c3\u03bc\u03ad\u03bd\u03bf endpoint: <code>api[.]sigmative[.]io\/prod\/store\/api\/biggopti\/api-data-records<\/code><\/li>\n\n\n<li>\u0394\u03b7\u03bb\u03b7\u03c4\u03b7\u03c1\u03b9\u03b1\u03c3\u03bc\u03ad\u03bd\u03bf script: <code>api[.]sigmative[.]io\/prod\/store\/api\/biggopti\/x.js<\/code><\/li>\n\n<\/ul>\n\n\n\n<p>\u03a4\u03b1 \u03b4\u03cd\u03bf endpoints JSON \u03b5\u03c0\u03ad\u03c3\u03c4\u03c1\u03b5\u03c6\u03b1\u03bd \u03ba\u03b1\u03b8\u03b1\u03c1\u03cc JSON \u03b1\u03c0\u03cc \u03c4\u03b9\u03c2 8 \u0391\u03c5\u03b3\u03bf\u03cd\u03c3\u03c4\u03bf\u03c5 2026. \u0391\u03c5\u03c4\u03cc \u03b4\u03b5\u03bd \u03b1\u03c1\u03ba\u03b5\u03af \u03b3\u03b9\u03b1 \u03bd\u03b1 \u03b8\u03b5\u03c9\u03c1\u03ae\u03c3\u03b5\u03c4\u03b5 \u03ad\u03bd\u03b1 site \u03ba\u03b1\u03b8\u03b1\u03c1\u03cc: \u03b1\u03bd \u03ba\u03ac\u03c0\u03bf\u03b9\u03bf\u03c2 administrator \u03ac\u03bd\u03bf\u03b9\u03be\u03b5 \u03c4\u03bf <code>wp-admin<\/code> \u03cc\u03c3\u03bf \u03c4\u03bf payload \u03ae\u03c4\u03b1\u03bd \u03b5\u03bd\u03b5\u03c1\u03b3\u03cc, \u03b7 \u03b5\u03c0\u03af\u03b8\u03b5\u03c3\u03b7 \u03bc\u03c0\u03bf\u03c1\u03bf\u03cd\u03c3\u03b5 \u03ae\u03b4\u03b7 \u03bd\u03b1 \u03ad\u03c7\u03b5\u03b9 \u03b4\u03b7\u03bc\u03b9\u03bf\u03c5\u03c1\u03b3\u03ae\u03c3\u03b5\u03b9 \u03bb\u03bf\u03b3\u03b1\u03c1\u03b9\u03b1\u03c3\u03bc\u03bf\u03cd\u03c2 \u03ba\u03b1\u03b9 \u03bc\u03b7\u03c7\u03b1\u03bd\u03b9\u03c3\u03bc\u03bf\u03cd\u03c2 \u03b5\u03c0\u03b9\u03bc\u03bf\u03bd\u03ae\u03c2.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\u0391\u03c1\u03c7\u03b5\u03af\u03b1 \u03ba\u03b1\u03b9 checksums<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>Webshell: <code>emer-run.php<\/code> &#8211; MD5 <code>1024732009983dd5e54b4cf5593f04d4<\/code><\/li>\n\n\n<li>MU-plugin magic-login backdoor: <code>class-wp-token-validate.php<\/code> &#8211; MD5 <code>7719cd98a35ffad2771f26d1ceab7d27<\/code><\/li>\n\n\n<li>MU-plugin stealth module: <code>class-wp-query-9d127ff3.php<\/code>, \u03ae \u03c0\u03b1\u03c1\u03b1\u03bb\u03bb\u03b1\u03b3\u03ae \u03bf\u03bd\u03cc\u03bc\u03b1\u03c4\u03bf\u03c2 <code>class-wp-query-*.php<\/code> &#8211; MD5 <code>9aadc3e5c5242b273bd17c5bdc358845<\/code><\/li>\n\n\n<li>MU-plugin \u03c0\u03bf\u03c5 \u03b5\u03bc\u03c6\u03b1\u03bd\u03af\u03b6\u03b5\u03c4\u03b1\u03b9 \u03c9\u03c2 health check: <code>wp-cache-optimizer.php<\/code> &#8211; MD5 <code>e450ae5bc4bfc0d960dded06a76bb8e9<\/code><\/li>\n\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">\u0392\u03ac\u03c3\u03b7 \u03b4\u03b5\u03b4\u03bf\u03bc\u03ad\u03bd\u03c9\u03bd \u03ba\u03b1\u03b9 \u03c7\u03c1\u03ae\u03c3\u03c4\u03b5\u03c2<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>Option <code>fz_emer_login_tokens<\/code>, \u03cc\u03c0\u03bf\u03c5 \u03b1\u03c0\u03bf\u03b8\u03b7\u03ba\u03b5\u03cd\u03bf\u03bd\u03c4\u03b1\u03b9 magic-login tokens.<\/li>\n\n\n<li>Option <code>fz_emer_done_v1<\/code>, \u03c0\u03bf\u03c5 \u03b4\u03b7\u03bb\u03ce\u03bd\u03b5\u03b9 \u03cc\u03c4\u03b9 \u03bf\u03bb\u03bf\u03ba\u03bb\u03b7\u03c1\u03ce\u03b8\u03b7\u03ba\u03b5 \u03b7 \u03c0\u03b1\u03c1\u03b1\u03b2\u03af\u03b1\u03c3\u03b7.<\/li>\n\n\n<li>\u039b\u03bf\u03b3\u03b1\u03c1\u03b9\u03b1\u03c3\u03bc\u03bf\u03af \u03bc\u03b5 email domain <code>@wordpress.org<\/code> \u03ae <code>@developer.wordpress.org<\/code>.<\/li>\n\n\n<li>Usernames \u03c0\u03bf\u03c5 \u03c4\u03b1\u03b9\u03c1\u03b9\u03ac\u03b6\u03bf\u03c5\u03bd \u03c3\u03c4\u03bf \u03bc\u03bf\u03c4\u03af\u03b2\u03bf <code>bd_<\/code> \u03b1\u03ba\u03bf\u03bb\u03bf\u03c5\u03b8\u03bf\u03cd\u03bc\u03b5\u03bd\u03bf \u03b1\u03c0\u03cc \u03ad\u03be\u03b9 \u03b1\u03bb\u03c6\u03b1\u03c1\u03b9\u03b8\u03bc\u03b7\u03c4\u03b9\u03ba\u03bf\u03cd\u03c2 \u03c7\u03b1\u03c1\u03b1\u03ba\u03c4\u03ae\u03c1\u03b5\u03c2.<\/li>\n\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">\u0386\u03bc\u03b5\u03c3\u03b1 \u03b2\u03ae\u03bc\u03b1\u03c4\u03b1 \u03b5\u03bb\u03ad\u03b3\u03c7\u03bf\u03c5 \u03ba\u03b1\u03b9 \u03b1\u03c0\u03bf\u03ba\u03b1\u03c4\u03ac\u03c3\u03c4\u03b1\u03c3\u03b7\u03c2<\/h2>\n\n\n\n<p>\u0391\u03c0\u03bf\u03bc\u03bf\u03bd\u03ce\u03c3\u03c4\u03b5 \u03c0\u03c1\u03ce\u03c4\u03b1 \u03c4\u03bf site \u03b1\u03c0\u03cc \u03c4\u03b7\u03bd \u03c0\u03c1\u03cc\u03c3\u03b2\u03b1\u03c3\u03b7 \u03b4\u03b9\u03b1\u03c7\u03b5\u03b9\u03c1\u03b9\u03c3\u03c4\u03ce\u03bd \u03ae \u03c0\u03b5\u03c1\u03b9\u03bf\u03c1\u03af\u03c3\u03c4\u03b5 \u03c0\u03c1\u03bf\u03c3\u03c9\u03c1\u03b9\u03bd\u03ac \u03c4\u03bf <code>wp-admin<\/code>, \u03ce\u03c3\u03c4\u03b5 \u03bd\u03b1 \u03bc\u03b7 \u03b4\u03b7\u03bc\u03b9\u03bf\u03c5\u03c1\u03b3\u03bf\u03cd\u03bd\u03c4\u03b1\u03b9 \u03bd\u03ad\u03b5\u03c2 \u03b5\u03bd\u03b5\u03c1\u03b3\u03ad\u03c2 \u03c3\u03c5\u03bd\u03b5\u03b4\u03c1\u03af\u03b5\u03c2 \u03cc\u03c3\u03bf \u03b5\u03c1\u03b5\u03c5\u03bd\u03ac\u03c4\u03b5. \u039a\u03c1\u03b1\u03c4\u03ae\u03c3\u03c4\u03b5 \u03b1\u03bd\u03c4\u03af\u03b3\u03c1\u03b1\u03c6\u03bf \u03c4\u03b7\u03c2 \u03b2\u03ac\u03c3\u03b7\u03c2 \u03b4\u03b5\u03b4\u03bf\u03bc\u03ad\u03bd\u03c9\u03bd \u03ba\u03b1\u03b9 \u03c4\u03bf\u03c5 filesystem \u03c0\u03c1\u03b9\u03bd \u03b1\u03c6\u03b1\u03b9\u03c1\u03ad\u03c3\u03b5\u03c4\u03b5 \u03c3\u03c4\u03bf\u03b9\u03c7\u03b5\u03af\u03b1, \u03b3\u03b9\u03b1\u03c4\u03af \u03b8\u03b1 \u03c7\u03c1\u03b5\u03b9\u03b1\u03c3\u03c4\u03b5\u03af\u03c4\u03b5 \u03c4\u03b1 \u03b5\u03c5\u03c1\u03ae\u03bc\u03b1\u03c4\u03b1 \u03b3\u03b9\u03b1 \u03bd\u03b1 \u03c0\u03c1\u03bf\u03c3\u03b4\u03b9\u03bf\u03c1\u03af\u03c3\u03b5\u03c4\u03b5 \u03c4\u03b7\u03bd \u03ad\u03ba\u03c4\u03b1\u03c3\u03b7 \u03c4\u03b7\u03c2 \u03c0\u03b1\u03c1\u03b1\u03b2\u03af\u03b1\u03c3\u03b7\u03c2.<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n\n<li>\u039a\u03b1\u03c4\u03b1\u03b3\u03c1\u03ac\u03c8\u03c4\u03b5 \u03c0\u03bf\u03b9\u03b1 \u03b1\u03c0\u03cc \u03c4\u03b1 \u03b5\u03c0\u03c4\u03ac plugins \u03b5\u03af\u03bd\u03b1\u03b9 \u03ae \u03ae\u03c4\u03b1\u03bd \u03b5\u03b3\u03ba\u03b1\u03c4\u03b5\u03c3\u03c4\u03b7\u03bc\u03ad\u03bd\u03b1 \u03ba\u03b1\u03b9 \u03b5\u03bb\u03ad\u03b3\u03be\u03c4\u03b5 \u03b1\u03bd \u03ba\u03ac\u03c0\u03bf\u03b9\u03bf\u03c2 administrator \u03c6\u03cc\u03c1\u03c4\u03c9\u03c3\u03b5 \u03c4\u03bf <code>wp-admin<\/code> \u03b1\u03c0\u03cc \u03c4\u03b9\u03c2 23 \u0399\u03bf\u03c5\u03bd\u03af\u03bf\u03c5 \u03ad\u03c9\u03c2 \u03c4\u03b9\u03c2 8 \u0391\u03c5\u03b3\u03bf\u03cd\u03c3\u03c4\u03bf\u03c5 2026.<\/li>\n\n\n<li>\u0395\u03be\u03b5\u03c4\u03ac\u03c3\u03c4\u03b5 \u03c4\u03b7 \u03b2\u03ac\u03c3\u03b7 \u03b4\u03b5\u03b4\u03bf\u03bc\u03ad\u03bd\u03c9\u03bd \u03b1\u03c0\u03b5\u03c5\u03b8\u03b5\u03af\u03b1\u03c2 \u03b3\u03b9\u03b1 users \u03bc\u03b5 \u03c4\u03b1 \u03cd\u03c0\u03bf\u03c0\u03c4\u03b1 usernames \u03ba\u03b1\u03b9 email domains. \u03a3\u03c5\u03b3\u03ba\u03c1\u03af\u03bd\u03b5\u03c4\u03b5 \u03c4\u03b7 \u03bb\u03af\u03c3\u03c4\u03b1 \u03bc\u03b5 \u03b3\u03bd\u03c9\u03c3\u03c4\u03bf\u03cd\u03c2 \u03bd\u03cc\u03bc\u03b9\u03bc\u03bf\u03c5\u03c2 \u03bb\u03bf\u03b3\u03b1\u03c1\u03b9\u03b1\u03c3\u03bc\u03bf\u03cd\u03c2, \u03b5\u03c0\u03b5\u03b9\u03b4\u03ae \u03b7 \u03b4\u03b9\u03b1\u03c7\u03b5\u03b9\u03c1\u03b9\u03c3\u03c4\u03b9\u03ba\u03ae \u03bf\u03b8\u03cc\u03bd\u03b7 \u03bc\u03c0\u03bf\u03c1\u03b5\u03af \u03bd\u03b1 \u03b1\u03c0\u03bf\u03ba\u03c1\u03cd\u03c0\u03c4\u03b5\u03b9 \u03b5\u03b3\u03b3\u03c1\u03b1\u03c6\u03ad\u03c2.<\/li>\n\n\n<li>\u0395\u03bb\u03ad\u03b3\u03be\u03c4\u03b5 \u03c4\u03bf\u03bd \u03ba\u03b1\u03c4\u03ac\u03bb\u03bf\u03b3\u03bf <code>wp-content\/mu-plugins\/<\/code> \u03b3\u03b9\u03b1 \u03c4\u03b1 \u03bf\u03bd\u03cc\u03bc\u03b1\u03c4\u03b1, \u03c4\u03b1 hashes \u03ba\u03b1\u03b9 \u03c4\u03c5\u03c7\u03cc\u03bd \u03ac\u03b3\u03bd\u03c9\u03c3\u03c4\u03b1 \u03b1\u03c1\u03c7\u03b5\u03af\u03b1 \u03bc\u03b5 \u03c0\u03b1\u03bb\u03b9\u03ad\u03c2 \u03ae \u03b1\u03c3\u03c5\u03bd\u03ae\u03b8\u03b9\u03c3\u03c4\u03b5\u03c2 \u03b7\u03bc\u03b5\u03c1\u03bf\u03bc\u03b7\u03bd\u03af\u03b5\u03c2. \u0395\u03bb\u03ad\u03b3\u03be\u03c4\u03b5 \u03b5\u03c0\u03af\u03c3\u03b7\u03c2 \u03c4\u03b1 \u03b5\u03b3\u03ba\u03b1\u03c4\u03b5\u03c3\u03c4\u03b7\u03bc\u03ad\u03bd\u03b1 plugins \u03b3\u03b9\u03b1 \u03c4\u03bf <code>emer-run.php<\/code> \u03ba\u03b1\u03b9 \u03b3\u03b9\u03b1 plugin \u03bc\u03b5 slug \u03cc\u03c0\u03c9\u03c2 <code>wp-smart-thumbnails<\/code>.<\/li>\n\n\n<li>\u0391\u03bd\u03b1\u03b6\u03b7\u03c4\u03ae\u03c3\u03c4\u03b5 \u03c4\u03b9\u03c2 \u03b5\u03c0\u03b9\u03bb\u03bf\u03b3\u03ad\u03c2 <code>fz_emer_login_tokens<\/code> \u03ba\u03b1\u03b9 <code>fz_emer_done_v1<\/code> \u03c3\u03c4\u03bf\u03bd \u03c0\u03af\u03bd\u03b1\u03ba\u03b1 options. \u0395\u03c0\u03b9\u03b8\u03b5\u03c9\u03c1\u03ae\u03c3\u03c4\u03b5 \u03c4\u03b1 \u03c0\u03b5\u03c1\u03b9\u03b5\u03c7\u03cc\u03bc\u03b5\u03bd\u03b1 \u03c0\u03c1\u03b9\u03bd \u03c4\u03b1 \u03b4\u03b9\u03b1\u03b3\u03c1\u03ac\u03c8\u03b5\u03c4\u03b5.<\/li>\n\n\n<li>\u0395\u03bb\u03ad\u03b3\u03be\u03c4\u03b5 access logs, DNS logs \u03ba\u03b1\u03b9 outbound requests \u03b3\u03b9\u03b1 \u03c4\u03b9\u03c2 \u03b4\u03b9\u03b5\u03c5\u03b8\u03cd\u03bd\u03c3\u03b5\u03b9\u03c2 <code>ia-cdn[.]com<\/code> \u03ba\u03b1\u03b9 <code>api[.]sigmative[.]io<\/code> \u03c0\u03bf\u03c5 \u03b1\u03bd\u03b1\u03c6\u03ad\u03c1\u03bf\u03bd\u03c4\u03b1\u03b9 \u03c3\u03c4\u03bf\u03c5\u03c2 \u03b4\u03b5\u03af\u03ba\u03c4\u03b5\u03c2.<\/li>\n\n\n<li>\u0394\u03b9\u03b1\u03b3\u03c1\u03ac\u03c8\u03c4\u03b5 \u03ba\u03b1\u03ba\u03cc\u03b2\u03bf\u03c5\u03bb\u03bf\u03c5\u03c2 \u03c7\u03c1\u03ae\u03c3\u03c4\u03b5\u03c2, webshells, MU plugins \u03ba\u03b1\u03b9 options \u03bc\u03cc\u03bd\u03bf \u03b1\u03c6\u03bf\u03cd \u03b5\u03c0\u03b9\u03b2\u03b5\u03b2\u03b1\u03b9\u03ce\u03c3\u03b5\u03c4\u03b5 \u03cc\u03c4\u03b9 \u03c0\u03c1\u03cc\u03ba\u03b5\u03b9\u03c4\u03b1\u03b9 \u03b3\u03b9\u03b1 \u03b5\u03c5\u03c1\u03ae\u03bc\u03b1\u03c4\u03b1 \u03c4\u03b7\u03c2 \u03ba\u03b1\u03bc\u03c0\u03ac\u03bd\u03b9\u03b1\u03c2. \u0395\u03bb\u03ad\u03b3\u03be\u03c4\u03b5 \u03be\u03b1\u03bd\u03ac \u03c4\u03b7 \u03b2\u03ac\u03c3\u03b7 \u03ba\u03b1\u03b9 \u03c4\u03bf filesystem \u03bc\u03b5\u03c4\u03ac \u03c4\u03b7\u03bd \u03b1\u03c6\u03b1\u03af\u03c1\u03b5\u03c3\u03b7.<\/li>\n\n\n<li>\u0391\u03bb\u03bb\u03ac\u03be\u03c4\u03b5 \u03ba\u03c9\u03b4\u03b9\u03ba\u03bf\u03cd\u03c2 \u03b3\u03b9\u03b1 \u03cc\u03bb\u03bf\u03c5\u03c2 \u03c4\u03bf\u03c5\u03c2 administrators, \u03b1\u03bd\u03b1\u03bd\u03b5\u03ce\u03c3\u03c4\u03b5 WordPress salts \u03ba\u03b1\u03b9 \u03c4\u03b5\u03c1\u03bc\u03b1\u03c4\u03af\u03c3\u03c4\u03b5 \u03b5\u03bd\u03b5\u03c1\u03b3\u03ad\u03c2 \u03c3\u03c5\u03bd\u03b5\u03b4\u03c1\u03af\u03b5\u03c2. \u0395\u03bb\u03ad\u03b3\u03be\u03c4\u03b5 \u03b9\u03b4\u03b9\u03b1\u03af\u03c4\u03b5\u03c1\u03b1 \u03c4\u03bf\u03bd \u03c0\u03b1\u03bb\u03b1\u03b9\u03cc\u03c4\u03b5\u03c1\u03bf \u03bb\u03bf\u03b3\u03b1\u03c1\u03b9\u03b1\u03c3\u03bc\u03cc administrator, \u03b5\u03c0\u03b5\u03b9\u03b4\u03ae \u03c4\u03bf\u03bd \u03c3\u03c4\u03cc\u03c7\u03b5\u03c5\u03b5 \u03c4\u03bf magic-login backdoor.<\/li>\n\n\n<li>\u0395\u03c0\u03b1\u03bd\u03b5\u03b3\u03ba\u03b1\u03c4\u03b1\u03c3\u03c4\u03ae\u03c3\u03c4\u03b5 \u03b1\u03c0\u03cc \u03b1\u03be\u03b9\u03cc\u03c0\u03b9\u03c3\u03c4\u03b7 \u03c0\u03b7\u03b3\u03ae \u03c4\u03b1 \u03b5\u03c0\u03b7\u03c1\u03b5\u03b1\u03b6\u03cc\u03bc\u03b5\u03bd\u03b1 plugins \u03ba\u03b1\u03b9 \u03b5\u03c0\u03b1\u03bd\u03b5\u03be\u03b5\u03c4\u03ac\u03c3\u03c4\u03b5 \u03b1\u03bd \u03c4\u03b1 \u03c7\u03c1\u03b5\u03b9\u03ac\u03b6\u03b5\u03c3\u03c4\u03b5. \u039c\u03b7 \u03b2\u03b1\u03c3\u03b9\u03c3\u03c4\u03b5\u03af\u03c4\u03b5 \u03bc\u03cc\u03bd\u03bf \u03c3\u03b5 \u03b5\u03bd\u03b7\u03bc\u03ad\u03c1\u03c9\u03c3\u03b7 \u03ae \u03b5\u03c0\u03b1\u03bd\u03b5\u03b3\u03ba\u03b1\u03c4\u03ac\u03c3\u03c4\u03b1\u03c3\u03b7 plugin \u03b3\u03b9\u03b1 \u03bd\u03b1 \u03b1\u03c6\u03b1\u03b9\u03c1\u03ad\u03c3\u03b5\u03c4\u03b5 \u03b5\u03c0\u03b9\u03bc\u03bf\u03bd\u03ae \u03c0\u03bf\u03c5 \u03ad\u03c7\u03b5\u03b9 \u03ae\u03b4\u03b7 \u03b3\u03c1\u03b1\u03c6\u03c4\u03b5\u03af \u03c3\u03b5 MU plugins \u03ba\u03b1\u03b9 \u03c3\u03c4\u03b7 \u03b2\u03ac\u03c3\u03b7 \u03b4\u03b5\u03b4\u03bf\u03bc\u03ad\u03bd\u03c9\u03bd.<\/li>\n\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\">\u03a7\u03c1\u03bf\u03bd\u03bf\u03bb\u03cc\u03b3\u03b9\u03bf \u03c4\u03bf\u03c5 \u03c0\u03b5\u03c1\u03b9\u03c3\u03c4\u03b1\u03c4\u03b9\u03ba\u03bf\u03cd<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li><strong>1 \u039c\u03b1\u03c1\u03c4\u03af\u03bf\u03c5 2026:<\/strong> \u03a4\u03bf JavaScript \u03c4\u03bf\u03c5 Biggopti API \u03c0\u03c1\u03bf\u03c3\u03c4\u03ad\u03b8\u03b7\u03ba\u03b5 \u03c3\u03c4\u03bf Prime Slider 4.1.9, \u03c3\u03c4\u03bf SVN <code>r3471891<\/code>. \u03a4\u03bf <code>display_id<\/code> \u03b5\u03b9\u03c3\u03ae\u03c7\u03b8\u03b7 \u03c7\u03c9\u03c1\u03af\u03c2 escaping \u03c3\u03c4\u03bf attribute <code>id<\/code> \u03ba\u03b1\u03b9 \u03c7\u03c1\u03b7\u03c3\u03b9\u03bc\u03bf\u03c0\u03bf\u03b9\u03ae\u03b8\u03b7\u03ba\u03b5 \u03c4\u03bf endpoint <code>api-data-records<\/code>.<\/li>\n\n\n<li><strong>10 \u039c\u03b1\u0390\u03bf\u03c5 2026:<\/strong> \u03a4\u03bf endpoint \u03ac\u03bb\u03bb\u03b1\u03be\u03b5 \u03c3\u03b5 <code>api-data-all-records<\/code>. \u03a0\u03c1\u03bf\u03c3\u03c4\u03ad\u03b8\u03b7\u03ba\u03b5 sanitizer \u03bc\u03b5 <code>DOMParser<\/code> \u03b3\u03b9\u03b1 \u03c4\u03bf \u03c0\u03b5\u03b4\u03af\u03bf \u03c0\u03b5\u03c1\u03b9\u03b5\u03c7\u03bf\u03bc\u03ad\u03bd\u03bf\u03c5, \u03b1\u03bb\u03bb\u03ac \u03c4\u03bf <code>id<\/code> \u03c3\u03c5\u03bd\u03ad\u03c7\u03b9\u03c3\u03b5 \u03bd\u03b1 \u03bc\u03b7\u03bd \u03ad\u03c7\u03b5\u03b9 escaping.<\/li>\n\n\n<li><strong>23 \u0399\u03bf\u03c5\u03bd\u03af\u03bf\u03c5 2026:<\/strong> \u0397 \u03c4\u03b9\u03bc\u03ae <code>start_date<\/code> \u03c4\u03b7\u03c2 \u03ba\u03b1\u03bc\u03c0\u03ac\u03bd\u03b9\u03b1\u03c2 \u03c3\u03c4\u03bf \u03b4\u03b7\u03bb\u03b7\u03c4\u03b7\u03c1\u03b9\u03b1\u03c3\u03bc\u03ad\u03bd\u03bf API \u03b1\u03bd\u03c4\u03b9\u03c3\u03c4\u03bf\u03b9\u03c7\u03b5\u03af \u03c3\u03b5 notice \u00abSummer Sale\u00bb. \u0391\u03c5\u03c4\u03ae \u03b5\u03af\u03bd\u03b1\u03b9 \u03b7 \u03c0\u03b1\u03bb\u03b1\u03b9\u03cc\u03c4\u03b5\u03c1\u03b7 \u03c0\u03b9\u03b8\u03b1\u03bd\u03ae \u03b7\u03bc\u03b5\u03c1\u03bf\u03bc\u03b7\u03bd\u03af\u03b1 \u03b5\u03bd\u03b5\u03c1\u03b3\u03ae\u03c2 XSS.<\/li>\n\n\n<li><strong>6 \u0391\u03c5\u03b3\u03bf\u03cd\u03c3\u03c4\u03bf\u03c5 2026, 22:40 UTC:<\/strong> \u039a\u03b1\u03c4\u03b1\u03b3\u03c1\u03ac\u03c6\u03b7\u03ba\u03b5 \u03c4\u03bf \u03c4\u03b5\u03bb\u03b5\u03c5\u03c4\u03b1\u03af\u03bf <code>Last-Modified<\/code> \u03b3\u03b9\u03b1 \u03c4\u03bf \u03b4\u03b7\u03bb\u03b7\u03c4\u03b7\u03c1\u03b9\u03b1\u03c3\u03bc\u03ad\u03bd\u03bf <code>api-data-records<\/code>.<\/li>\n\n\n<li><strong>7 \u0391\u03c5\u03b3\u03bf\u03cd\u03c3\u03c4\u03bf\u03c5 2026, 09:11 UTC:<\/strong> \u039a\u03b1\u03c4\u03b1\u03b3\u03c1\u03ac\u03c6\u03b7\u03ba\u03b5 \u03c4\u03bf \u03c4\u03b5\u03bb\u03b5\u03c5\u03c4\u03b1\u03af\u03bf <code>Last-Modified<\/code> \u03b3\u03b9\u03b1 \u03c4\u03bf \u03b4\u03b7\u03bb\u03b7\u03c4\u03b7\u03c1\u03b9\u03b1\u03c3\u03bc\u03ad\u03bd\u03bf <code>api-data-all-records<\/code>.<\/li>\n\n\n<li><strong>7 \u0391\u03c5\u03b3\u03bf\u03cd\u03c3\u03c4\u03bf\u03c5 2026:<\/strong> \u0397 \u03b5\u03c0\u03af\u03b8\u03b5\u03c3\u03b7 \u03b5\u03bd\u03c4\u03bf\u03c0\u03af\u03c3\u03c4\u03b7\u03ba\u03b5 \u03b5\u03bd\u03b5\u03c1\u03b3\u03ae \u03ba\u03b1\u03b9 \u03c4\u03b1 plugins \u03ad\u03ba\u03bb\u03b5\u03b9\u03c3\u03b1\u03bd \u03c3\u03c4\u03bf\u03bd \u03ba\u03b1\u03c4\u03ac\u03bb\u03bf\u03b3\u03bf \u03c4\u03bf\u03c5 WordPress \u03bc\u03ad\u03c7\u03c1\u03b9 \u03bd\u03b1 \u03b5\u03bb\u03b5\u03b3\u03c7\u03b8\u03bf\u03cd\u03bd.<\/li>\n\n\n<li><strong>7 \u0391\u03c5\u03b3\u03bf\u03cd\u03c3\u03c4\u03bf\u03c5 2026, 16:56 UTC:<\/strong> \u03a3\u03c5\u03bb\u03bb\u03ad\u03c7\u03b8\u03b7\u03ba\u03b1\u03bd artifacts \u03c4\u03b7\u03c2 \u03ad\u03c1\u03b5\u03c5\u03bd\u03b1\u03c2.<\/li>\n\n\n<li><strong>8 \u0391\u03c5\u03b3\u03bf\u03cd\u03c3\u03c4\u03bf\u03c5 2026:<\/strong> \u039a\u03b1\u03b9 \u03c4\u03b1 \u03b4\u03cd\u03bf API endpoints \u03b5\u03c0\u03ad\u03c3\u03c4\u03c1\u03b5\u03c6\u03b1\u03bd \u03c0\u03bb\u03ad\u03bf\u03bd \u03ba\u03b1\u03b8\u03b1\u03c1\u03cc JSON.<\/li>\n\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">\u03a4\u03b9 \u03c0\u03c1\u03ad\u03c0\u03b5\u03b9 \u03bd\u03b1 \u03ba\u03c1\u03b1\u03c4\u03ae\u03c3\u03b5\u03c4\u03b5<\/h2>\n\n\n\n<p>\u0397 \u03b5\u03c0\u03af\u03b8\u03b5\u03c3\u03b7 \u03b4\u03b5\u03af\u03c7\u03bd\u03b5\u03b9 \u03cc\u03c4\u03b9 \u03b7 \u03b1\u03c3\u03c6\u03ac\u03bb\u03b5\u03b9\u03b1 \u03b5\u03bd\u03cc\u03c2 plugin \u03b4\u03b5\u03bd \u03b5\u03be\u03b1\u03c1\u03c4\u03ac\u03c4\u03b1\u03b9 \u03bc\u03cc\u03bd\u03bf \u03b1\u03c0\u03cc \u03c4\u03b1 \u03b1\u03c1\u03c7\u03b5\u03af\u03b1 \u03c0\u03bf\u03c5 \u03b5\u03b3\u03ba\u03b1\u03b8\u03b9\u03c3\u03c4\u03ac\u03c4\u03b5. \u039a\u03ac\u03b8\u03b5 \u03b1\u03c0\u03bf\u03bc\u03b1\u03ba\u03c1\u03c5\u03c3\u03bc\u03ad\u03bd\u03bf feed \u03c0\u03bf\u03c5 \u03c6\u03bf\u03c1\u03c4\u03ce\u03bd\u03b5\u03c4\u03b1\u03b9 \u03c3\u03c4\u03bf <code>wp-admin<\/code> \u03b1\u03c0\u03bf\u03c4\u03b5\u03bb\u03b5\u03af \u03c4\u03bc\u03ae\u03bc\u03b1 \u03c4\u03b7\u03c2 \u03b1\u03bb\u03c5\u03c3\u03af\u03b4\u03b1\u03c2 \u03b5\u03bc\u03c0\u03b9\u03c3\u03c4\u03bf\u03c3\u03cd\u03bd\u03b7\u03c2 \u03ba\u03b1\u03b9 \u03c7\u03c1\u03b5\u03b9\u03ac\u03b6\u03b5\u03c4\u03b1\u03b9 \u03b1\u03c5\u03c3\u03c4\u03b7\u03c1\u03ae \u03b5\u03c0\u03b9\u03ba\u03cd\u03c1\u03c9\u03c3\u03b7 \u03ba\u03b1\u03b9 escaping \u03c0\u03c1\u03b9\u03bd \u03c0\u03b5\u03c1\u03ac\u03c3\u03b5\u03b9 \u03c3\u03c4\u03bf DOM.<\/p>\n\n\n\n<p>\u0395\u03bb\u03ad\u03b3\u03be\u03c4\u03b5 \u03c4\u03ce\u03c1\u03b1 \u03c4\u03b1 sites \u03c0\u03bf\u03c5 \u03c7\u03c1\u03b7\u03c3\u03b9\u03bc\u03bf\u03c0\u03bf\u03b9\u03bf\u03cd\u03bd plugins \u03c4\u03b7\u03c2 BdThemes \u03bc\u03b5 \u03b2\u03ac\u03c3\u03b7 \u03c4\u03bf\u03c5\u03c2 \u03c3\u03c5\u03b3\u03ba\u03b5\u03ba\u03c1\u03b9\u03bc\u03ad\u03bd\u03bf\u03c5\u03c2 \u03b4\u03b5\u03af\u03ba\u03c4\u03b5\u03c2, \u03b1\u03ba\u03cc\u03bc\u03b7 \u03ba\u03b1\u03b9 \u03b1\u03bd \u03c4\u03b1 API endpoints \u03ad\u03c7\u03bf\u03c5\u03bd \u03ba\u03b1\u03b8\u03b1\u03c1\u03b9\u03c3\u03c4\u03b5\u03af \u03ba\u03b1\u03b9 \u03c4\u03b1 \u03b1\u03c1\u03c7\u03b5\u03af\u03b1 \u03c4\u03c9\u03bd plugins \u03b4\u03b5\u03bd \u03b5\u03bc\u03c6\u03b1\u03bd\u03af\u03b6\u03bf\u03c5\u03bd \u03b1\u03bb\u03bb\u03b1\u03b3\u03ad\u03c2. \u0391\u03bd \u03b2\u03c1\u03b5\u03af\u03c4\u03b5 backdoor, \u03ba\u03c1\u03c5\u03c6\u03cc administrator \u03ae \u03b5\u03bd\u03b4\u03b5\u03af\u03be\u03b5\u03b9\u03c2 outbound \u03b5\u03c0\u03b9\u03ba\u03bf\u03b9\u03bd\u03c9\u03bd\u03af\u03b1\u03c2 \u03bc\u03b5 \u03c4\u03bf C2, \u03b1\u03bd\u03c4\u03b9\u03bc\u03b5\u03c4\u03c9\u03c0\u03af\u03c3\u03c4\u03b5 \u03c4\u03bf \u03c0\u03b5\u03c1\u03b9\u03c3\u03c4\u03b1\u03c4\u03b9\u03ba\u03cc \u03c9\u03c2 \u03c0\u03bb\u03ae\u03c1\u03b7 \u03c0\u03b1\u03c1\u03b1\u03b2\u03af\u03b1\u03c3\u03b7 \u03c4\u03bf\u03c5 WordPress \u03c0\u03b5\u03c1\u03b9\u03b2\u03ac\u03bb\u03bb\u03bf\u03bd\u03c4\u03bf\u03c2 \u03ba\u03b1\u03b9 \u03b5\u03c1\u03b5\u03c5\u03bd\u03ae\u03c3\u03c4\u03b5 \u03cc\u03bb\u03b1 \u03c4\u03b1 credentials \u03ba\u03b1\u03b9 \u03c4\u03b1 \u03c3\u03c5\u03c3\u03c4\u03ae\u03bc\u03b1\u03c4\u03b1 \u03c0\u03bf\u03c5 \u03c3\u03c5\u03bd\u03b4\u03ad\u03bf\u03bd\u03c4\u03b1\u03b9 \u03bc\u03b5 \u03b1\u03c5\u03c4\u03cc.<\/p>\n\n\n<div class=\"references-section\">\n                <h2>\u0391\u03bd\u03b1\u03c6\u03bf\u03c1\u03ad\u03c2 \/ \u03a0\u03b7\u03b3\u03ad\u03c2<\/h2>\n                <ul class=\"references-list\"><li><a href=\"https:\/\/www.wordfence.com\/blog\/2026\/08\/psa-supply-chain-compromise-in-bdthemes-ecosystem-via-poisoned-api-response\/\" target=\"_blank\" rel=\"noopener noreferrer\">PSA: Supply Chain Compromise in BdThemes Ecosystem via Poisoned API Response<\/a><\/li><\/ul>\n            <\/div>","protected":false},"excerpt":{"rendered":"<p>\u0388\u03bd\u03b1 \u03b4\u03b7\u03bb\u03b7\u03c4\u03b7\u03c1\u03b9\u03b1\u03c3\u03bc\u03ad\u03bd\u03bf JSON feed \u03b1\u03c1\u03ba\u03bf\u03cd\u03c3\u03b5 \u03b3\u03b9\u03b1 \u03bd\u03b1 \u03bc\u03b5\u03c4\u03b1\u03c4\u03c1\u03ad\u03c8\u03b5\u03b9 banners \u03c4\u03bf\u03c5 `wp-admin` \u03c3\u03b5 \u03bc\u03b7\u03c7\u03b1\u03bd\u03b9\u03c3\u03bc\u03cc \u03c0\u03bb\u03ae\u03c1\u03bf\u03c5\u03c2 \u03c0\u03b1\u03c1\u03b1\u03b2\u03af\u03b1\u03c3\u03b7\u03c2. \u0394\u03b5\u03af\u03c4\u03b5 \u03c0\u03bf\u03b9\u03b1 BdThemes plugins \u03b5\u03c0\u03b7\u03c1\u03b5\u03ac\u03b6\u03bf\u03bd\u03c4\u03b1\u03b9 \u03ba\u03b1\u03b9 \u03c0\u03bf\u03b9\u03b1 \u03af\u03c7\u03bd\u03b7 \u03c0\u03c1\u03ad\u03c0\u03b5\u03b9 \u03bd\u03b1 \u03b1\u03bd\u03b1\u03b6\u03b7\u03c4\u03ae\u03c3\u03b5\u03c4\u03b5 \u03c4\u03ce\u03c1\u03b1.<\/p>\n","protected":false},"author":68,"featured_media":252,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9],"tags":[36,134,10,125,35],"class_list":["post-253","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-asfaleia","tag-plugins","tag-supply-chain","tag-wordpress","tag-xss","tag-35"],"_links":{"self":[{"href":"https:\/\/helloblog.io\/el\/wp-json\/wp\/v2\/posts\/253","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/helloblog.io\/el\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/helloblog.io\/el\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/helloblog.io\/el\/wp-json\/wp\/v2\/users\/68"}],"replies":[{"embeddable":true,"href":"https:\/\/helloblog.io\/el\/wp-json\/wp\/v2\/comments?post=253"}],"version-history":[{"count":0,"href":"https:\/\/helloblog.io\/el\/wp-json\/wp\/v2\/posts\/253\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/helloblog.io\/el\/wp-json\/wp\/v2\/media\/252"}],"wp:attachment":[{"href":"https:\/\/helloblog.io\/el\/wp-json\/wp\/v2\/media?parent=253"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/helloblog.io\/el\/wp-json\/wp\/v2\/categories?post=253"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/helloblog.io\/el\/wp-json\/wp\/v2\/tags?post=253"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}