{"id":275,"date":"2026-10-17T11:03:26","date_gmt":"2026-10-17T09:03:26","guid":{"rendered":"https:\/\/helloblog.io\/et\/rank-math-pro-3-0-123-tarneahelarunne-saidi-kontroll-ja-puhastus\/"},"modified":"2026-10-17T11:03:26","modified_gmt":"2026-10-17T09:03:26","slug":"rank-math-pro-3-0-123-tarneahelarunne-saidi-kontroll-ja-puhastus","status":"publish","type":"post","link":"https:\/\/helloblog.io\/et\/rank-math-pro-3-0-123-tarneahelarunne-saidi-kontroll-ja-puhastus\/","title":{"rendered":"Rank Math PRO 3.0.123 tarneahelar\u00fcnne: kuidas kontrollida ja puhastada oma saiti"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Rank Math PRO versiooni 3.0.123 ametlike allalaadimis- ja uuenduspakettide hulka sattus pahavara. Juhtum puudutab koopiaid, mis laaditi alla <strong>15. oktoobril 2026 kell 20.02 UTC kuni 16. oktoobril kell 7.12 UTC<\/strong>. Nakatunud plugina aktiveerimine v\u00f5is anda r\u00fcndajale ligip\u00e4\u00e4su saidile ja seal k\u00e4ttesaadavatele saladustele.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Rank Math eemaldas nakatunud failid ja avaldas puhta versiooni <strong>3.0.124<\/strong>. Kui j\u00f5udsid pahavara aktiveerida, pead lisaks plugina asendamisele taastama v\u00f5i puhastama saidi, vahetama ligip\u00e4\u00e4suandmed ning kontrollima, kas r\u00fcndaja j\u00e4ttis serverisse muid tagauksi.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Mis juhtus ja miks tavalisest uuendusest ei piisa?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Tegu oli <strong>tarneahelar\u00fcndega<\/strong>: pahavara j\u00f5udis kasutajani tootja ametliku tarkvarapaketi kaudu. Probleem ei seisnenud tavap\u00e4rases programmeerimisveas, mida r\u00fcndaja eraldi \u00e4ra kasutas, vaid paketis endas olnud pahatahtlikus koodis. Rank Math pole avaldanud, kuidas r\u00fcndaja pakette muutis.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Juhtumi tunnus on <strong>CVE-2026-111862<\/strong>. Turvan\u00f5rkuste raskust hindava CVSS-skaala j\u00e4rgi on selle skoor <strong>9,8 ehk kriitiline<\/strong>. Wordfence Intelligence liigitab juhtumi autentimata kasutajale k\u00e4ttesaadavaks sisseehitatud pahatahtlikuks koodiks; plugina tunnus on <code>seo-by-rank-math-pro<\/code>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Pahavara k\u00e4ivitub plugina aktiveerimisel, suhtleb domeeniga <code>rank1cdn[.]com<\/code> ja v\u00f5ib luua p\u00fcsiva ligip\u00e4\u00e4su. Saidi k\u00fclastused v\u00f5ivad peidetud tagauksed uuesti tekitada. Ohus on WordPressi ligip\u00e4\u00e4suandmed, andmebaasi kasutajatunnused ja paroolid, API-v\u00f5tmed ning muud saladused, mida veebiserver saab lugeda.<\/p>\n\n\n\n<div class=\"wp-block-group callout callout-warning is-style-warning is-layout-flow wp-block-group-is-layout-flow\" style=\"border-width:1px;border-radius:8px;padding-top:1rem;padding-right:1.5rem;padding-bottom:1rem;padding-left:1.5rem\">\n\n<h4 class=\"wp-block-heading callout-title\">Puhas pluginapakett ei t\u00e4henda puhast saiti<\/h4>\n\n\n<p class=\"wp-block-paragraph\">Versioon 3.0.124 asendab Rank Math PRO failid, kuid ei eemalda mujale loodud pahatahtlikke faile, administraatorikontosid ega ajastatud \u00fclesandeid. Ka juba uuendatud sait vajab taastet\u00f6id, kui nakatunud koopia oli varem aktiivne.<\/p>\n\n<\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Kas sinu sait on m\u00f5jutatud?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Kontrolli WordPressi haldusliidese jaotises <strong>Pluginad<\/strong>, milline Rank Math PRO versioon on paigaldatud. Pelgalt versiooninumber 3.0.123 ei t\u00f5enda nakatumist: pahavara sisaldas ainult osa ligikaudu 11-tunnise ajavahemiku jooksul v\u00e4ljastatud pakette. Kesk-Euroopa suveajas kestis see vahemik 15. oktoobril kella 22.02-st kuni 16. oktoobril kella 9.12-ni.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Juhtum puudutab <strong>PRO-lisapluginat<\/strong>. Tasuta Rank Mathi pluginat pole m\u00f5jutatud tootena nimetatud. Rank Mathil on andmed selle kohta, kes nakatunud paketi alla laadis, ning ettev\u00f5te teavitab neid kasutajaid.<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n\n<li><strong>Paigaldasid ja aktiveerisid m\u00f5jutatud ajavahemikul saadud versiooni 3.0.123.<\/strong> K\u00e4sitle saiti kompromiteerituna ning vali allpool kirjeldatud taastamine v\u00f5i k\u00e4sitsi puhastus.<\/li>\n\n\n<li><strong>Paigaldasid m\u00f5jutatud versiooni 3.0.123, kuid ei aktiveerinud seda kordagi.<\/strong> Kustuta nakatunud plugina failid, paigalda oma Rank Mathi kontolt puhas versioon 3.0.124 ning k\u00e4ivita ettevaatusabin\u00f5una turvakontroll.<\/li>\n\n\n<li><strong>Laadisid versiooni 3.0.123 alla, kuid ei paigaldanud ega aktiveerinud seda.<\/strong> Ainu\u00fcksi selle juhtumi p\u00f5hjal pole m\u00e4rki, et sait oleks kompromiteeritud. Kui pole selge, kas failid siiski paigaldati v\u00f5i aktiveeriti, k\u00fcsi abi <a href=\"https:\/\/rankmath.com\/support\/\">Rank Mathi kasutajatoelt<\/a>.<\/li>\n\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Kui said Rank Mathilt juhtumi kohta teate, j\u00e4rgi oma olukorrale vastavaid samme ka siis, kui saidil t\u00f6\u00f6tab praegu m\u00f5ni teine versioon. Praegune versiooninumber ei n\u00e4ita, kas pahavara j\u00f5udis varem k\u00e4ivituda.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Kiirkontroll k\u00e4surealt<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">WP-CLI ehk WordPressi k\u00e4sureat\u00f6\u00f6riist aitab kontrollida versiooni, kasutajaid, andmebaasikirjeid ja ajastatud \u00fclesandeid. J\u00e4rgmised k\u00e4sud koguvad esmaseid leide ega puhasta saiti. K\u00e4ivita WordPressi k\u00e4sud oma paigalduse kataloogis; s\u00fcsteemse crontab&#8217;i vaatamiseks vajad sobivaid serveri\u00f5igusi.<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:.875rem;font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:block;padding:16px 0 0 16px;margin-bottom:-1px;width:100%;text-align:left;background-color:#24292e\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"54\" height=\"14\" viewBox=\"0 0 54 14\"><g fill=\"none\" fill-rule=\"evenodd\" transform=\"translate(1 1)\"><circle cx=\"6\" cy=\"6\" r=\"6\" fill=\"#FF5F56\" stroke=\"#E0443E\" stroke-width=\".5\"><\/circle><circle cx=\"26\" cy=\"6\" r=\"6\" fill=\"#FFBD2E\" stroke=\"#DEA123\" stroke-width=\".5\"><\/circle><circle cx=\"46\" cy=\"6\" r=\"6\" fill=\"#27C93F\" stroke=\"#1AAB29\" stroke-width=\".5\"><\/circle><\/g><\/svg><\/span><span role=\"button\" tabindex=\"0\" style=\"color:#e1e4e8;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly># Kontrolli PRO-plugina versiooni.\nwp plugin get seo-by-rank-math-pro --field=version\n\n# Otsi juhtumiga seotud andmebaasikirjeid.\nwp option get _uf6qdn2hmm\nwp option get t8krdk990phb\nwp option get _np5pvf754c\n\n# Vaata administraatoreid ja kontode loomise aega.\nwp user list --role=administrator --fields=ID,user_login,user_email,user_registered\n\n# Kontrolli WordPressi core'i faile ja ajastatud s\u00fcndmusi.\nwp core verify-checksums\nwp cron event list\n\n# Kontrolli v\u00f5ltsitud core'i faili olemasolu.\nls -la wp-includes\/class-wp-cache-util.php\n\n# Kasuta www-data asemel oma veebiserveri tegelikku kasutajat.\ncrontab -l -u www-data | grep 'ms6v46'\n\n# Otsi juhtumiga seotud v\u00f5tit PHP-failidest.\ngrep -RIn --include='*.php' 'xmmqhn' wp-content\/\n<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki github-dark\" style=\"background-color:#24292e;color:#e1e4e8\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color:#6A737D\"># Kontrolli PRO-plugina versiooni.<\/span><\/span>\n<span class=\"line\"><span style=\"color:#B392F0\">wp<\/span><span style=\"color:#9ECBFF\"> plugin<\/span><span style=\"color:#9ECBFF\"> get<\/span><span style=\"color:#9ECBFF\"> seo-by-rank-math-pro<\/span><span style=\"color:#79B8FF\"> --field=version<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color:#6A737D\"># Otsi juhtumiga seotud andmebaasikirjeid.<\/span><\/span>\n<span class=\"line\"><span style=\"color:#B392F0\">wp<\/span><span style=\"color:#9ECBFF\"> option<\/span><span style=\"color:#9ECBFF\"> get<\/span><span style=\"color:#9ECBFF\"> _uf6qdn2hmm<\/span><\/span>\n<span class=\"line\"><span style=\"color:#B392F0\">wp<\/span><span style=\"color:#9ECBFF\"> option<\/span><span style=\"color:#9ECBFF\"> get<\/span><span style=\"color:#9ECBFF\"> t8krdk990phb<\/span><\/span>\n<span class=\"line\"><span style=\"color:#B392F0\">wp<\/span><span style=\"color:#9ECBFF\"> option<\/span><span style=\"color:#9ECBFF\"> get<\/span><span style=\"color:#9ECBFF\"> _np5pvf754c<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color:#6A737D\"># Vaata administraatoreid ja kontode loomise aega.<\/span><\/span>\n<span class=\"line\"><span style=\"color:#B392F0\">wp<\/span><span style=\"color:#9ECBFF\"> user<\/span><span style=\"color:#9ECBFF\"> list<\/span><span style=\"color:#79B8FF\"> --role=administrator<\/span><span style=\"color:#79B8FF\"> --fields=ID,user_login,user_email,user_registered<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color:#6A737D\"># Kontrolli WordPressi core'i faile ja ajastatud s\u00fcndmusi.<\/span><\/span>\n<span class=\"line\"><span style=\"color:#B392F0\">wp<\/span><span style=\"color:#9ECBFF\"> core<\/span><span style=\"color:#9ECBFF\"> verify-checksums<\/span><\/span>\n<span class=\"line\"><span style=\"color:#B392F0\">wp<\/span><span style=\"color:#9ECBFF\"> cron<\/span><span style=\"color:#9ECBFF\"> event<\/span><span style=\"color:#9ECBFF\"> list<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color:#6A737D\"># Kontrolli v\u00f5ltsitud core'i faili olemasolu.<\/span><\/span>\n<span class=\"line\"><span style=\"color:#B392F0\">ls<\/span><span style=\"color:#79B8FF\"> -la<\/span><span style=\"color:#9ECBFF\"> wp-includes\/class-wp-cache-util.php<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color:#6A737D\"># Kasuta www-data asemel oma veebiserveri tegelikku kasutajat.<\/span><\/span>\n<span class=\"line\"><span style=\"color:#B392F0\">crontab<\/span><span style=\"color:#79B8FF\"> -l<\/span><span style=\"color:#79B8FF\"> -u<\/span><span style=\"color:#9ECBFF\"> www-data<\/span><span style=\"color:#F97583\"> |<\/span><span style=\"color:#B392F0\"> grep<\/span><span style=\"color:#9ECBFF\"> 'ms6v46'<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color:#6A737D\"># Otsi juhtumiga seotud v\u00f5tit PHP-failidest.<\/span><\/span>\n<span class=\"line\"><span style=\"color:#B392F0\">grep<\/span><span style=\"color:#79B8FF\"> -RIn<\/span><span style=\"color:#79B8FF\"> --include=<\/span><span style=\"color:#9ECBFF\">'*.php'<\/span><span style=\"color:#9ECBFF\"> 'xmmqhn'<\/span><span style=\"color:#9ECBFF\"> wp-content\/<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<div class=\"wp-block-group callout callout-info is-style-info is-layout-flow wp-block-group-is-layout-flow\" style=\"border-width:1px;border-radius:8px;padding-top:1rem;padding-right:1.5rem;padding-bottom:1rem;padding-left:1.5rem\">\n\n<h4 class=\"wp-block-heading callout-title\">\u00dcks puhas kontrollitulemus ei v\u00e4lista nakatumist<\/h4>\n\n\n<p class=\"wp-block-paragraph\">Versioonikontroll, \u00fcks puuduv andmebaasikirje v\u00f5i korras WordPressi core ei kata k\u00f5iki v\u00f5imalikke tagauksi. Kui aktiveerisid nakatunud paketi, j\u00e4rgi kogu taastamis- v\u00f5i puhastusprotsessi.<\/p>\n\n<\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Esimene valik: taasta sait puhtast varukoopiast<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Kui aktiveerisid nakatunud versiooni, eelista saidi ja andmebaasi taastamist enne juhtumi algust loodud puhtast varukoopiast. Sobiv koopia peab olema varasem kui <strong>15. oktoober 2026 kell 20.02 UTC<\/strong>. Sama hetk oli 15. oktoobril kell 22.02 CEST ja 16.02 EDT ning 16. oktoobril kell 1.32 IST.<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n\n<li><strong>Taasta nii saidi failid kui ka andmebaas<\/strong> enne m\u00f5jutatud ajavahemikku loodud puhtast varukoopiast.<\/li>\n\n\n<li><strong>K\u00e4ivita turvakontroll<\/strong> usaldusv\u00e4\u00e4rse t\u00f6\u00f6riistaga, n\u00e4iteks <a href=\"https:\/\/wordpress.org\/plugins\/wordfence\/\">Wordfence&#8217;iga<\/a> v\u00f5i <a href=\"https:\/\/wordpress.org\/plugins\/sucuri-scanner\/\">Sucuriga<\/a>.<\/li>\n\n\n<li><strong>Vaheta k\u00f5ik paroolid ja muud ligip\u00e4\u00e4suandmed.<\/strong> Eelda, et saidile k\u00e4ttesaadavad saladused v\u00f5isid lekkida. T\u00e4ieliku kontroll-loendi leiad allpool ligip\u00e4\u00e4suandmete jaotisest.<\/li>\n\n\n<li><strong>Paigalda puhas Rank Math PRO 3.0.124.<\/strong> Laadi pakett alla oma Rank Mathi kontolt ja paigalda see taastatud saidile.<\/li>\n\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Kui sa ei tea, kuidas varukoopiat taastada, palu abi oma majutusteenuse pakkujalt. Arvesta ka v\u00f5imalusega, et r\u00fcndaja muutis faile v\u00f5i seadeid v\u00e4ljaspool WordPressi kataloogi: neid kohti tuleb eraldi kontrollida.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Teine valik: puhasta sait k\u00e4sitsi<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Kui puhast varukoopiat pole v\u00f5imalik taastada, pead eemaldama pahavara ning kontrollima r\u00fcndaja muid muudatusi. J\u00e4rjekord loeb: enne peidetud failide kustutamist tuleb peatada mehhanism, mis v\u00f5ib need iga k\u00fclastuse j\u00e4rel tagasi luua.<\/p>\n\n\n\n<div class=\"wp-block-group callout callout-warning is-style-warning is-layout-flow wp-block-group-is-layout-flow\" style=\"border-width:1px;border-radius:8px;padding-top:1rem;padding-right:1.5rem;padding-bottom:1rem;padding-left:1.5rem\">\n\n<h4 class=\"wp-block-heading callout-title\">Vajadusel kaasa majutaja v\u00f5i turvaspetsialist<\/h4>\n\n\n<p class=\"wp-block-paragraph\">K\u00e4sitsi puhastus eeldab t\u00f6\u00f6d saidi failide, andmebaasi ja serveriseadetega. Kui need pole sulle tuttavad v\u00f5i puuduvad vajalikud \u00f5igused, lase sammud teha majutusteenuse pakkujal v\u00f5i p\u00e4deval turvaspetsialistil.<\/p>\n\n<\/div>\n\n\n\n<h3 class=\"wp-block-heading\">1. Peata pahavara taastav mehhanism<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Tee k\u00f5ik j\u00e4rgmised toimingud enne teiste tagauksefailide eemaldamist. Ainult plugina v\u00e4ljal\u00fclitamisest ei piisa.<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n\n<li><strong>Kustuta kogu Rank Math PRO kaust <code>rank-math-pro<\/code>.<\/strong> Leia see majutuse failihalduri v\u00f5i FTP abil ja eemalda koos k\u00f5igi failidega.<\/li>\n\n\n<li><strong>Eemalda pahatahtlikud andmebaasikirjed.<\/strong> Ava WordPressi andmebaas n\u00e4iteks phpMyAdminis ning otsi tabelist <code>wp_options<\/code> kirjeid, mille <code>option_name<\/code> on <code>_uf6qdn2hmm<\/code>, <code>t8krdk990phb<\/code> v\u00f5i <code>_np5pvf754c<\/code>. Kustuta leitud kirjed. Kui paigaldus kasutab muud tabeliprefiksit, vaata vastavat options-tabelit.<\/li>\n\n\n<li><strong>Blokeeri v\u00f5imaluse korral \u00fchendused pahatahtliku domeeniga.<\/strong> Keela majutuse v\u00f5i tulem\u00fc\u00fcri seadetes serverist v\u00e4ljuvad \u00fchendused domeenile <code>rank1cdn.com<\/code>.<\/li>\n\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\">2. Otsi tagauksi ja muid r\u00fcndaja muudatusi<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">R\u00fcndaja v\u00f5is j\u00e4tta maha t\u00e4iendavaid faile, kontosid ja serveritaseme muudatusi. Vaata l\u00e4bi k\u00f5ik j\u00e4rgmised kohad, mitte ainult Rank Math PRO kataloog.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Peidetud PHP-tagauksed<\/h4>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li><code>wp-content\/mu-plugins\/<\/code> ehk automaatselt laaditavate pluginatega kataloog.<\/li>\n\n\n<li>Teiste pluginatega kataloogid.<\/li>\n\n\n<li>Mittevaiketeemade kaustad <code>inc\/<\/code>, <code>includes\/<\/code> ja <code>lib\/<\/code>.<\/li>\n\n\n<li>Rank Mathi kaust <code>includes\/<\/code>.<\/li>\n\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Otsi PHP-koodi, kus <code>base64_decode<\/code> esineb koos XOR-ts\u00fcklitega, samuti v\u00f5tit <code>xmmqhn<\/code>, funktsiooni <code>proc_open<\/code> v\u00f5i PHP-FPM-i soklitega suhtlevat koodi. PHP-FPM haldab serveris PHP-protsesse ning sokkel on \u00fcks viis nendega suhelda. Need tunnused aitavad kahtlaseid faile leida; faili pahatahtlikkust tuleb hinnata selle sisu ja p\u00e4ritolu j\u00e4rgi.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Turvaplugin v\u00f5i majutusteenuse pakkuja saab aidata neid tunnuseid otsida ja pahatahtlikud failid eemaldada. \u00c4ra piirdu \u00fche leitud tagaukse kustutamisega.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Tundmatud administraatorid<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Vaata l\u00e4bi k\u00f5ik WordPressi administraatori\u00f5igustega kasutajad. Kahtlased tunnused on kasutajanimi, mis algab <code>wpsupport_<\/code> ja j\u00e4tkub juhuslike m\u00e4rkidega, ning e-posti aadress l\u00f5puga <code>@wp-mail[.]net<\/code>. Eemalda kontod, mille puhul kinnitad, et need on pahatahtlikud v\u00f5i loata loodud.<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:.875rem;font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:block;padding:16px 0 0 16px;margin-bottom:-1px;width:100%;text-align:left;background-color:#24292e\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"54\" height=\"14\" viewBox=\"0 0 54 14\"><g fill=\"none\" fill-rule=\"evenodd\" transform=\"translate(1 1)\"><circle cx=\"6\" cy=\"6\" r=\"6\" fill=\"#FF5F56\" stroke=\"#E0443E\" stroke-width=\".5\"><\/circle><circle cx=\"26\" cy=\"6\" r=\"6\" fill=\"#FFBD2E\" stroke=\"#DEA123\" stroke-width=\".5\"><\/circle><circle cx=\"46\" cy=\"6\" r=\"6\" fill=\"#27C93F\" stroke=\"#1AAB29\" stroke-width=\".5\"><\/circle><\/g><\/svg><\/span><span role=\"button\" tabindex=\"0\" style=\"color:#e1e4e8;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>wp user list --role=administrator\n<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki github-dark\" style=\"background-color:#24292e;color:#e1e4e8\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color:#B392F0\">wp<\/span><span style=\"color:#9ECBFF\"> user<\/span><span style=\"color:#9ECBFF\"> list<\/span><span style=\"color:#79B8FF\"> --role=administrator<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<h4 class=\"wp-block-heading\">V\u00f5ltsitud WordPressi core&#8217;i fail<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Fail <strong><code>wp-includes\/class-wp-cache-util.php<\/code> ei kuulu WordPressi core&#8217;i<\/strong>. Kui leiad selle, eemalda fail ja kontrolli core&#8217;i kontrollsummasid ehk failide terviklust kirjeldavaid v\u00e4\u00e4rtusi.<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:.875rem;font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:block;padding:16px 0 0 16px;margin-bottom:-1px;width:100%;text-align:left;background-color:#24292e\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"54\" height=\"14\" viewBox=\"0 0 54 14\"><g fill=\"none\" fill-rule=\"evenodd\" transform=\"translate(1 1)\"><circle cx=\"6\" cy=\"6\" r=\"6\" fill=\"#FF5F56\" stroke=\"#E0443E\" stroke-width=\".5\"><\/circle><circle cx=\"26\" cy=\"6\" r=\"6\" fill=\"#FFBD2E\" stroke=\"#DEA123\" stroke-width=\".5\"><\/circle><circle cx=\"46\" cy=\"6\" r=\"6\" fill=\"#27C93F\" stroke=\"#1AAB29\" stroke-width=\".5\"><\/circle><\/g><\/svg><\/span><span role=\"button\" tabindex=\"0\" style=\"color:#e1e4e8;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>wp core verify-checksums\n<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki github-dark\" style=\"background-color:#24292e;color:#e1e4e8\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color:#B392F0\">wp<\/span><span style=\"color:#9ECBFF\"> core<\/span><span style=\"color:#9ECBFF\"> verify-checksums<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Paigalda WordPressi core&#8217;i failid ametlikust allikast uuesti, et asendada ka muud v\u00f5imalikud muudetud core&#8217;i failid. \u00dche v\u00f5ltsfaili puudumine ei kinnita \u00fclej\u00e4\u00e4nud failide puhtust.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Failid .htaccess ja .cache<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Kontrolli saidi juurkataloogi ja alamkataloogide <code>.htaccess<\/code>-faile. Otsi reegleid, mis lubavad k\u00e4ivitada <code>.cache<\/code>-laiendiga faile PHP-koodina. Otsi serverist ka PHP-koodi sisaldavaid <code>.cache<\/code>-faile ning uuri kahtlasi leide.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">WordPressi ja s\u00fcsteemi ajastatud \u00fclesanded<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Vaata veebiserveri kasutaja s\u00fcsteemset crontab&#8217;i ehk ajastatud k\u00e4skude loendit ning otsi m\u00e4rkega <code>#ms6v46<\/code> kirjeid. Kontrolli eraldi WordPressi ajastatud s\u00fcndmusi. Uuri kahtlasi \u00fclesandeid ja eemalda pahatahtlikud kirjed.<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:.875rem;font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:block;padding:16px 0 0 16px;margin-bottom:-1px;width:100%;text-align:left;background-color:#24292e\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"54\" height=\"14\" viewBox=\"0 0 54 14\"><g fill=\"none\" fill-rule=\"evenodd\" transform=\"translate(1 1)\"><circle cx=\"6\" cy=\"6\" r=\"6\" fill=\"#FF5F56\" stroke=\"#E0443E\" stroke-width=\".5\"><\/circle><circle cx=\"26\" cy=\"6\" r=\"6\" fill=\"#FFBD2E\" stroke=\"#DEA123\" stroke-width=\".5\"><\/circle><circle cx=\"46\" cy=\"6\" r=\"6\" fill=\"#27C93F\" stroke=\"#1AAB29\" stroke-width=\".5\"><\/circle><\/g><\/svg><\/span><span role=\"button\" tabindex=\"0\" style=\"color:#e1e4e8;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly># Vajadusel asenda www-data veebiserveri kasutajanimega.\ncrontab -l -u www-data\n\n# WordPressi enda ajastatud s\u00fcndmused.\nwp cron event list\n<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki github-dark\" style=\"background-color:#24292e;color:#e1e4e8\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color:#6A737D\"># Vajadusel asenda www-data veebiserveri kasutajanimega.<\/span><\/span>\n<span class=\"line\"><span style=\"color:#B392F0\">crontab<\/span><span style=\"color:#79B8FF\"> -l<\/span><span style=\"color:#79B8FF\"> -u<\/span><span style=\"color:#9ECBFF\"> www-data<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color:#6A737D\"># WordPressi enda ajastatud s\u00fcndmused.<\/span><\/span>\n<span class=\"line\"><span style=\"color:#B392F0\">wp<\/span><span style=\"color:#9ECBFF\"> cron<\/span><span style=\"color:#9ECBFF\"> event<\/span><span style=\"color:#9ECBFF\"> list<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<h4 class=\"wp-block-heading\">Muud pluginad, teemad ja \u00fcleslaaditud failid<\/h4>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>Paigalda pluginad ja teemad nende ametlikest allikatest uuesti. V\u00f5imaluse korral v\u00f5rdle olemasolevaid faile puhaste koopiatega.<\/li>\n\n\n<li>Otsi kataloogist <code>uploads\/<\/code> PHP-faile: \u00fcldjuhul ei peaks need seal olema.<\/li>\n\n\n<li>Uuri ootamatuid v\u00f5i muudetud faile enne, kui need eemaldad.<\/li>\n\n<\/ul>\n\n\n\n<h4 class=\"wp-block-heading\">WordPressist v\u00e4ljapoole j\u00e4\u00e4v serverikeskkond<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">R\u00fcndaja muudatused v\u00f5ivad ulatuda saidi kataloogist kaugemale. Kontrolli ka j\u00e4rgmisi kohti ja serveri olekut.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>SSH-ligip\u00e4\u00e4su lubavad <code>authorized_keys<\/code>-failid.<\/li>\n\n\n<li>Teiste s\u00fcsteemikasutajate crontab&#8217;id.<\/li>\n\n\n<li>Serveris t\u00f6\u00f6tavad protsessid.<\/li>\n\n\n<li>Saidi kataloogist v\u00e4ljapoole j\u00e4\u00e4vad asukohad, kuhu veebiserveri kasutaja saab kirjutada.<\/li>\n\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Kui kasutad jagatud majutust ega p\u00e4\u00e4se nendele aladele ligi, palu majutusteenuse pakkujal need \u00fcle kontrollida. Ainult WordPressi failide l\u00e4bivaatamine ei kata serveritaseme muudatusi.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3. Vaheta k\u00f5ik paroolid ja ligip\u00e4\u00e4suandmed<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Eelda ettevaatusabin\u00f5una, et k\u00f5ik kompromiteeritud saidile k\u00e4ttesaadavad ligip\u00e4\u00e4suandmed ja saladused v\u00f5isid lekkida. Asenda need uute turvaliste v\u00e4\u00e4rtustega. <strong>Seda pead tegema ka siis, kui taastasid saidi puhtast varukoopiast.<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li><strong>K\u00f5ik asjakohased paroolid.<\/strong> Vaheta WordPressi kontode paroolid ning muud paroolid, millele kompromiteeritud sait ligi p\u00e4\u00e4ses.<\/li>\n\n\n<li><strong>Andmebaasi ligip\u00e4\u00e4suandmed.<\/strong> Uuenda failis <code>wp-config.php<\/code> m\u00e4\u00e4ratud andmebaasi kasutajanimi ja parool ning vastavad andmed andmebaasiserveris.<\/li>\n\n\n<li><strong>WordPressi turvav\u00f5tmed ja soolad.<\/strong> Genereeri failis <code>wp-config.php<\/code> kasutatavad v\u00f5tmed ja soolad uuesti. Need v\u00e4\u00e4rtused kaitsevad muu hulgas autentimisandmeid.<\/li>\n\n\n<li><strong>API-v\u00f5tmed ja teenuste ligip\u00e4\u00e4suandmed.<\/strong> Asenda makselahenduste v\u00f5tmed, SMTP ehk meiliedastuse ligip\u00e4\u00e4suandmed, muud API-v\u00f5tmed ning saidi seadetes v\u00f5i konfiguratsioonifailides hoitud saladused.<\/li>\n\n\n<li><strong>Majutuse ja serveri ligip\u00e4\u00e4s.<\/strong> Vaheta majutuse juhtpaneeli, FTP\/SFTP ja SSH paroolid v\u00f5i muud autentimisandmed. Vaata \u00fcle ka keskkonnamuutujates hoitud saladused.<\/li>\n\n\n<li><strong>Kaheastmeline autentimine.<\/strong> Kontrolli administraatorikontode kaheastmelist autentimist ning l\u00e4htesta see seal, kus vaja.<\/li>\n\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Uuenda uued v\u00e4\u00e4rtused k\u00f5ikjal, kus sait v\u00f5i \u00fchendatud teenused neid kasutavad. Kui pole selge, millistele saladustele sait ligi p\u00e4\u00e4ses, lase majutajal v\u00f5i turvaspetsialistil need koos sinuga \u00fcle vaadata.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">4. Kontrolli, kas sait j\u00e4i puhtaks<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">P\u00e4rast puhastust tuleb kontrollida nii faile kui ka saidi edasist k\u00e4itumist. \u00dcks turvaskann ei asenda j\u00e4rgnevat j\u00e4lgimist.<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n\n<li>K\u00e4ivita usaldusv\u00e4\u00e4rse t\u00f6\u00f6riistaga, n\u00e4iteks Wordfence&#8217;i v\u00f5i Sucuriga, uus turvakontroll.<\/li>\n\n\n<li>Kontrolli WordPressi core&#8217;i faile k\u00e4suga <code>wp core verify-checksums<\/code>.<\/li>\n\n\n<li>Kontrolli paigaldatud pluginatega faile k\u00e4suga <code>wp plugin verify-checksums --all<\/code>. K\u00f5igi pluginatega, eriti tasulistega, pole kontrollsummad k\u00e4ttesaadavad. Sel juhul v\u00f5rdle faile ametlikust allikast saadud puhta koopiaga.<\/li>\n\n\n<li>J\u00e4lgi j\u00e4rgmistel p\u00e4evadel serverist v\u00e4ljuvaid \u00fchendusi ja muud kahtlast tegevust.<\/li>\n\n\n<li>Kontrolli, kas m\u00f5ni eemaldatud fail tekib uuesti.<\/li>\n\n<\/ol>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:.875rem;font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:block;padding:16px 0 0 16px;margin-bottom:-1px;width:100%;text-align:left;background-color:#24292e\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"54\" height=\"14\" viewBox=\"0 0 54 14\"><g fill=\"none\" fill-rule=\"evenodd\" transform=\"translate(1 1)\"><circle cx=\"6\" cy=\"6\" r=\"6\" fill=\"#FF5F56\" stroke=\"#E0443E\" stroke-width=\".5\"><\/circle><circle cx=\"26\" cy=\"6\" r=\"6\" fill=\"#FFBD2E\" stroke=\"#DEA123\" stroke-width=\".5\"><\/circle><circle cx=\"46\" cy=\"6\" r=\"6\" fill=\"#27C93F\" stroke=\"#1AAB29\" stroke-width=\".5\"><\/circle><\/g><\/svg><\/span><span role=\"button\" tabindex=\"0\" style=\"color:#e1e4e8;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>wp core verify-checksums\nwp plugin verify-checksums --all\n<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki github-dark\" style=\"background-color:#24292e;color:#e1e4e8\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color:#B392F0\">wp<\/span><span style=\"color:#9ECBFF\"> core<\/span><span style=\"color:#9ECBFF\"> verify-checksums<\/span><\/span>\n<span class=\"line\"><span style=\"color:#B392F0\">wp<\/span><span style=\"color:#9ECBFF\"> plugin<\/span><span style=\"color:#9ECBFF\"> verify-checksums<\/span><span style=\"color:#79B8FF\"> --all<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Kui kahtlased failid ilmuvad tagasi v\u00f5i m\u00e4rkad ebatavalist tegevust, v\u00f5ib puhastus olla pooleli. Mine tagasi k\u00e4sitsi puhastuse teise sammu juurde ning palu majutajal v\u00f5i turvaspetsialistil olukorda p\u00f5hjalikumalt uurida.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Paigalda puhas Rank Math PRO turvalisest kohast<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Kui oled oma olukorrale vastavad taastet\u00f6\u00f6d l\u00f5petanud, paigalda <strong>Rank Math PRO 3.0.124<\/strong>. Ava brauseris ise <code>rankmath.com<\/code>, logi oma kontole sisse ja laadi uuendatud plugin alla konto allalaadimiste jaotisest. Kui kontole sisenemine ei \u00f5nnestu, v\u00f5ib olla vaja parool l\u00e4htestada.<\/p>\n\n\n\n<div class=\"wp-block-group callout callout-warning is-style-warning is-layout-flow wp-block-group-is-layout-flow\" style=\"border-width:1px;border-radius:8px;padding-top:1rem;padding-right:1.5rem;padding-bottom:1rem;padding-left:1.5rem\">\n\n<h4 class=\"wp-block-heading callout-title\">\u00c4ra kasuta ootamatu e-kirja sisselogimis- v\u00f5i allalaadimislinki<\/h4>\n\n\n<p class=\"wp-block-paragraph\">Rank Math ei saada e-postiga sisselogimis- ega allalaadimislinke. Suhtu kahtlusega ootamatutesse kirjadesse, mis paluvad kl\u00f5psata parooli l\u00e4htestamise v\u00f5i plugina allalaadimise lingil. Ava tootja veebileht ise, mitte kirjas oleva lingi kaudu.<\/p>\n\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Mitteametlikud ja GPL-i alusel pluginaid edasi jagavad saidid v\u00f5ivad endiselt pakkuda versiooni 3.0.123 koopiaid. Laadi puhas pakett alati alla tootja juures olevalt kontolt.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Mida oma uuendus- ja varundusprotsessis \u00fcle vaadata?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Tarneahelar\u00fcnne v\u00f5ib tabada ka usaldatud tasulise tarkvara tootjat. Ametlik allalaadimiskoht v\u00e4hendab mitteametlike koopiatega seotud riske, kuid ei v\u00e4lista tootja tarneahela kompromiteerimist.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li><strong>Kaalu tasuliste pluginatega automaatuuenduste m\u00f5lemat k\u00fclge.<\/strong> Need toovad parandused kiiresti saidile, kuid v\u00f5ivad sama kiiresti paigaldada ka kompromiteeritud paketi. Vaata \u00fcle, kuidas oma saitide uuendusi kontrollid.<\/li>\n\n\n<li><strong>Hoia varukoopiaid v\u00e4ljaspool veebiserverit ja s\u00e4ilita piisavalt vanu koopiaid.<\/strong> Taasteks peab alles olema ka juhtumieelsest ajast p\u00e4rit puhas failide ja andmebaasi koopia.<\/li>\n\n\n<li><strong>J\u00e4lgi ja piira veebiserverist v\u00e4ljuvaid \u00fchendusi.<\/strong> Selles juhtumis on konkreetne kontrollitav sihtkoht <code>rank1cdn[.]com<\/code>.<\/li>\n\n\n<li><strong>Kasuta kontrollsummasid ja puhaste koopiatega v\u00f5rdlust.<\/strong> Kontrolli WordPressi core&#8217;i ning neid pluginaid, mille kontrollsummad on saadaval; teiste puhul kasuta ametlikku puhast paketti.<\/li>\n\n\n<li><strong>Arvesta juhtumit matkivate \u00f5ngitsuskirjadega.<\/strong> \u00c4ra sisesta kontoandmeid ega laadi pluginat alla ootamatu e-kirja lingi kaudu.<\/li>\n\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Kust taastet\u00f6\u00f6deks abi saada?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Kui vajad abi m\u00f5jutatuse v\u00f5i sobivate taastet\u00f6\u00f6de kindlakstegemisel, kirjuta aadressile <code>support@rankmath.com<\/code> v\u00f5i ava <a href=\"https:\/\/rankmath.com\/support\/\">Rank Mathi tugipilet<\/a>. Lisa oma PRO-plugina versioon ja juba tehtud taastet\u00f6\u00f6de loend, et kasutajatugi saaks olukorda hinnata.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Alusta allalaadimisaja ja aktiveerimise kontrollist. Kui nakatunud pakett oli aktiivne, vali puhtast varukoopiast taastamine v\u00f5i tee k\u00e4sitsi puhastus etteantud j\u00e4rjekorras; seej\u00e4rel vaheta ligip\u00e4\u00e4suandmed ja j\u00e4lgi saiti ka j\u00e4rgnevatel p\u00e4evadel.<\/p>\n\n\n<div class=\"references-section\">\n                <h2>Viited \/ Allikad<\/h2>\n                <ul class=\"references-list\"><li><a href=\"https:\/\/rankmath.com\/kb\/pro-3-0-123-security-incident\/\" target=\"_blank\" rel=\"noopener noreferrer\">Rank Math PRO 3.0.123 Security Incident: How to Secure Your Website<\/a><\/li><li><a href=\"https:\/\/www.wordfence.com\/blog\/2026\/10\/rank-math-seo-pro-3-0-123-malware\/\" target=\"_blank\" rel=\"noopener noreferrer\">Rank Math SEO PRO 3.0.123 malware<\/a><\/li><li><a href=\"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/id\/81cd7a2c-ad0c-4dbc-b5dc-07ec866d5c1f\" target=\"_blank\" rel=\"noopener noreferrer\">Rank Math SEO PRO 3.0.123 &#8211; Unauthenticated Embedded Malicious Code<\/a><\/li><\/ul>\n            <\/div>","protected":false},"excerpt":{"rendered":"<p>Osa ametlikke Rank Math PRO 3.0.123 uuenduspakette sisaldas pahavara. Kui aktiveerisid nakatunud koopia, ei piisa saidi kaitsmiseks \u00fcksnes uuendusest versioonile 3.0.124.<\/p>\n","protected":false},"author":49,"featured_media":274,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[50],"tags":[147,145,146,9,8],"class_list":["post-275","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-turvalisus","tag-pahavara","tag-rank-math","tag-tarneahelarunne","tag-wordpress","tag-wp-cli"],"_links":{"self":[{"href":"https:\/\/helloblog.io\/et\/wp-json\/wp\/v2\/posts\/275","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/helloblog.io\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/helloblog.io\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/helloblog.io\/et\/wp-json\/wp\/v2\/users\/49"}],"replies":[{"embeddable":true,"href":"https:\/\/helloblog.io\/et\/wp-json\/wp\/v2\/comments?post=275"}],"version-history":[{"count":0,"href":"https:\/\/helloblog.io\/et\/wp-json\/wp\/v2\/posts\/275\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/helloblog.io\/et\/wp-json\/wp\/v2\/media\/274"}],"wp:attachment":[{"href":"https:\/\/helloblog.io\/et\/wp-json\/wp\/v2\/media?parent=275"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/helloblog.io\/et\/wp-json\/wp\/v2\/categories?post=275"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/helloblog.io\/et\/wp-json\/wp\/v2\/tags?post=275"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}