{"id":278,"date":"2026-10-17T11:03:24","date_gmt":"2026-10-17T09:03:24","guid":{"rendered":"https:\/\/helloblog.io\/lv\/rank-math-seo-pro-3-0-123-piegades-kedes-uzbrukums\/"},"modified":"2026-10-17T11:03:24","modified_gmt":"2026-10-17T09:03:24","slug":"rank-math-seo-pro-3-0-123-piegades-kedes-uzbrukums","status":"publish","type":"post","link":"https:\/\/helloblog.io\/lv\/rank-math-seo-pro-3-0-123-piegades-kedes-uzbrukums\/","title":{"rendered":"Rank Math SEO PRO 3.0.123 pieg\u0101des \u0137\u0113des uzbrukums: k\u0101 p\u0101rbaud\u012bt un atjaunot vietni"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Ofici\u0101laj\u0101s Rank Math SEO PRO 3.0.123 lejupiel\u0101des un atjaunin\u0101jumu pakotn\u0113s ierobe\u017eot\u0101 laika posm\u0101 non\u0101ca \u013caunprogrammat\u016bra. Ja aktiviz\u0113ji skarto pakotni, uzskati vietni par kompromit\u0113tu ar\u012b tad, ja pa\u0161laik jau izmanto citu versiju.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">T\u012br\u0101 versija <strong>3.0.124<\/strong> aizst\u0101j Rank Math PRO failus, ta\u010du neizdz\u0113\u0161 \u013caunprogrammat\u016bras citviet izveidotos failus, administratoru kontus vai iepl\u0101notos uzdevumus. T\u0101p\u0113c vispirms noskaidro, vai vietne ir skarta, un tikai tad izv\u0113lies atkop\u0161anas darb\u012bbas.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Kas notika un kuras pakotnes ir skartas<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u0160is ir <strong>pieg\u0101des \u0137\u0113des uzbrukums<\/strong>: \u013caunprogrammat\u016bra atrad\u0101s pa\u0161\u0101 ofici\u0101li izplat\u012btaj\u0101 spraud\u0146a pakotn\u0113, nevis izmantoja parastu programm\u0113\u0161anas k\u013c\u016bdu spraud\u0146a funkcij\u0101s. Rank Math iz\u0146\u0113ma skartos failus un izlaida t\u012bru versiju 3.0.124. K\u0101 uzbruc\u0113js izmain\u012bja pakotnes, publiski nav atkl\u0101ts; nav ar\u012b pamata pied\u0113v\u0113t uzbrukumu konkr\u0113tam izpild\u012bt\u0101jam vai min\u0113t cietu\u0161o skaitu.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li><strong>Skartais produkts:<\/strong> Rank Math SEO PRO papildin\u0101jums; spraud\u0146a identifikators ir <code>seo-by-rank-math-pro<\/code>. Bezmaksas Rank Math spraudnis nav nor\u0101d\u012bts k\u0101 skarts.<\/li>\n\n\n<li><strong>Skart\u0101 versija:<\/strong> tikai da\u013ca 3.0.123 pakot\u0146u. Pats versijas numurs v\u0113l nepier\u0101da, ka vietne ir kompromit\u0113ta.<\/li>\n\n\n<li><strong>T\u012br\u0101 versija:<\/strong> 3.0.124.<\/li>\n\n\n<li><strong>Riska periods:<\/strong> no 2026. gada 15. oktobra plkst. 20.02 UTC l\u012bdz 16. oktobra plkst. 07.12 UTC &#8211; aptuveni 11 stundas. P\u0113c Centr\u0101leiropas vasaras laika (CEST) tas ir no 15. oktobra plkst. 22.02 l\u012bdz 16. oktobra plkst. 09.12.<\/li>\n\n\n<li><strong>Ievainojam\u012bbas identifikators:<\/strong> CVE-2026-111862; CVE ir publisku ievainojam\u012bbu identifikatoru sist\u0113ma.<\/li>\n\n\n<li><strong>Smagums:<\/strong> 9,8 jeb kritisks p\u0113c vienot\u0101s ievainojam\u012bbu nov\u0113rt\u0113\u0161anas sist\u0113mas (CVSS). Ieraksta nosaukums ir \u201eRank Math SEO PRO 3.0.123 &#8211; Unauthenticated Embedded Malicious Code\u201d.<\/li>\n\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u013baunprogrammat\u016bra s\u0101k darboties, kad aktiviz\u0113 spraudni, un var izveidot notur\u012bgu piek\u013cuvi vietnei. T\u0101 sazin\u0101s ar <code>rank1cdn[.]com<\/code> un sp\u0113j atjaunot sl\u0113ptus piek\u013cuves meh\u0101nismus jeb aizmugures durvis, kad k\u0101ds apmekl\u0113 vietni. Par potenci\u0101li atkl\u0101t\u0101m j\u0101uzskata WordPress paroles, datub\u0101zes piek\u013cuves dati, lietojumprogrammu saskarnes (API) atsl\u0113gas un citi nosl\u0113pumi, kurus var nolas\u012bt t\u012bmek\u013ca serveris.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Nosaki, kur\u0161 no trim gad\u012bjumiem attiecas uz vietni<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">WordPress administr\u0101cijas sada\u013c\u0101 \u201eSpraud\u0146i\u201d p\u0101rbaudi instal\u0113to Rank Math PRO versiju un noskaidro, kad ieguvi pakotni. Rank Math saglab\u0101tie lejupiel\u0101\u017eu ieraksti \u013cauj uz\u0146\u0113mumam identific\u0113t skarto kopiju sa\u0146\u0113m\u0113jus un vi\u0146us inform\u0113t. Ja sa\u0146\u0113mi \u0161\u0101du pazi\u0146ojumu, izpildi atbilsto\u0161\u0101s darb\u012bbas ar\u012b tad, ja pa\u0161reiz\u0113j\u0101 versija vairs nav 3.0.123.<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n\n<li><strong>Skartaj\u0101 period\u0101 instal\u0113ji un aktiviz\u0113ji 3.0.123.<\/strong> Uzskati vietni par kompromit\u0113tu un izpildi t\u0101l\u0101k aprakst\u012bt\u0101s atkop\u0161anas darb\u012bbas.<\/li>\n\n\n<li><strong>Instal\u0113ji skarto 3.0.123 pakotni, bet nekad to neaktiviz\u0113ji.<\/strong> Izdz\u0113s skartos spraud\u0146a failus, instal\u0113 t\u012bro 3.0.124 pakotni no Rank Math konta un piesardz\u012bbas d\u0113\u013c palaid dro\u0161\u012bbas sken\u0113\u0161anu.<\/li>\n\n\n<li><strong>Lejupiel\u0101d\u0113ji 3.0.123, bet to neinstal\u0113ji un neaktiviz\u0113ji.<\/strong> \u0160is incidents pats par sevi neliecina, ka vietne b\u016btu kompromit\u0113ta. Ja nevari dro\u0161i noteikt, vai failus instal\u0113ji vai spraudni aktiviz\u0113ji, sazinies ar <a href=\"https:\/\/rankmath.com\/support\/\">Rank Math atbalstu<\/a>.<\/li>\n\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\">\u0100tr\u0101 p\u0101rbaude ar WP-CLI<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">WP-CLI ir komandrindas r\u012bks WordPress p\u0101rvald\u012bbai; ar to vari \u0101tri sav\u0101kt pirmos p\u0101rbaudes rezult\u0101tus. T\u0101l\u0101k\u0101s komandas neko net\u012bra un pa\u0161as par sevi nepier\u0101da, ka vietne ir dro\u0161a. Palaid t\u0101s WordPress instal\u0101cijas direktorij\u0101 ar atbilsto\u0161\u0101m piek\u013cuves ties\u012bb\u0101m.<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:.875rem;font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:block;padding:16px 0 0 16px;margin-bottom:-1px;width:100%;text-align:left;background-color:#24292e\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"54\" height=\"14\" viewBox=\"0 0 54 14\"><g fill=\"none\" fill-rule=\"evenodd\" transform=\"translate(1 1)\"><circle cx=\"6\" cy=\"6\" r=\"6\" fill=\"#FF5F56\" stroke=\"#E0443E\" stroke-width=\".5\"><\/circle><circle cx=\"26\" cy=\"6\" r=\"6\" fill=\"#FFBD2E\" stroke=\"#DEA123\" stroke-width=\".5\"><\/circle><circle cx=\"46\" cy=\"6\" r=\"6\" fill=\"#27C93F\" stroke=\"#1AAB29\" stroke-width=\".5\"><\/circle><\/g><\/svg><\/span><span role=\"button\" tabindex=\"0\" style=\"color:#e1e4e8;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>wp plugin get seo-by-rank-math-pro --field=version\n\nwp option get _uf6qdn2hmm\nwp option get t8krdk990phb\nwp option get _np5pvf754c\n\nwp user list --role=administrator --fields=ID,user_login,user_email,user_registered\nwp core verify-checksums\nwp cron event list\n\nls -la wp-includes\/class-wp-cache-util.php\n\n# Aizst\u0101j www-data ar faktisko t\u012bmek\u013ca servera lietot\u0101ju.\n# Cita lietot\u0101ja crontab apskatei vajadz\u012bgas atbilsto\u0161as ties\u012bbas.\ncrontab -l -u www-data | grep ms6v46\n\n# Mekl\u0113 vienu no zin\u0101majiem koda mar\u0137ieriem.\ngrep -RIn --include='*.php' 'xmmqhn' wp-content\/\n<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki github-dark\" style=\"background-color:#24292e;color:#e1e4e8\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color:#B392F0\">wp<\/span><span style=\"color:#9ECBFF\"> plugin<\/span><span style=\"color:#9ECBFF\"> get<\/span><span style=\"color:#9ECBFF\"> seo-by-rank-math-pro<\/span><span style=\"color:#79B8FF\"> --field=version<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color:#B392F0\">wp<\/span><span style=\"color:#9ECBFF\"> option<\/span><span style=\"color:#9ECBFF\"> get<\/span><span style=\"color:#9ECBFF\"> _uf6qdn2hmm<\/span><\/span>\n<span class=\"line\"><span style=\"color:#B392F0\">wp<\/span><span style=\"color:#9ECBFF\"> option<\/span><span style=\"color:#9ECBFF\"> get<\/span><span style=\"color:#9ECBFF\"> t8krdk990phb<\/span><\/span>\n<span class=\"line\"><span style=\"color:#B392F0\">wp<\/span><span style=\"color:#9ECBFF\"> option<\/span><span style=\"color:#9ECBFF\"> get<\/span><span style=\"color:#9ECBFF\"> _np5pvf754c<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color:#B392F0\">wp<\/span><span style=\"color:#9ECBFF\"> user<\/span><span style=\"color:#9ECBFF\"> list<\/span><span style=\"color:#79B8FF\"> --role=administrator<\/span><span style=\"color:#79B8FF\"> --fields=ID,user_login,user_email,user_registered<\/span><\/span>\n<span class=\"line\"><span style=\"color:#B392F0\">wp<\/span><span style=\"color:#9ECBFF\"> core<\/span><span style=\"color:#9ECBFF\"> verify-checksums<\/span><\/span>\n<span class=\"line\"><span style=\"color:#B392F0\">wp<\/span><span style=\"color:#9ECBFF\"> cron<\/span><span style=\"color:#9ECBFF\"> event<\/span><span style=\"color:#9ECBFF\"> list<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color:#B392F0\">ls<\/span><span style=\"color:#79B8FF\"> -la<\/span><span style=\"color:#9ECBFF\"> wp-includes\/class-wp-cache-util.php<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color:#6A737D\"># Aizst\u0101j www-data ar faktisko t\u012bmek\u013ca servera lietot\u0101ju.<\/span><\/span>\n<span class=\"line\"><span style=\"color:#6A737D\"># Cita lietot\u0101ja crontab apskatei vajadz\u012bgas atbilsto\u0161as ties\u012bbas.<\/span><\/span>\n<span class=\"line\"><span style=\"color:#B392F0\">crontab<\/span><span style=\"color:#79B8FF\"> -l<\/span><span style=\"color:#79B8FF\"> -u<\/span><span style=\"color:#9ECBFF\"> www-data<\/span><span style=\"color:#F97583\"> |<\/span><span style=\"color:#B392F0\"> grep<\/span><span style=\"color:#9ECBFF\"> ms6v46<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color:#6A737D\"># Mekl\u0113 vienu no zin\u0101majiem koda mar\u0137ieriem.<\/span><\/span>\n<span class=\"line\"><span style=\"color:#B392F0\">grep<\/span><span style=\"color:#79B8FF\"> -RIn<\/span><span style=\"color:#79B8FF\"> --include=<\/span><span style=\"color:#9ECBFF\">'*.php'<\/span><span style=\"color:#9ECBFF\"> 'xmmqhn'<\/span><span style=\"color:#9ECBFF\"> wp-content\/<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">P\u0101rbaudi visus tr\u012bs datub\u0101zes opciju nosaukumus, nevis tikai pirmo atrasto. Ja komanda neatrod k\u0101du opciju vai failu, tas izsl\u0113dz tikai konkr\u0113to atradumu, nevis visu kompromit\u0113jumu.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Pirmais atkop\u0161anas ce\u013c\u0161: atjauno t\u012bru rezerves kopiju<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Ja aktiviz\u0113ji skarto pakotni un tev ir t\u012bra rezerves kopija, atjauno gan vietnes failus, gan datub\u0101zi no kopijas, kas izveidota pirms riska perioda s\u0101kuma. Tas ir ieteicamais atkop\u0161anas ce\u013c\u0161. Kopijai j\u0101b\u016bt izveidotai <strong>pirms 2026. gada 15. oktobra plkst. 20.02 UTC<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Tas pats robe\u017elaiks cit\u0101s laika josl\u0101s ir 15. oktobra plkst. 22.02 p\u0113c CEST, 15. oktobra plkst. 16.02 p\u0113c ASV austrumu vasaras laika (EDT) un 16. oktobra plkst. 01.32 p\u0113c Indijas standarta laika (IST). P\u0101rbaudot rezerves kopiju laikus, \u0146em v\u0113r\u0101, kuru laika joslu r\u0101da hostinga panelis.<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n\n<li><strong>Atjauno vietnes failus un datub\u0101zi<\/strong> no t\u012bras kopijas, kas izveidota pirms nor\u0101d\u012bt\u0101 robe\u017elaika.<\/li>\n\n\n<li><strong>Palaid dro\u0161\u012bbas sken\u0113\u0161anu<\/strong> ar uzticamu r\u012bku, piem\u0113ram, <a href=\"https:\/\/wordpress.org\/plugins\/wordfence\/\">Wordfence<\/a> vai <a href=\"https:\/\/wordpress.org\/plugins\/sucuri-scanner\/\">Sucuri<\/a>.<\/li>\n\n\n<li><strong>Nomaini visas paroles un piek\u013cuves datus.<\/strong> Pie\u0146em, ka vietnei pieejamie nosl\u0113pumi var\u0113ja nopl\u016bst; izmanto t\u0101l\u0101k doto nomai\u0146as kontrolsarakstu.<\/li>\n\n\n<li><strong>Instal\u0113 t\u012bro Rank Math PRO 3.0.124<\/strong>, lejupiel\u0101d\u0113jot to no Rank Math konta p\u0113c vietnes atjauno\u0161anas.<\/li>\n\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Ja nezini, k\u0101 atjaunot rezerves kopiju, l\u016bdz pal\u012bdz\u012bbu hostinga pakalpojuma sniedz\u0113jam. Ar\u012b p\u0113c atjauno\u0161anas izpildi raksta beig\u0101s aprakst\u012bt\u0101s p\u0101rbaudes un nov\u0113ro vietni.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Otrais atkop\u0161anas ce\u013c\u0161: izt\u012bri vietni manu\u0101li<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Ja t\u012bru rezerves kopiju nevar izmantot, j\u0101iz\u0146em \u013caunprogrammat\u016bra un j\u0101p\u0101rbauda p\u0101r\u0113j\u0101s uzbruc\u0113ja izmai\u0146as. Darb\u012bbu sec\u012bba ir b\u016btiska: vispirms apturi meh\u0101nismu, kas atjauno aizmugures durvis, un tikai p\u0113c tam dz\u0113s p\u0101r\u0113jos \u013caunpr\u0101t\u012bgos failus.<\/p>\n\n\n\n<div class=\"wp-block-group callout callout-warning is-style-warning is-layout-flow wp-block-group-is-layout-flow\" style=\"border-width:1px;border-radius:8px;padding-top:1rem;padding-right:1.5rem;padding-bottom:1rem;padding-left:1.5rem\">\n\n<h4 class=\"wp-block-heading callout-title\">Ar spraud\u0146a deaktiviz\u0113\u0161anu nepietiek<\/h4>\n\n\n<p class=\"wp-block-paragraph\">Vietnes apmekl\u0113jums var no jauna izveidot sl\u0113pt\u0101s aizmugures durvis. Ja vispirms izdz\u0113s\u012bsi tikai atrastos failus, bet atst\u0101si atjauno\u0161anas meh\u0101nismu, t\u012br\u012b\u0161ana var nedot rezult\u0101tu. Ja nej\u016bties dro\u0161i, str\u0101d\u0101jot ar failiem, datub\u0101zi vai servera iestat\u012bjumiem, uztici \u0161os so\u013cus hostingam vai dro\u0161\u012bbas speci\u0101listam.<\/p>\n\n<\/div>\n\n\n\n<h3 class=\"wp-block-heading\">1. Apturi \u013caunprogrammat\u016bras atjauno\u0161anos<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Pirms turpini ar citu failu un kontu t\u012br\u012b\u0161anu, izpildi visas tr\u012bs darb\u012bbas. Spraud\u0146a failus vari p\u0101rvald\u012bt ar hostinga failu p\u0101rvaldnieku vai failu p\u0101rs\u016bt\u012b\u0161anas protokola (FTP) klientu.<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n\n<li><strong>Izdz\u0113s visu Rank Math PRO mapi <code>rank-math-pro<\/code>.<\/strong> Neapst\u0101jies pie deaktiviz\u0113\u0161anas administr\u0101cijas panel\u012b.<\/li>\n\n\n<li><strong>Izdz\u0113s \u013caunpr\u0101t\u012bgos ierakstus datub\u0101z\u0113.<\/strong> Ar phpMyAdmin vai l\u012bdz\u012bgu r\u012bku atver WordPress datub\u0101zi. Tabul\u0101 <code>wp_options<\/code> mekl\u0113 <code>option_name<\/code> v\u0113rt\u012bbas <code>_uf6qdn2hmm<\/code>, <code>t8krdk990phb<\/code> un <code>_np5pvf754c<\/code> un izdz\u0113s atrastos ierakstus.<\/li>\n\n\n<li><strong>Ja hostings vai ugunsm\u016bris to atbalsta, blo\u0137\u0113 izejo\u0161os savienojumus uz <code>rank1cdn.com<\/code>.<\/strong> Tas ir dom\u0113ns, ar kuru sazin\u0101s \u013caunprogrammat\u016bra.<\/li>\n\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\">2. Atrodi un iz\u0146em p\u0101r\u0113j\u0101s \u013caunpr\u0101t\u012bg\u0101s izmai\u0146as<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Uzbruc\u0113js var\u0113ja atst\u0101t failus, lietot\u0101jus un izmai\u0146as \u0101rpus pa\u0161a spraud\u0146a. P\u0101rbaudi katru no t\u0101l\u0101k min\u0113taj\u0101m viet\u0101m; viena atraduma izdz\u0113\u0161ana neaizst\u0101j p\u0101r\u0113jo p\u0101rbaudi.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Sl\u0113pt\u0101s aizmugures durvis<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Aizdom\u012bgus PHP failus mekl\u0113 vair\u0101k\u0101s spraud\u0146u un t\u0113mu direktorij\u0101s. \u012apa\u0161i p\u0101rbaudi \u0161\u012bs vietas.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li><code>wp-content\/mu-plugins\/<\/code> &#8211; direktorija autom\u0101tiski iel\u0101d\u0113jamiem spraud\u0146iem.<\/li>\n\n\n<li>Citu spraud\u0146u mapes.<\/li>\n\n\n<li>Mapes <code>inc\/<\/code>, <code>includes\/<\/code> un <code>lib\/<\/code> t\u0113m\u0101s, kas nav WordPress noklus\u0113juma t\u0113mas.<\/li>\n\n\n<li>Rank Math mape <code>includes\/<\/code>.<\/li>\n\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Kod\u0101 mekl\u0113 <code>base64_decode<\/code> kop\u0101 ar izsl\u0113dzo\u0161\u0101 VAI (XOR) oper\u0101cijas cikliem, atsl\u0113gu <code>xmmqhn<\/code>, funkciju <code>proc_open<\/code> vai kodu darbam ar PHP procesu p\u0101rvaldnieka PHP-FPM sakaru ligzd\u0101m. \u0160ie ir kompromit\u0113juma indikatori &#8211; paz\u012bmes, p\u0113c kur\u0101m mekl\u0113t aizdom\u012bgo kodu, nevis pamats autom\u0101tiski izdz\u0113st katru failu, kur\u0101 par\u0101d\u0101s k\u0101da PHP funkcija. Dro\u0161\u012bbas spraudnis vai hostinga atbalsts var pal\u012bdz\u0113t atrast un iz\u0146emt \u013caunpr\u0101t\u012bgos failus.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Nepaz\u012bstami administratoru konti<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">P\u0101rskati visus WordPress kontus ar administratora ties\u012bb\u0101m un p\u0101rbaudi nepaz\u012bstamus lietot\u0101jus. \u012apa\u0161i mekl\u0113 lietot\u0101jv\u0101rdus, kas s\u0101kas ar <code>wpsupport_<\/code> un turpin\u0101s ar nejau\u0161\u0101m rakstz\u012bm\u0113m, k\u0101 ar\u012b e-pasta adreses ar galotni <code>@wp-mail[.]net<\/code>. Izdz\u0113s kontus, par kuriem apstiprini, ka tie ir \u013caunpr\u0101t\u012bgi vai neat\u013cauti.<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:.875rem;font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:block;padding:16px 0 0 16px;margin-bottom:-1px;width:100%;text-align:left;background-color:#24292e\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"54\" height=\"14\" viewBox=\"0 0 54 14\"><g fill=\"none\" fill-rule=\"evenodd\" transform=\"translate(1 1)\"><circle cx=\"6\" cy=\"6\" r=\"6\" fill=\"#FF5F56\" stroke=\"#E0443E\" stroke-width=\".5\"><\/circle><circle cx=\"26\" cy=\"6\" r=\"6\" fill=\"#FFBD2E\" stroke=\"#DEA123\" stroke-width=\".5\"><\/circle><circle cx=\"46\" cy=\"6\" r=\"6\" fill=\"#27C93F\" stroke=\"#1AAB29\" stroke-width=\".5\"><\/circle><\/g><\/svg><\/span><span role=\"button\" tabindex=\"0\" style=\"color:#e1e4e8;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>wp user list --role=administrator\n<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki github-dark\" style=\"background-color:#24292e;color:#e1e4e8\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color:#B392F0\">wp<\/span><span style=\"color:#9ECBFF\"> user<\/span><span style=\"color:#9ECBFF\"> list<\/span><span style=\"color:#79B8FF\"> --role=administrator<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<h4 class=\"wp-block-heading\">Viltots WordPress core fails<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Fails <code>wp-includes\/class-wp-cache-util.php<\/code> nav le\u0123it\u012bms WordPress core fails. WordPress core ir pa\u0161a WordPress sist\u0113mas faili, nevis spraud\u0146i un t\u0113mas. Ja \u0161o failu atrodi, izdz\u0113s to un p\u0101rbaudi core kontrolsummas &#8211; v\u0113rt\u012bbas, ar kur\u0101m sal\u012bdzina failu atbilst\u012bbu ofici\u0101laj\u0101m kopij\u0101m.<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:.875rem;font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:block;padding:16px 0 0 16px;margin-bottom:-1px;width:100%;text-align:left;background-color:#24292e\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"54\" height=\"14\" viewBox=\"0 0 54 14\"><g fill=\"none\" fill-rule=\"evenodd\" transform=\"translate(1 1)\"><circle cx=\"6\" cy=\"6\" r=\"6\" fill=\"#FF5F56\" stroke=\"#E0443E\" stroke-width=\".5\"><\/circle><circle cx=\"26\" cy=\"6\" r=\"6\" fill=\"#FFBD2E\" stroke=\"#DEA123\" stroke-width=\".5\"><\/circle><circle cx=\"46\" cy=\"6\" r=\"6\" fill=\"#27C93F\" stroke=\"#1AAB29\" stroke-width=\".5\"><\/circle><\/g><\/svg><\/span><span role=\"button\" tabindex=\"0\" style=\"color:#e1e4e8;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>wp core verify-checksums\n<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki github-dark\" style=\"background-color:#24292e;color:#e1e4e8\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color:#B392F0\">wp<\/span><span style=\"color:#9ECBFF\"> core<\/span><span style=\"color:#9ECBFF\"> verify-checksums<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">P\u0101rinstal\u0113 WordPress core failus no ofici\u0101la avota, lai neatst\u0101tu citas izmain\u012btas core kopijas. Neaprobe\u017eojies tikai ar viltot\u0101 faila dz\u0113\u0161anu.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Noteikumi fail\u0101 .htaccess un aizdom\u012bgi .cache faili<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">P\u0101rbaudi <code>.htaccess<\/code> failus gan vietnes saknes direktorij\u0101, gan apak\u0161direktorij\u0101s. Mekl\u0113 noteikumus, kas \u013cauj izpild\u012bt <code>.cache<\/code> failus k\u0101 PHP kodu. P\u0101rmekl\u0113 serveri ar\u012b p\u0113c <code>.cache<\/code> failiem, kas satur PHP kodu, un izp\u0113ti aizdom\u012bgos atradumus.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Iepl\u0101notie uzdevumi<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">P\u0101rskati t\u012bmek\u013ca servera lietot\u0101ja crontab &#8211; sist\u0113mas cron pl\u0101not\u0101ja uzdevumu sarakstu. Mekl\u0113 ierakstus ar mar\u0137ieri <code>#ms6v46<\/code>. Atsevi\u0161\u0137i p\u0101rbaudi ar\u012b WordPress iepl\u0101notos notikumus.<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:.875rem;font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:block;padding:16px 0 0 16px;margin-bottom:-1px;width:100%;text-align:left;background-color:#24292e\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"54\" height=\"14\" viewBox=\"0 0 54 14\"><g fill=\"none\" fill-rule=\"evenodd\" transform=\"translate(1 1)\"><circle cx=\"6\" cy=\"6\" r=\"6\" fill=\"#FF5F56\" stroke=\"#E0443E\" stroke-width=\".5\"><\/circle><circle cx=\"26\" cy=\"6\" r=\"6\" fill=\"#FFBD2E\" stroke=\"#DEA123\" stroke-width=\".5\"><\/circle><circle cx=\"46\" cy=\"6\" r=\"6\" fill=\"#27C93F\" stroke=\"#1AAB29\" stroke-width=\".5\"><\/circle><\/g><\/svg><\/span><span role=\"button\" tabindex=\"0\" style=\"color:#e1e4e8;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>wp cron event list\n<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki github-dark\" style=\"background-color:#24292e;color:#e1e4e8\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color:#B392F0\">wp<\/span><span style=\"color:#9ECBFF\"> cron<\/span><span style=\"color:#9ECBFF\"> event<\/span><span style=\"color:#9ECBFF\"> list<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Izp\u0113ti aizdom\u012bgos uzdevumus un izdz\u0113s tos, kurus identific\u0113 k\u0101 \u013caunpr\u0101t\u012bgus. WordPress notikumu saraksts neaizst\u0101j sist\u0113mas crontab p\u0101rbaudi.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Citi spraud\u0146i, t\u0113mas un aug\u0161upiel\u0101des<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">P\u0101rinstal\u0113 spraud\u0146us un t\u0113mas no to ofici\u0101lajiem avotiem; kur iesp\u0113jams, sal\u012bdzini pa\u0161reiz\u0113jos failus ar t\u012br\u0101m kopij\u0101m. Direktorij\u0101 <code>uploads\/<\/code> mekl\u0113 PHP failus &#8211; parasti tiem tur nevajadz\u0113tu atrasties. Pirms dz\u0113s negaid\u012btus vai izmain\u012btus failus, noskaidro to izcelsmi un noz\u012bmi.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Servera vide \u0101rpus WordPress<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Uzbruc\u0113ja izmai\u0146as var sniegties \u0101rpus WordPress instal\u0101cijas. P\u0101rbaudi ar\u012b servera piek\u013cuvi un vietas, kur t\u012bmek\u013ca servera lietot\u0101js dr\u012bkst rakst\u012bt.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>Dro\u0161\u0101s att\u0101l\u0101s piek\u013cuves protokola (SSH) failus <code>authorized_keys<\/code>.<\/li>\n\n\n<li>Citu sist\u0113mas lietot\u0101ju crontab sarakstus.<\/li>\n\n\n<li>Darbojo\u0161os procesus.<\/li>\n\n\n<li>Vietas \u0101rpus vietnes direktorijas, kur\u0101s t\u012bmek\u013ca servera lietot\u0101jam ir rakst\u012b\u0161anas ties\u012bbas.<\/li>\n\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Ja izmanto koplietojamu hostingu un \u0161\u012bm viet\u0101m netiec kl\u0101t, l\u016bdz t\u0101s p\u0101rbaud\u012bt hostinga atbalstam. WordPress administr\u0101cijas panelis \u0161\u0101das izmai\u0146as nepar\u0101d\u012bs.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3. Nomaini paroles un citus piek\u013cuves datus<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Pie\u0146em, ka nosl\u0113pumi, kuriem kompromit\u0113t\u0101 vietne var\u0113ja piek\u013c\u016bt, ir atkl\u0101ti. <strong>\u0160is solis ir oblig\u0101ts ar\u012b p\u0113c atjauno\u0161anas no rezerves kopijas:<\/strong> failu atjauno\u0161ana nepadara iepriek\u0161 nolas\u012btu paroli vai atsl\u0113gu atkal slepenu.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li><strong>Visas attiec\u012bg\u0101s paroles.<\/strong> Nomaini WordPress kontu paroles un citus piek\u013cuves datus, kuri bija pieejami kompromit\u0113tajai vietnei.<\/li>\n\n\n<li><strong>Datub\u0101zes piek\u013cuve.<\/strong> Nomaini datub\u0101zes lietot\u0101jv\u0101rdu un paroli, ko vietne izmanto fail\u0101 <code>wp-config.php<\/code>.<\/li>\n\n\n<li><strong>WordPress dro\u0161\u012bbas atsl\u0113gas un s\u0101\u013ci.<\/strong> \u0122ener\u0113 jaunas v\u0113rt\u012bbas fail\u0101 <code>wp-config.php<\/code>; s\u0101\u013ci ir nejau\u0161as papildu v\u0113rt\u012bbas, ko WordPress izmanto autentifik\u0101cijas aizsardz\u012bb\u0101.<\/li>\n\n\n<li><strong>API atsl\u0113gas un pakalpojumu piek\u013cuve.<\/strong> Nomaini maks\u0101jumu v\u0101rteju atsl\u0113gas, e-pasta nos\u016bt\u012b\u0161anas protokola (SMTP) piek\u013cuves datus, API atsl\u0113gas un citus nosl\u0113pumus vietnes iestat\u012bjumos vai konfigur\u0101cijas failos.<\/li>\n\n\n<li><strong>Hostinga un servera piek\u013cuve.<\/strong> Nomaini hostinga vad\u012bbas pane\u013ca, FTP un dro\u0161\u0101s failu p\u0101rs\u016bt\u012b\u0161anas protokola (SFTP), k\u0101 ar\u012b SSH paroles vai citus autentifik\u0101cijas datus. P\u0101rskati ar\u012b vides main\u012bgajos glab\u0101tos nosl\u0113pumus.<\/li>\n\n\n<li><strong>Divfaktoru autentifik\u0101cija.<\/strong> P\u0101rbaudi administratoru kontu divfaktoru autentifik\u0101ciju un vajadz\u012bbas gad\u012bjum\u0101 atiestati to.<\/li>\n\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Ievadi jaunos datus vis\u0101s vietnes konfigur\u0101cij\u0101s un saist\u012btajos pakalpojumos, kur tas nepiecie\u0161ams. Ja nevari noteikt visu main\u0101mo datu apjomu, p\u0101rskati to kop\u0101 ar hostinga atbalstu vai dro\u0161\u012bbas speci\u0101listu.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">4. P\u0101rbaudi t\u012br\u012b\u0161anas rezult\u0101tu<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">P\u0113c t\u012br\u012b\u0161anas p\u0101rbaudi gan failus, gan vietnes turpm\u0101ko uzved\u012bbu. Veiksm\u012bga viena sken\u0113\u0161ana neaizst\u0101j p\u0101r\u0113jos kontrolpunktus.<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n\n<li>Palaid dro\u0161\u012bbas sken\u0113\u0161anu ar uzticamu r\u012bku, piem\u0113ram, Wordfence vai Sucuri.<\/li>\n\n\n<li>P\u0101rbaudi WordPress core failus ar <code>wp core verify-checksums<\/code>.<\/li>\n\n\n<li>P\u0101rbaudi instal\u0113to spraud\u0146u failus ar <code>wp plugin verify-checksums --all<\/code>. Ne visiem spraud\u0146iem, \u012bpa\u0161i maksas produktiem, ir pieejamas kontrolsummas; t\u0101dos gad\u012bjumos sal\u012bdzini failus ar t\u012bru kopiju no ofici\u0101l\u0101 avota.<\/li>\n\n\n<li>Turpm\u0101kaj\u0101s dien\u0101s nov\u0113ro izejo\u0161os savienojumus un mekl\u0113 aizdom\u012bgu darb\u012bbu.<\/li>\n\n\n<li>P\u0101rbaudi, vai izdz\u0113stie faili nepar\u0101d\u0101s no jauna.<\/li>\n\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Ja aizdom\u012bgie faili atgrie\u017eas vai redzi neparastu darb\u012bbu, t\u012br\u012b\u0161ana var b\u016bt nepiln\u012bga. Atgriezies pie otr\u0101 so\u013ca &#8211; p\u0101r\u0113jo \u013caunpr\u0101t\u012bgo izmai\u0146u mekl\u0113\u0161anas &#8211; un iesaisti hostinga atbalstu vai dro\u0161\u012bbas speci\u0101listu.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Instal\u0113 t\u012bro pakotni un uzmanies no pik\u0161\u0137er\u0113\u0161anas<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Kad esi pabeidzis attiec\u012bgajam gad\u012bjumam vajadz\u012bg\u0101s atkop\u0161anas darb\u012bbas, instal\u0113 <strong>Rank Math PRO 3.0.124<\/strong>. P\u0101rl\u016bk\u0101 pats atver <code>rankmath.com<\/code>, piesakies kont\u0101 un lejupiel\u0101\u017eu sada\u013c\u0101 ieg\u016bsti t\u012bro pakotni. Da\u013cai lietot\u0101ju var b\u016bt j\u0101atiestata konta parole, lai atkal pieteiktos.<\/p>\n\n\n\n<div class=\"wp-block-group callout callout-warning is-style-warning is-layout-flow wp-block-group-is-layout-flow\" style=\"border-width:1px;border-radius:8px;padding-top:1rem;padding-right:1.5rem;padding-bottom:1rem;padding-left:1.5rem\">\n\n<h4 class=\"wp-block-heading callout-title\">Pieteik\u0161an\u0101s un lejupiel\u0101des saites e-past\u0101 ir aizdom\u012bgas<\/h4>\n\n\n<p class=\"wp-block-paragraph\">Rank Math nes\u016bta pieteik\u0161an\u0101s vai lejupiel\u0101des saites e-past\u0101. Neuzticies negaid\u012bt\u0101m v\u0113stul\u0113m, kas uz\u0146\u0113muma v\u0101rd\u0101 aicina atv\u0113rt paroles atiestat\u012b\u0161anas vai lejupiel\u0101des saiti. Atver rankmath.com pats, nevis seko \u0161\u0101dam e-pastam.<\/p>\n\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Neofici\u0101las izplat\u012b\u0161anas vietnes, tostarp vietnes, kas pied\u0101v\u0101 kopijas ar atsauci uz GNU visp\u0101r\u0113jo publisko licenci (GPL), joproj\u0101m var izplat\u012bt 3.0.123 pakotnes. T\u012bro versiju ieg\u016bsti no ra\u017eot\u0101ja konta, nevis no tre\u0161\u0101s puses arh\u012bva.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ja vajadz\u012bga pal\u012bdz\u012bba, raksti uz <code>support@rankmath.com<\/code> vai <a href=\"https:\/\/rankmath.com\/support\/\">atver atbalsta pieteikumu<\/a>. Nor\u0101di Rank Math PRO versiju un jau izpild\u012btos atkop\u0161anas so\u013cus, lai atbalsta komanda var\u0113tu izv\u0113rt\u0113t konkr\u0113to situ\u0101ciju.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Ko main\u012bt vietnes uztur\u0113\u0161an\u0101 p\u0113c incidenta<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Uzticams maksas spraud\u0146a pieg\u0101d\u0101t\u0101js nav pasarg\u0101ts no pieg\u0101des \u0137\u0113des uzbrukuma. Autom\u0101tiskie atjaunin\u0101jumi pal\u012bdz \u0101tri sa\u0146emt labojumus, bet \u0161\u0101d\u0101 incident\u0101 tie var ar\u012b autom\u0101tiski pieg\u0101d\u0101t izmain\u012btu pakotni. P\u0101rskati maksas spraud\u0146u atjaunin\u0101\u0161anas k\u0101rt\u012bbu, nevis pie\u0146em, ka ofici\u0101ls atjaunin\u0101jums vienm\u0113r noz\u012bm\u0113 dro\u0161u saturu.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>Glab\u0101 rezerves kopijas \u0101rpus vietnes servera un saglab\u0101 pietiekamu v\u0113sturi, lai var\u0113tu atgriezties pie st\u0101vok\u013ca pirms incidenta.<\/li>\n\n\n<li>Nov\u0113ro t\u012bmek\u013ca servera izejo\u0161os savienojumus un ierobe\u017eo tos, kur tas iesp\u0113jams.<\/li>\n\n\n<li>P\u0101rbaudi core un spraud\u0146u kontrolsummas; produktiem bez publisk\u0101m kontrolsumm\u0101m izmanto t\u012bras ofici\u0101l\u0101s kopijas sal\u012bdzin\u0101\u0161anai.<\/li>\n\n\n<li>P\u0101rskati autom\u0101tisko atjaunin\u0101jumu k\u0101rt\u012bbu ar\u012b maksas spraud\u0146iem, \u0146emot v\u0113r\u0101 gan \u0101tras labo\u0161anas ieguvumu, gan pieg\u0101des \u0137\u0113des risku.<\/li>\n\n\n<li>Piek\u013cuvi kontam un pakot\u0146u lejupiel\u0101di s\u0101c ra\u017eot\u0101ja vietn\u0113, nevis negaid\u012bt\u0101 e-past\u0101 vai neofici\u0101l\u0101 izplat\u012b\u0161anas vietn\u0113.<\/li>\n\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Ja skart\u0101 pakotne darboj\u0101s vietn\u0113, n\u0101kamais uzdevums ir atkop\u0161ana un piek\u013cuves datu nomai\u0146a, nevis tikai spraud\u0146a atjaunin\u0101\u0161ana. P\u0113c tam turpini nov\u0113rot savienojumus un failus: to atk\u0101rtota par\u0101d\u012b\u0161an\u0101s noz\u012bm\u0113, ka izmekl\u0113\u0161ana j\u0101turpina.<\/p>\n\n\n<div class=\"references-section\">\n                <h2>Atsauces \/ Avoti<\/h2>\n                <ul class=\"references-list\"><li><a href=\"https:\/\/rankmath.com\/kb\/pro-3-0-123-security-incident\/\" target=\"_blank\" rel=\"noopener noreferrer\">Rank Math PRO 3.0.123 Security Incident: How to Secure Your Website<\/a><\/li><li><a href=\"https:\/\/www.wordfence.com\/blog\/2026\/10\/rank-math-seo-pro-3-0-123-malware\/\" target=\"_blank\" rel=\"noopener noreferrer\">Wordfence PSA by Alex Thomas<\/a><\/li><li><a href=\"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/id\/81cd7a2c-ad0c-4dbc-b5dc-07ec866d5c1f\" target=\"_blank\" rel=\"noopener noreferrer\">Rank Math SEO PRO 3.0.123 &#8211; Unauthenticated Embedded Malicious Code<\/a><\/li><\/ul>\n            <\/div>","protected":false},"excerpt":{"rendered":"<p>Da\u013ca ofici\u0101lo Rank Math SEO PRO 3.0.123 pakot\u0146u satur\u0113ja \u013caunprogrammat\u016bru. Ar atjaunin\u0101jumu vien nepietiek, ja infic\u0113tais spraudnis jau darboj\u0101s &#8211; p\u0101rbaudi riska periodu un izv\u0113lies atbilsto\u0161o atkop\u0161anas ce\u013cu.<\/p>\n","protected":false},"author":53,"featured_media":277,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9],"tags":[141,153,152,10,7],"class_list":["post-278","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-drosiba","tag-launprogrammatura","tag-piegades-kedes-uzbrukums","tag-rank-math","tag-wordpress","tag-wp-cli"],"_links":{"self":[{"href":"https:\/\/helloblog.io\/lv\/wp-json\/wp\/v2\/posts\/278","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/helloblog.io\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/helloblog.io\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/helloblog.io\/lv\/wp-json\/wp\/v2\/users\/53"}],"replies":[{"embeddable":true,"href":"https:\/\/helloblog.io\/lv\/wp-json\/wp\/v2\/comments?post=278"}],"version-history":[{"count":0,"href":"https:\/\/helloblog.io\/lv\/wp-json\/wp\/v2\/posts\/278\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/helloblog.io\/lv\/wp-json\/wp\/v2\/media\/277"}],"wp:attachment":[{"href":"https:\/\/helloblog.io\/lv\/wp-json\/wp\/v2\/media?parent=278"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/helloblog.io\/lv\/wp-json\/wp\/v2\/categories?post=278"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/helloblog.io\/lv\/wp-json\/wp\/v2\/tags?post=278"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}