{"id":253,"date":"2026-10-17T11:03:47","date_gmt":"2026-10-17T09:03:47","guid":{"rendered":"https:\/\/helloblog.io\/sk\/rank-math-seo-pro-3-0-123-malver-kontrola-a-obnova-webu\/"},"modified":"2026-10-17T11:03:47","modified_gmt":"2026-10-17T09:03:47","slug":"rank-math-seo-pro-3-0-123-malver-kontrola-a-obnova-webu","status":"publish","type":"post","link":"https:\/\/helloblog.io\/sk\/rank-math-seo-pro-3-0-123-malver-kontrola-a-obnova-webu\/","title":{"rendered":"Rank Math SEO PRO 3.0.123 obsahoval malv\u00e9r: ako skontrolova\u0165 a obnovi\u0165 web"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Malv\u00e9r sa tentoraz dostal priamo do ofici\u00e1lnych bal\u00edkov komer\u010dn\u00e9ho pluginu Rank Math SEO PRO. Zasiahol \u010das\u0165 stiahnut\u00ed a aktualiz\u00e1ci\u00ed verzie <strong>3.0.123<\/strong> medzi 15. okt\u00f3brom 2026 o 20:02 UTC a 16. okt\u00f3brom 2026 o 07:12 UTC. Na Slovensku to bolo <strong>od 15. okt\u00f3bra o 22:02 do 16. okt\u00f3bra o 09:12 SEL\u010c<\/strong>, teda pribli\u017ene jeden\u00e1s\u0165 hod\u00edn.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Rank Math \u0161kodliv\u00e9 bal\u00edky odstr\u00e1nil a vydal \u010dist\u00fa verziu <strong>3.0.124<\/strong>. Ak si v\u0161ak napadnut\u00fd plugin aktivoval, nov\u00e1 verzia sama neodstr\u00e1ni s\u00fabory, \u00fa\u010dty ani napl\u00e1novan\u00e9 \u00falohy, ktor\u00e9 malv\u00e9r vytvoril mimo pluginu. Tak\u00fdto web potrebuje obnovu alebo d\u00f4kladn\u00e9 vy\u010distenie.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u010co sa stalo a \u010do dok\u00e1\u017ee \u0161kodliv\u00fd k\u00f3d<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Ide o <strong>supply-chain \u00fatok<\/strong>, pri ktorom \u00fato\u010dn\u00edk zneu\u017eije dod\u00e1vate\u013esk\u00fd re\u0165azec softv\u00e9ru a doru\u010d\u00ed \u0161kodliv\u00fd k\u00f3d cez d\u00f4veryhodn\u00fd distribu\u010dn\u00fd kan\u00e1l. V tomto pr\u00edpade malv\u00e9r obsahoval samotn\u00fd ofici\u00e1lny bal\u00edk pluginu, ktor\u00fd si mohol stiahnu\u0165 alebo dosta\u0165 cez aktualiz\u00e1ciu. Ne\u0161lo o be\u017en\u00fa program\u00e1torsk\u00fa chybu, ktor\u00fa by \u00fato\u010dn\u00edk a\u017e n\u00e1sledne zneu\u017eil.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Incident m\u00e1 identifik\u00e1tor <strong>CVE-2026-111862<\/strong> v syst\u00e9me evidencie zranite\u013enost\u00ed a sk\u00f3re <strong>CVSS 9,8 z 10<\/strong>, teda kritick\u00fa z\u00e1va\u017enos\u0165. Z\u00e1znam ho ozna\u010duje ako \u201eRank Math SEO PRO 3.0.123 &#8211; Unauthenticated Embedded Malicious Code\u201c. Identifik\u00e1tor pluginu je <code>seo-by-rank-math-pro<\/code>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0160kodliv\u00fd k\u00f3d sa spust\u00ed pri aktiv\u00e1cii napadnut\u00e9ho pluginu a m\u00f4\u017ee \u00fato\u010dn\u00edkovi zabezpe\u010di\u0165 trval\u00fd pr\u00edstup. Komunikuje s dom\u00e9nou <code>rank1cdn[.]com<\/code> a pri n\u00e1v\u0161tev\u00e1ch webovej str\u00e1nky dok\u00e1\u017ee znova vytv\u00e1ra\u0165 skryt\u00e9 zadn\u00e9 vr\u00e1tka. Za potenci\u00e1lne odhalen\u00e9 preto pova\u017euj pr\u00edstupov\u00e9 \u00fadaje WordPressu, datab\u00e1zy, API k\u013e\u00fa\u010de a \u010fal\u0161ie tajomstv\u00e1, ktor\u00e9 dok\u00e1\u017ee \u010d\u00edta\u0165 proces webov\u00e9ho servera.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ozn\u00e1menie sa t\u00fdka iba doplnku <strong>PRO<\/strong>; bezplatn\u00fd plugin Rank Math neuv\u00e1dza medzi zasiahnut\u00fdmi produktmi. Rank Math nezverejnil, ako \u00fato\u010dn\u00edk bal\u00edky pozmenil. Z dostupn\u00fdch inform\u00e1ci\u00ed nemo\u017eno ur\u010di\u0165 jeho toto\u017enos\u0165 ani po\u010det napadnut\u00fdch webov\u00fdch str\u00e1nok.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Najprv rozhodni, \u010di potrebuje\u0161 obnovu<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Samotn\u00e1 verzia <strong>3.0.123 nedokazuje kompromit\u00e1ciu<\/strong>. Rozhoduje, \u010di bal\u00edk poch\u00e1dza z uveden\u00e9ho \u010dasov\u00e9ho okna a \u010di si ho aktivoval. V administr\u00e1cii WordPressu otvor sekciu <strong>Pluginy<\/strong> a skontroluj nain\u0161talovan\u00fa verziu Rank Math PRO.<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n\n<li><strong>Napadnut\u00fd bal\u00edk si nain\u0161taloval a aktivoval:<\/strong> pova\u017euj webov\u00fa str\u00e1nku za kompromitovan\u00fa. Pokra\u010duj obnovou z \u010distej z\u00e1lohy alebo manu\u00e1lnym \u010disten\u00edm.<\/li>\n\n\n<li><strong>Napadnut\u00fd bal\u00edk si nain\u0161taloval, ale nikdy neaktivoval:<\/strong> odstr\u00e1\u0148 jeho s\u00fabory, zo svojho \u00fa\u010dtu Rank Math stiahni \u010dist\u00fa verziu 3.0.124 a nain\u0161taluj ju. Prevent\u00edvne spusti bezpe\u010dnostn\u00fd sken.<\/li>\n\n\n<li><strong>Napadnut\u00fd bal\u00edk si iba stiahol, ale nenain\u0161taloval ani neaktivoval:<\/strong> tento incident s\u00e1m osebe nepreukazuje napadnutie webovej str\u00e1nky. Ak nevie\u0161 potvrdi\u0165, \u010di sa s\u00fabory predsa len nain\u0161talovali alebo aktivovali, obr\u00e1\u0165 sa na <a href=\"https:\/\/rankmath.com\/support\/\">podporu Rank Math<\/a>.<\/li>\n\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Rank Math eviduje \u00fa\u010dty, ktor\u00e9 si napadnut\u00e9 k\u00f3pie stiahli, a upozor\u0148uje ich. Ak si tak\u00e9 upozornenie dostal, prejdi pr\u00edslu\u0161n\u00fd postup aj vtedy, ke\u010f u\u017e pou\u017e\u00edva\u0161 in\u00fa verziu. Aktu\u00e1lne \u010d\u00edslo verzie nehovor\u00ed, \u010do sa na webe dialo pred aktualiz\u00e1ciou.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">R\u00fdchla diagnostika cez WP-CLI<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">WP-CLI, n\u00e1stroj na spr\u00e1vu WordPressu z pr\u00edkazov\u00e9ho riadka, ti pom\u00f4\u017ee preveri\u0165 verziu, \u00fa\u010dty aj podozriv\u00e9 stopy. Nasleduj\u00face pr\u00edkazy sl\u00fa\u017eia na prvotn\u00fa kontrolu, nie ako n\u00e1hrada cel\u00e9ho postupu obnovy. Sp\u00fa\u0161\u0165aj ich v adres\u00e1ri pr\u00edslu\u0161nej in\u0161tal\u00e1cie a pri syst\u00e9movom crone pou\u017ei skuto\u010dn\u00fd \u00fa\u010det webov\u00e9ho servera.<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:.875rem;font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:block;padding:16px 0 0 16px;margin-bottom:-1px;width:100%;text-align:left;background-color:#24292e\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"54\" height=\"14\" viewBox=\"0 0 54 14\"><g fill=\"none\" fill-rule=\"evenodd\" transform=\"translate(1 1)\"><circle cx=\"6\" cy=\"6\" r=\"6\" fill=\"#FF5F56\" stroke=\"#E0443E\" stroke-width=\".5\"><\/circle><circle cx=\"26\" cy=\"6\" r=\"6\" fill=\"#FFBD2E\" stroke=\"#DEA123\" stroke-width=\".5\"><\/circle><circle cx=\"46\" cy=\"6\" r=\"6\" fill=\"#27C93F\" stroke=\"#1AAB29\" stroke-width=\".5\"><\/circle><\/g><\/svg><\/span><span role=\"button\" tabindex=\"0\" style=\"color:#e1e4e8;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly># Aktu\u00e1lna verzia sama nepotvrd\u00ed ani nevyl\u00fa\u010di star\u0161ie napadnutie.\nwp plugin get seo-by-rank-math-pro --field=version\n\n# Zn\u00e1me \u0161kodliv\u00e9 polo\u017eky v datab\u00e1ze.\nwp option get _uf6qdn2hmm\nwp option get t8krdk990phb\nwp option get _np5pvf754c\n\nwp user list --role=administrator --fields=ID,user_login,user_email,user_registered\nwp core verify-checksums\nwp cron event list\n\nls -la wp-includes\/class-wp-cache-util.php\n\n# www-data nahra\u010f \u00fa\u010dtom webov\u00e9ho servera; m\u00f4\u017eu by\u0165 potrebn\u00e9 vy\u0161\u0161ie opr\u00e1vnenia.\ncrontab -l -u www-data | grep -F 'ms6v46'\n\n# V\u00fdskyt re\u0165azca je podnet na presk\u00famanie s\u00faboru.\ngrep -RIn --include='*.php' -- 'xmmqhn' wp-content\/\n<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki github-dark\" style=\"background-color:#24292e;color:#e1e4e8\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color:#6A737D\"># Aktu\u00e1lna verzia sama nepotvrd\u00ed ani nevyl\u00fa\u010di star\u0161ie napadnutie.<\/span><\/span>\n<span class=\"line\"><span style=\"color:#B392F0\">wp<\/span><span style=\"color:#9ECBFF\"> plugin<\/span><span style=\"color:#9ECBFF\"> get<\/span><span style=\"color:#9ECBFF\"> seo-by-rank-math-pro<\/span><span style=\"color:#79B8FF\"> --field=version<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color:#6A737D\"># Zn\u00e1me \u0161kodliv\u00e9 polo\u017eky v datab\u00e1ze.<\/span><\/span>\n<span class=\"line\"><span style=\"color:#B392F0\">wp<\/span><span style=\"color:#9ECBFF\"> option<\/span><span style=\"color:#9ECBFF\"> get<\/span><span style=\"color:#9ECBFF\"> _uf6qdn2hmm<\/span><\/span>\n<span class=\"line\"><span style=\"color:#B392F0\">wp<\/span><span style=\"color:#9ECBFF\"> option<\/span><span style=\"color:#9ECBFF\"> get<\/span><span style=\"color:#9ECBFF\"> t8krdk990phb<\/span><\/span>\n<span class=\"line\"><span style=\"color:#B392F0\">wp<\/span><span style=\"color:#9ECBFF\"> option<\/span><span style=\"color:#9ECBFF\"> get<\/span><span style=\"color:#9ECBFF\"> _np5pvf754c<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color:#B392F0\">wp<\/span><span style=\"color:#9ECBFF\"> user<\/span><span style=\"color:#9ECBFF\"> list<\/span><span style=\"color:#79B8FF\"> --role=administrator<\/span><span style=\"color:#79B8FF\"> --fields=ID,user_login,user_email,user_registered<\/span><\/span>\n<span class=\"line\"><span style=\"color:#B392F0\">wp<\/span><span style=\"color:#9ECBFF\"> core<\/span><span style=\"color:#9ECBFF\"> verify-checksums<\/span><\/span>\n<span class=\"line\"><span style=\"color:#B392F0\">wp<\/span><span style=\"color:#9ECBFF\"> cron<\/span><span style=\"color:#9ECBFF\"> event<\/span><span style=\"color:#9ECBFF\"> list<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color:#B392F0\">ls<\/span><span style=\"color:#79B8FF\"> -la<\/span><span style=\"color:#9ECBFF\"> wp-includes\/class-wp-cache-util.php<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color:#6A737D\"># www-data nahra\u010f \u00fa\u010dtom webov\u00e9ho servera; m\u00f4\u017eu by\u0165 potrebn\u00e9 vy\u0161\u0161ie opr\u00e1vnenia.<\/span><\/span>\n<span class=\"line\"><span style=\"color:#B392F0\">crontab<\/span><span style=\"color:#79B8FF\"> -l<\/span><span style=\"color:#79B8FF\"> -u<\/span><span style=\"color:#9ECBFF\"> www-data<\/span><span style=\"color:#F97583\"> |<\/span><span style=\"color:#B392F0\"> grep<\/span><span style=\"color:#79B8FF\"> -F<\/span><span style=\"color:#9ECBFF\"> 'ms6v46'<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color:#6A737D\"># V\u00fdskyt re\u0165azca je podnet na presk\u00famanie s\u00faboru.<\/span><\/span>\n<span class=\"line\"><span style=\"color:#B392F0\">grep<\/span><span style=\"color:#79B8FF\"> -RIn<\/span><span style=\"color:#79B8FF\"> --include=<\/span><span style=\"color:#9ECBFF\">'*.php'<\/span><span style=\"color:#79B8FF\"> --<\/span><span style=\"color:#9ECBFF\"> 'xmmqhn'<\/span><span style=\"color:#9ECBFF\"> wp-content\/<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<div class=\"wp-block-group callout callout-warning is-style-warning is-layout-flow wp-block-group-is-layout-flow\" style=\"border-width:1px;border-radius:8px;padding-top:1rem;padding-right:1.5rem;padding-bottom:1rem;padding-left:1.5rem\">\n\n<h4 class=\"wp-block-heading callout-title\">Aktualiz\u00e1cia nie je \u00fapln\u00e9 vy\u010distenie<\/h4>\n\n\n<p class=\"wp-block-paragraph\">Verzia 3.0.124 nahrad\u00ed bal\u00edk Rank Math PRO, ale neodstr\u00e1ni zadn\u00e9 vr\u00e1tka, administr\u00e1torsk\u00e9 \u00fa\u010dty ani cron \u00falohy, ktor\u00e9 \u0161kodliv\u00fd k\u00f3d vytvoril inde. Ani nepr\u00edtomnos\u0165 jednej zn\u00e1mej stopy nesta\u010d\u00ed na potvrdenie \u010dist\u00e9ho webu.<\/p>\n\n<\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Mo\u017enos\u0165 A: obnov web a datab\u00e1zu z \u010distej z\u00e1lohy<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Odpor\u00fa\u010danou cestou je z\u00e1loha vytvoren\u00e1 <strong>pred 15. okt\u00f3brom 2026 o 20:02 UTC<\/strong>, teda pred 22:02 SEL\u010c. Rovnak\u00fd okamih zodpoved\u00e1 15. okt\u00f3bru o 16:02 EDT a 16. okt\u00f3bru o 01:32 IST. Obnov s\u00fabory aj datab\u00e1zu, nie iba prie\u010dinok pluginu.<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n\n<li><strong>Obnov webov\u00fa str\u00e1nku aj datab\u00e1zu<\/strong> zo z\u00e1lohy, ktor\u00e1 vznikla pred za\u010diatkom incidentu.<\/li>\n\n\n<li><strong>Spusti bezpe\u010dnostn\u00fd sken<\/strong> d\u00f4veryhodn\u00fdm n\u00e1strojom, napr\u00edklad <a href=\"https:\/\/wordpress.org\/plugins\/wordfence\/\">Wordfence<\/a> alebo <a href=\"https:\/\/wordpress.org\/plugins\/sucuri-scanner\/\">Sucuri<\/a>.<\/li>\n\n\n<li><strong>Vyme\u0148 hesl\u00e1 a pr\u00edstupov\u00e9 \u00fadaje.<\/strong> Za potenci\u00e1lne odhalen\u00e9 pova\u017euj v\u0161etky tajomstv\u00e1 dostupn\u00e9 napadnut\u00e9mu webu vr\u00e1tane datab\u00e1zov\u00fdch \u00fadajov a API k\u013e\u00fa\u010dov. \u00dapln\u00fd zoznam n\u00e1jde\u0161 ni\u017e\u0161ie v \u010dasti o pr\u00edstupov\u00fdch \u00fadajoch.<\/li>\n\n\n<li><strong>Nain\u0161taluj \u010dist\u00fa verziu Rank Math PRO 3.0.124<\/strong> zo svojho \u00fa\u010dtu Rank Math a\u017e po obnove webu.<\/li>\n\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Ak nevie\u0161 bezpe\u010dne obnovi\u0165 z\u00e1lohu, po\u017eiadaj o pomoc hosting. Obnova nevr\u00e1ti sp\u00e4\u0165 pr\u00edpadn\u00fd \u00fanik tajomstiev, preto mus\u00ed\u0161 pr\u00edstupov\u00e9 \u00fadaje vymeni\u0165 aj pri tejto mo\u017enosti.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Mo\u017enos\u0165 B: vy\u010disti web manu\u00e1lne v spr\u00e1vnom porad\u00ed<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Manu\u00e1lne \u010distenie pou\u017ei vtedy, ke\u010f nem\u00e1\u0161 vhodn\u00fa \u010dist\u00fa z\u00e1lohu. Najprv mus\u00ed\u0161 zastavi\u0165 mechanizmus, ktor\u00fd obnovuje zadn\u00e9 vr\u00e1tka, a\u017e potom odstra\u0148uj jeho \u010fal\u0161ie stopy. Inak m\u00f4\u017ee n\u00e1v\u0161teva webovej str\u00e1nky znova vytvori\u0165 s\u00fabor, ktor\u00fd si pr\u00e1ve zmazal.<\/p>\n\n\n\n<div class=\"wp-block-group callout callout-warning is-style-warning is-layout-flow wp-block-group-is-layout-flow\" style=\"border-width:1px;border-radius:8px;padding-top:1rem;padding-right:1.5rem;padding-bottom:1rem;padding-left:1.5rem\">\n\n<h4 class=\"wp-block-heading callout-title\">Poradie krokov je podstatn\u00e9<\/h4>\n\n\n<p class=\"wp-block-paragraph\">Pred h\u013eadan\u00edm a odstra\u0148ovan\u00edm \u010fal\u0161\u00edch \u0161kodliv\u00fdch zmien dokon\u010di cel\u00fd prv\u00fd krok. Ak nem\u00e1\u0161 sk\u00fasenosti so s\u00fabormi webu, datab\u00e1zou alebo nastaveniami servera, zver \u010distenie hostingu alebo bezpe\u010dnostn\u00e9mu \u0161pecialistovi.<\/p>\n\n<\/div>\n\n\n\n<h3 class=\"wp-block-heading\">1. Zastav mechanizmus, ktor\u00fd obnovuje malv\u00e9r<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Samotn\u00e9 vypnutie pluginu nesta\u010d\u00ed. Cez spr\u00e1vcu s\u00faborov na hostingu alebo FTP odstr\u00e1\u0148 cel\u00fd prie\u010dinok Rank Math PRO, v pokynoch ozna\u010den\u00fd ako <code>rank-math-pro<\/code>. Nezamie\u0148aj n\u00e1zov prie\u010dinka s identifik\u00e1torom pluginu <code>seo-by-rank-math-pro<\/code>.<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n\n<li><strong>Odstr\u00e1\u0148 cel\u00fd prie\u010dinok pluginu Rank Math PRO<\/strong>, nie iba jednotliv\u00e9 podozriv\u00e9 s\u00fabory.<\/li>\n\n\n<li><strong>Odstr\u00e1\u0148 \u0161kodliv\u00e9 polo\u017eky z datab\u00e1zy.<\/strong> V phpMyAdmin alebo inom datab\u00e1zovom n\u00e1stroji otvor tabu\u013eku <code>wp_options<\/code> a vyma\u017e existuj\u00face z\u00e1znamy, ktor\u00fdch <code>option_name<\/code> je <code>_uf6qdn2hmm<\/code>, <code>t8krdk990phb<\/code> alebo <code>_np5pvf754c<\/code>. Ak in\u0161tal\u00e1cia pou\u017e\u00edva in\u00fd prefix tabuliek, otvor zodpovedaj\u00facu tabu\u013eku <code>options<\/code>.<\/li>\n\n\n<li><strong>Ak to hosting alebo firewall umo\u017e\u0148uje, zablokuj odch\u00e1dzaj\u00face spojenia na <code>rank1cdn.com<\/code>.<\/strong> Z\u00e1pis <code>rank1cdn[.]com<\/code> v bezpe\u010dnostn\u00fdch preh\u013eadoch ozna\u010duje t\u00fa ist\u00fa dom\u00e9nu bez akt\u00edvneho odkazu.<\/li>\n\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Do \u010fal\u0161ieho kroku prejdi a\u017e po odstr\u00e1nen\u00ed pluginu a \u0161kodliv\u00fdch datab\u00e1zov\u00fdch polo\u017eiek. Blokovanie dom\u00e9ny pridaj v\u0161ade, kde ho prostredie podporuje.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2. N\u00e1jdi a odstr\u00e1\u0148 \u010fal\u0161ie \u0161kodliv\u00e9 zmeny<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u00dato\u010dn\u00edk mohol zanecha\u0165 s\u00fabory, \u00fa\u010dty aj zmeny mimo samotn\u00e9ho pluginu. Prejdi v\u0161etky nasleduj\u00face oblasti, nielen adres\u00e1re Rank Math. Indik\u00e1tory kompromit\u00e1cie, ozna\u010dovan\u00e9 skratkou <strong>IOC<\/strong>, ti pom\u00f4\u017eu h\u013eada\u0165 zn\u00e1me stopy, ale nenahr\u00e1dzaj\u00fa kontrolu cel\u00e9ho prostredia.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Skryt\u00e9 PHP s\u00fabory a zadn\u00e9 vr\u00e1tka<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Podozriv\u00e9 PHP s\u00fabory h\u013eadaj aj medzi ostatn\u00fdmi pluginmi a t\u00e9mami. Osobitne prever tieto umiestnenia:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li><code>wp-content\/mu-plugins\/<\/code><\/li>\n\n\n<li>Prie\u010dinky ostatn\u00fdch pluginov.<\/li>\n\n\n<li>Prie\u010dinky <code>inc\/<\/code>, <code>includes\/<\/code> a <code>lib\/<\/code> v t\u00e9mach, ktor\u00e9 nepatria medzi predvolen\u00e9 t\u00e9my WordPressu.<\/li>\n\n\n<li>Prie\u010dinok <code>includes\/<\/code> pluginu Rank Math.<\/li>\n\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">V k\u00f3de h\u013eadaj kombin\u00e1ciu <code>base64_decode<\/code> a cyklov s oper\u00e1ciou XOR, k\u013e\u00fa\u010d <code>xmmqhn<\/code>, volania <code>proc_open<\/code> alebo k\u00f3d pracuj\u00faci so socketmi PHP-FPM. N\u00e1lezy presk\u00famaj v kontexte cel\u00e9ho s\u00faboru. S vyh\u013eadan\u00edm a odstr\u00e1nen\u00edm \u0161kodliv\u00fdch s\u00faborov ti m\u00f4\u017ee pom\u00f4c\u0165 bezpe\u010dnostn\u00fd plugin alebo hosting.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Nezn\u00e1me administr\u00e1torsk\u00e9 \u00fa\u010dty<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Prejdi pou\u017e\u00edvate\u013eov s rolou administr\u00e1tora a over ka\u017ed\u00fd nezn\u00e1my \u00fa\u010det. Medzi podozriv\u00e9 stopy patria men\u00e1 za\u010d\u00ednaj\u00face na <code>wpsupport_<\/code>, po ktor\u00fdch nasleduj\u00fa n\u00e1hodn\u00e9 znaky, a e-mailov\u00e9 adresy s dom\u00e9nou <code>@wp-mail[.]net<\/code>. Odstr\u00e1\u0148 \u00fa\u010dty, pri ktor\u00fdch potvrd\u00ed\u0161 \u0161kodliv\u00fd p\u00f4vod alebo neopr\u00e1vnen\u00fd pr\u00edstup.<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:.875rem;font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:block;padding:16px 0 0 16px;margin-bottom:-1px;width:100%;text-align:left;background-color:#24292e\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"54\" height=\"14\" viewBox=\"0 0 54 14\"><g fill=\"none\" fill-rule=\"evenodd\" transform=\"translate(1 1)\"><circle cx=\"6\" cy=\"6\" r=\"6\" fill=\"#FF5F56\" stroke=\"#E0443E\" stroke-width=\".5\"><\/circle><circle cx=\"26\" cy=\"6\" r=\"6\" fill=\"#FFBD2E\" stroke=\"#DEA123\" stroke-width=\".5\"><\/circle><circle cx=\"46\" cy=\"6\" r=\"6\" fill=\"#27C93F\" stroke=\"#1AAB29\" stroke-width=\".5\"><\/circle><\/g><\/svg><\/span><span role=\"button\" tabindex=\"0\" style=\"color:#e1e4e8;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>wp user list --role=administrator\n<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki github-dark\" style=\"background-color:#24292e;color:#e1e4e8\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color:#B392F0\">wp<\/span><span style=\"color:#9ECBFF\"> user<\/span><span style=\"color:#9ECBFF\"> list<\/span><span style=\"color:#79B8FF\"> --role=administrator<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<h4 class=\"wp-block-heading\">Falo\u0161n\u00fd s\u00fabor v core WordPressu<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">S\u00fabor <code>wp-includes\/class-wp-cache-util.php<\/code> <strong>nepatr\u00ed do legit\u00edmneho core WordPressu<\/strong>. Ak ho n\u00e1jde\u0161, odstr\u00e1\u0148 ho a over kontroln\u00e9 s\u00fa\u010dty, ktor\u00e9 porovnaj\u00fa s\u00fabory s o\u010dak\u00e1vanou podobou. S\u00fabory core n\u00e1sledne prein\u0161taluj z ofici\u00e1lneho zdroja, aby si nahradil aj pr\u00edpadn\u00e9 \u010fal\u0161ie zmenen\u00e9 s\u00fabory.<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:.875rem;font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:block;padding:16px 0 0 16px;margin-bottom:-1px;width:100%;text-align:left;background-color:#24292e\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"54\" height=\"14\" viewBox=\"0 0 54 14\"><g fill=\"none\" fill-rule=\"evenodd\" transform=\"translate(1 1)\"><circle cx=\"6\" cy=\"6\" r=\"6\" fill=\"#FF5F56\" stroke=\"#E0443E\" stroke-width=\".5\"><\/circle><circle cx=\"26\" cy=\"6\" r=\"6\" fill=\"#FFBD2E\" stroke=\"#DEA123\" stroke-width=\".5\"><\/circle><circle cx=\"46\" cy=\"6\" r=\"6\" fill=\"#27C93F\" stroke=\"#1AAB29\" stroke-width=\".5\"><\/circle><\/g><\/svg><\/span><span role=\"button\" tabindex=\"0\" style=\"color:#e1e4e8;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>wp core verify-checksums\n<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki github-dark\" style=\"background-color:#24292e;color:#e1e4e8\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color:#B392F0\">wp<\/span><span style=\"color:#9ECBFF\"> core<\/span><span style=\"color:#9ECBFF\"> verify-checksums<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<h4 class=\"wp-block-heading\">Pravidl\u00e1 v .htaccess a s\u00fabory .cache<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">Skontroluj <code>.htaccess<\/code> v kore\u0148ovom adres\u00e1ri webu aj v podadres\u00e1roch. H\u013eadaj pravidl\u00e1, ktor\u00e9 dovolia sp\u00fa\u0161\u0165a\u0165 s\u00fabory s pr\u00edponou <code>.cache<\/code> ako PHP k\u00f3d. Na serveri vyh\u013eadaj aj samotn\u00e9 s\u00fabory <code>.cache<\/code> obsahuj\u00face PHP a ka\u017ed\u00fd podozriv\u00fd n\u00e1lez presk\u00famaj.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Syst\u00e9mov\u00fd cron a udalosti WordPressu<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">V syst\u00e9movom crontabe \u00fa\u010dtu webov\u00e9ho servera h\u013eadaj polo\u017eky ozna\u010den\u00e9 koment\u00e1rom <code>#ms6v46<\/code>. Osobitne prejdi napl\u00e1novan\u00e9 udalosti WordPressu, preto\u017ee ide o in\u00fd mechanizmus ne\u017e syst\u00e9mov\u00fd cron. \u0160kodliv\u00e9 \u00falohy po presk\u00faman\u00ed odstr\u00e1\u0148.<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:.875rem;font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:block;padding:16px 0 0 16px;margin-bottom:-1px;width:100%;text-align:left;background-color:#24292e\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"54\" height=\"14\" viewBox=\"0 0 54 14\"><g fill=\"none\" fill-rule=\"evenodd\" transform=\"translate(1 1)\"><circle cx=\"6\" cy=\"6\" r=\"6\" fill=\"#FF5F56\" stroke=\"#E0443E\" stroke-width=\".5\"><\/circle><circle cx=\"26\" cy=\"6\" r=\"6\" fill=\"#FFBD2E\" stroke=\"#DEA123\" stroke-width=\".5\"><\/circle><circle cx=\"46\" cy=\"6\" r=\"6\" fill=\"#27C93F\" stroke=\"#1AAB29\" stroke-width=\".5\"><\/circle><\/g><\/svg><\/span><span role=\"button\" tabindex=\"0\" style=\"color:#e1e4e8;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly># www-data nahra\u010f skuto\u010dn\u00fdm \u00fa\u010dtom webov\u00e9ho servera.\ncrontab -l -u www-data\n\nwp cron event list\n<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki github-dark\" style=\"background-color:#24292e;color:#e1e4e8\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color:#6A737D\"># www-data nahra\u010f skuto\u010dn\u00fdm \u00fa\u010dtom webov\u00e9ho servera.<\/span><\/span>\n<span class=\"line\"><span style=\"color:#B392F0\">crontab<\/span><span style=\"color:#79B8FF\"> -l<\/span><span style=\"color:#79B8FF\"> -u<\/span><span style=\"color:#9ECBFF\"> www-data<\/span><\/span>\n<span class=\"line\"><\/span>\n<span class=\"line\"><span style=\"color:#B392F0\">wp<\/span><span style=\"color:#9ECBFF\"> cron<\/span><span style=\"color:#9ECBFF\"> event<\/span><span style=\"color:#9ECBFF\"> list<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<h4 class=\"wp-block-heading\">Ostatn\u00e9 pluginy, t\u00e9my a nahrat\u00e9 s\u00fabory<\/h4>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>Prein\u0161taluj pluginy a t\u00e9my z ich ofici\u00e1lnych zdrojov. Kde sa to d\u00e1, porovnaj existuj\u00face s\u00fabory s \u010dist\u00fdmi k\u00f3piami.<\/li>\n\n\n<li>Skontroluj adres\u00e1r <code>uploads\/<\/code> a vyh\u013eadaj PHP s\u00fabory, ktor\u00e9 tam spravidla nemaj\u00fa by\u0165.<\/li>\n\n\n<li>Neo\u010dak\u00e1van\u00e9 alebo zmenen\u00e9 s\u00fabory najprv presk\u00famaj a a\u017e potom rozhodni, ktor\u00e9 odstr\u00e1ni\u0161.<\/li>\n\n<\/ul>\n\n\n\n<h4 class=\"wp-block-heading\">Zmeny mimo adres\u00e1ra webu<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">\u00dato\u010dn\u00edk mohol zasiahnu\u0165 aj prostredie mimo in\u0161tal\u00e1cie WordPressu. Rozsah kontroly preto neobmedzuj na s\u00fabory webovej str\u00e1nky. Prever aj tieto miesta:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>S\u00fabory SSH <code>authorized_keys<\/code>.<\/li>\n\n\n<li>Crontaby ostatn\u00fdch syst\u00e9mov\u00fdch pou\u017e\u00edvate\u013eov.<\/li>\n\n\n<li>Be\u017eiace procesy.<\/li>\n\n\n<li>Adres\u00e1re mimo webu, do ktor\u00fdch m\u00f4\u017ee \u00fa\u010det webov\u00e9ho servera zapisova\u0165.<\/li>\n\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Na zdie\u013eanom hostingu nemus\u00ed\u0161 ma\u0165 do t\u00fdchto oblast\u00ed pr\u00edstup. V takom pr\u00edpade po\u017eiadaj hosting, aby ich preveril.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3. Vyme\u0148 v\u0161etky potenci\u00e1lne odhalen\u00e9 pr\u00edstupov\u00e9 \u00fadaje<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Za potenci\u00e1lne odhalen\u00e9 pova\u017euj v\u0161etky hesl\u00e1 a tajomstv\u00e1, ku ktor\u00fdm sa napadnut\u00fd web mohol dosta\u0165. Nahra\u010f ich nov\u00fdmi bezpe\u010dn\u00fdmi hodnotami a\u017e po odstr\u00e1nen\u00ed \u0161kodliv\u00fdch zmien. Tento krok nevynechaj ani po obnove zo z\u00e1lohy.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li><strong>Hesl\u00e1:<\/strong> zme\u0148 hesl\u00e1 \u00fa\u010dtov WordPressu aj \u010fal\u0161ie relevantn\u00e9 pr\u00edstupov\u00e9 \u00fadaje dostupn\u00e9 napadnut\u00e9mu webu.<\/li>\n\n\n<li><strong>Datab\u00e1za:<\/strong> vyme\u0148 datab\u00e1zov\u00e9 pou\u017e\u00edvate\u013esk\u00e9 meno a heslo a uprav ich v <code>wp-config.php<\/code>.<\/li>\n\n\n<li><strong>Bezpe\u010dnostn\u00e9 k\u013e\u00fa\u010de a salts WordPressu:<\/strong> vygeneruj nov\u00e9 hodnoty v <code>wp-config.php<\/code>. Ide o tajn\u00e9 hodnoty, ktor\u00e9 WordPress pou\u017e\u00edva pri ochrane autentifik\u00e1cie.<\/li>\n\n\n<li><strong>API a pripojen\u00e9 slu\u017eby:<\/strong> vyme\u0148 k\u013e\u00fa\u010de platobn\u00fdch br\u00e1n, prihlasovacie \u00fadaje SMTP, API k\u013e\u00fa\u010de a ostatn\u00e9 tajomstv\u00e1 ulo\u017een\u00e9 v nastaveniach webu alebo konfigura\u010dn\u00fdch s\u00faboroch.<\/li>\n\n\n<li><strong>Hosting a server:<\/strong> vyme\u0148 hesl\u00e1 alebo pr\u00edstupov\u00e9 \u00fadaje do ovl\u00e1dacieho panela hostingu, FTP\/SFTP a SSH. Prever aj tajomstv\u00e1 ulo\u017een\u00e9 v premenn\u00fdch prostredia.<\/li>\n\n\n<li><strong>Dvojfaktorov\u00e1 autentifik\u00e1cia:<\/strong> skontroluj ju pri administr\u00e1torsk\u00fdch \u00fa\u010dtoch a pod\u013ea potreby ju resetuj.<\/li>\n\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Nov\u00e9 \u00fadaje nastav v\u0161ade, kde ich pou\u017e\u00edva konfigur\u00e1cia webu alebo pripojen\u00e1 slu\u017eba. Ak nevie\u0161 ur\u010di\u0165 cel\u00fd rozsah, prejdi ho s hostingom alebo bezpe\u010dnostn\u00fdm \u0161pecialistom.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">4. Over v\u00fdsledok a sleduj n\u00e1vrat \u0161kodliv\u00fdch s\u00faborov<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Po \u010disten\u00ed spusti nov\u00fd bezpe\u010dnostn\u00fd sken cez Wordfence alebo Sucuri. Potom over s\u00fabory core WordPressu aj nain\u0161talovan\u00fdch pluginov. \u00daspe\u0161n\u00fd sken dopl\u0148 kontrolou s\u00faborov a sledovan\u00edm prev\u00e1dzky.<\/p>\n\n\n\n<div class=\"wp-block-kevinbatdorf-code-block-pro\" data-code-block-pro-font-family=\"Code-Pro-JetBrains-Mono\" style=\"font-size:.875rem;font-family:Code-Pro-JetBrains-Mono,ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,monospace;line-height:1.25rem;--cbp-tab-width:2;tab-size:var(--cbp-tab-width, 2)\"><span style=\"display:block;padding:16px 0 0 16px;margin-bottom:-1px;width:100%;text-align:left;background-color:#24292e\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"54\" height=\"14\" viewBox=\"0 0 54 14\"><g fill=\"none\" fill-rule=\"evenodd\" transform=\"translate(1 1)\"><circle cx=\"6\" cy=\"6\" r=\"6\" fill=\"#FF5F56\" stroke=\"#E0443E\" stroke-width=\".5\"><\/circle><circle cx=\"26\" cy=\"6\" r=\"6\" fill=\"#FFBD2E\" stroke=\"#DEA123\" stroke-width=\".5\"><\/circle><circle cx=\"46\" cy=\"6\" r=\"6\" fill=\"#27C93F\" stroke=\"#1AAB29\" stroke-width=\".5\"><\/circle><\/g><\/svg><\/span><span role=\"button\" tabindex=\"0\" style=\"color:#e1e4e8;display:none\" aria-label=\"Copy\" class=\"code-block-pro-copy-button\"><pre class=\"code-block-pro-copy-button-pre\" aria-hidden=\"true\"><textarea class=\"code-block-pro-copy-button-textarea\" tabindex=\"-1\" aria-hidden=\"true\" readonly>wp core verify-checksums\nwp plugin verify-checksums --all\n<\/textarea><\/pre><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" style=\"width:24px;height:24px\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"2\"><path class=\"with-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2m-6 9l2 2 4-4\"><\/path><path class=\"without-check\" stroke-linecap=\"round\" stroke-linejoin=\"round\" d=\"M9 5H7a2 2 0 00-2 2v12a2 2 0 002 2h10a2 2 0 002-2V7a2 2 0 00-2-2h-2M9 5a2 2 0 002 2h2a2 2 0 002-2M9 5a2 2 0 012-2h2a2 2 0 012 2\"><\/path><\/svg><\/span><pre class=\"shiki github-dark\" style=\"background-color:#24292e;color:#e1e4e8\" tabindex=\"0\"><code><span class=\"line\"><span style=\"color:#B392F0\">wp<\/span><span style=\"color:#9ECBFF\"> core<\/span><span style=\"color:#9ECBFF\"> verify-checksums<\/span><\/span>\n<span class=\"line\"><span style=\"color:#B392F0\">wp<\/span><span style=\"color:#9ECBFF\"> plugin<\/span><span style=\"color:#9ECBFF\"> verify-checksums<\/span><span style=\"color:#79B8FF\"> --all<\/span><\/span><\/code><\/pre><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Kontroln\u00e9 s\u00fa\u010dty nemusia by\u0165 dostupn\u00e9 pre ka\u017ed\u00fd plugin, najm\u00e4 pri komer\u010dn\u00fdch pluginoch. V takom pr\u00edpade porovnaj s\u00fabory s \u010distou k\u00f3piou od ofici\u00e1lneho dod\u00e1vate\u013ea. Ch\u00fdbaj\u00face kontroln\u00e9 s\u00fa\u010dty nie s\u00fa potvrden\u00edm, \u017ee plugin je \u010dist\u00fd.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li>Po\u010das nasleduj\u00facich dn\u00ed sleduj odch\u00e1dzaj\u00face spojenia a nezvy\u010dajn\u00fa aktivitu.<\/li>\n\n\n<li>Overuj, \u010di sa odstr\u00e1nen\u00e9 s\u00fabory neobjavuj\u00fa znova.<\/li>\n\n\n<li>Ak sa \u0161kodliv\u00e9 s\u00fabory vr\u00e1tia alebo zaznamen\u00e1\u0161 podozriv\u00fa aktivitu, pova\u017euj \u010distenie za ne\u00fapln\u00e9. Vr\u00e1\u0165 sa ku kroku 2 a zapoj hosting alebo bezpe\u010dnostn\u00e9ho \u0161pecialistu.<\/li>\n\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">\u010cist\u00fd plugin stiahni priamo zo svojho \u00fa\u010dtu<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Po dokon\u010den\u00ed pr\u00edslu\u0161n\u00e9ho postupu obnovy nain\u0161taluj Rank Math PRO <strong>3.0.124<\/strong>. Do prehliada\u010da zadaj priamo <code>rankmath.com<\/code>, prihl\u00e1s sa do svojho \u00fa\u010dtu a otvor sekciu so s\u00fabormi na stiahnutie. Ak sa nevie\u0161 prihl\u00e1si\u0165, m\u00f4\u017ee\u0161 potrebova\u0165 obnovi\u0165 heslo \u00fa\u010dtu.<\/p>\n\n\n\n<div class=\"wp-block-group callout callout-warning is-style-warning is-layout-flow wp-block-group-is-layout-flow\" style=\"border-width:1px;border-radius:8px;padding-top:1rem;padding-right:1.5rem;padding-bottom:1rem;padding-left:1.5rem\">\n\n<h4 class=\"wp-block-heading callout-title\">Pozor na phishing po\u010das obnovy<\/h4>\n\n\n<p class=\"wp-block-paragraph\">Rank Math neposiela prihlasovacie odkazy ani odkazy na stiahnutie e-mailom. Nevy\u017eiadan\u00e9 spr\u00e1vy, ktor\u00e9 \u0165a vyz\u00fdvaj\u00fa klikn\u00fa\u0165 na odkaz na reset hesla alebo stiahnutie pluginu, pova\u017euj za podozriv\u00e9. Obnovu hesla za\u010dni priamo na webovej str\u00e1nke dod\u00e1vate\u013ea.<\/p>\n\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Neofici\u00e1lne distribu\u010dn\u00e9 weby vr\u00e1tane webov, ktor\u00e9 pon\u00fakaj\u00fa GPL k\u00f3pie, m\u00f4\u017eu na\u010falej poskytova\u0165 verziu 3.0.123. \u010cist\u00fd bal\u00edk preto z\u00edskaj zo svojho \u00fa\u010dtu u dod\u00e1vate\u013ea, nie z cudzieho arch\u00edvu.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ak potrebuje\u0161 pom\u00f4c\u0165 s pos\u00faden\u00edm situ\u00e1cie alebo s v\u00fdberom postupu obnovy, otvor <a href=\"https:\/\/rankmath.com\/support\/\">po\u017eiadavku na podporu<\/a> alebo nap\u00ed\u0161 na <code>support@rankmath.com<\/code>. Uve\u010f verziu Rank Math PRO a kroky, ktor\u00e9 si u\u017e dokon\u010dil, aby podpora vedela nadviaza\u0165 na aktu\u00e1lny stav.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u010co upravi\u0165 v prev\u00e1dzke po obnove<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">D\u00f4veryhodn\u00fd komer\u010dn\u00fd dod\u00e1vate\u013e nevylu\u010duje supply-chain \u00fatok. Automatick\u00e9 aktualiz\u00e1cie pr\u00e9miov\u00fdch pluginov maj\u00fa dve strany: r\u00fdchlo doru\u010dia opravu, ale m\u00f4\u017eu rovnako r\u00fdchlo nasadi\u0165 aj kompromitovan\u00fd bal\u00edk. Pri prev\u00e1dzke preto potrebuje\u0161 popri aktualiz\u00e1ci\u00e1ch aj sp\u00f4sob, ako zmenu overi\u0165 a bezpe\u010dne sa z nej zotavi\u0165.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li><strong>Udr\u017eiavaj z\u00e1lohy mimo servera<\/strong> a nastav dostato\u010dn\u00fa hist\u00f3riu, aby si sa vedel vr\u00e1ti\u0165 pred za\u010diatok incidentu.<\/li>\n\n\n<li><strong>Monitoruj a pod\u013ea mo\u017enost\u00ed obmedz odch\u00e1dzaj\u00face spojenia<\/strong> webov\u00e9ho servera.<\/li>\n\n\n<li><strong>Overuj kontroln\u00e9 s\u00fa\u010dty<\/strong> a pri pluginoch bez tejto mo\u017enosti porovn\u00e1vaj s\u00fabory s \u010dist\u00fdmi ofici\u00e1lnymi k\u00f3piami.<\/li>\n\n\n<li><strong>Prehodno\u0165 re\u017eim automatick\u00fdch aktualiz\u00e1ci\u00ed pr\u00e9miov\u00fdch pluginov<\/strong> spolu s kontrolami a postupom obnovy, nie izolovane.<\/li>\n\n\n<li><strong>S\u0165ahuj bal\u00edky z \u00fa\u010dtu u dod\u00e1vate\u013ea<\/strong> a prihlasovacie ani s\u0165ahovacie odkazy nepreberaj z nevy\u017eiadan\u00fdch e-mailov.<\/li>\n\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Ak si napadnut\u00fd bal\u00edk aktivoval, uzavri incident a\u017e po obnove alebo \u010disten\u00ed, v\u00fdmene pr\u00edstupov\u00fdch \u00fadajov a n\u00e1slednom overen\u00ed. Ke\u010f sa \u0161kodliv\u00e9 stopy vracaj\u00fa, pokra\u010duj vy\u0161etrovan\u00edm servera &#8211; opakovan\u00e1 in\u0161tal\u00e1cia \u010dist\u00e9ho pluginu tento probl\u00e9m nevyrie\u0161i.<\/p>\n\n\n<div class=\"references-section\">\n                <h2>Referencie \/ Zdroje<\/h2>\n                <ul class=\"references-list\"><li><a href=\"https:\/\/rankmath.com\/kb\/pro-3-0-123-security-incident\/\" target=\"_blank\" rel=\"noopener noreferrer\">Rank Math PRO 3.0.123 Security Incident: How to Secure Your Website<\/a><\/li><li><a href=\"https:\/\/www.wordfence.com\/blog\/2026\/10\/rank-math-seo-pro-3-0-123-malware\/\" target=\"_blank\" rel=\"noopener noreferrer\">Rank Math SEO PRO 3.0.123 supply chain attack: malware in official update packages<\/a><\/li><li><a href=\"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/id\/81cd7a2c-ad0c-4dbc-b5dc-07ec866d5c1f\" target=\"_blank\" rel=\"noopener noreferrer\">Rank Math SEO PRO 3.0.123 &#8211; Unauthenticated Embedded Malicious Code<\/a><\/li><\/ul>\n            <\/div>","protected":false},"excerpt":{"rendered":"<p>\u010cas\u0165 ofici\u00e1lnych bal\u00edkov Rank Math SEO PRO 3.0.123 obsahovala malv\u00e9r. Samotn\u00e1 aktualiz\u00e1cia nesta\u010d\u00ed, ak sa \u0161kodliv\u00fd k\u00f3d u\u017e spustil &#8211; rozhoduje \u010das stiahnutia, aktiv\u00e1cia a spr\u00e1vne poradie obnovy.<\/p>\n","protected":false},"author":38,"featured_media":252,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9],"tags":[153,152,154,10,7],"class_list":["post-253","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-bezpecnost","tag-malver","tag-rank-math","tag-supply-chain-utok","tag-wordpress","tag-wp-cli"],"_links":{"self":[{"href":"https:\/\/helloblog.io\/sk\/wp-json\/wp\/v2\/posts\/253","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/helloblog.io\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/helloblog.io\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/helloblog.io\/sk\/wp-json\/wp\/v2\/users\/38"}],"replies":[{"embeddable":true,"href":"https:\/\/helloblog.io\/sk\/wp-json\/wp\/v2\/comments?post=253"}],"version-history":[{"count":0,"href":"https:\/\/helloblog.io\/sk\/wp-json\/wp\/v2\/posts\/253\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/helloblog.io\/sk\/wp-json\/wp\/v2\/media\/252"}],"wp:attachment":[{"href":"https:\/\/helloblog.io\/sk\/wp-json\/wp\/v2\/media?parent=253"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/helloblog.io\/sk\/wp-json\/wp\/v2\/categories?post=253"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/helloblog.io\/sk\/wp-json\/wp\/v2\/tags?post=253"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}