{"id":35922,"date":"2024-03-11T20:41:41","date_gmt":"2024-03-11T19:41:41","guid":{"rendered":"https:\/\/quike.it\/es\/?p=35922"},"modified":"2024-03-11T20:41:42","modified_gmt":"2024-03-11T19:41:42","slug":"hackers-infectan-3300-sitios-wordpress-mediante-vulnerabilidad-en-plugin","status":"publish","type":"post","link":"https:\/\/quike.it\/es\/hackers-infectan-3300-sitios-wordpress-mediante-vulnerabilidad-en-plugin\/","title":{"rendered":"Hackers Infectan 3300 Sitios WordPress mediante Vulnerabilidad en Plugin"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"35922\" class=\"elementor elementor-35922\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-13ebb6d elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"13ebb6d\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-4b2ae18\" data-id=\"4b2ae18\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-01196c6 elementor-widget elementor-widget-text-editor\" data-id=\"01196c6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Los <a href=\"https:\/\/quike.it\/es\/los-hackers-mas-alla-de-los-estereotipos\/\" target=\"_blank\" rel=\"noopener\"><strong>ciberdelincuentes<\/strong><\/a> est\u00e1n comprometiendo <strong>sitios web de WordPress<\/strong> al explotar una vulnerabilidad presente en versiones desactualizadas del <strong><em>plugin<\/em> Popup Builder<\/strong>, logrando infectar a m\u00e1s de <strong>3300<\/strong> <strong>sitios WordPress<\/strong> con c\u00f3digo malicioso.<\/p><p>La vulnerabilidad explotada en estos ataques, identificada como <strong>CVE-2023-6000<\/strong>, es una brecha de <strong>script<\/strong> entre sitios <strong>(XSS)<\/strong> que afecta a las versiones <strong>4.2.3<\/strong> y anteriores del <strong>Popup Builder<\/strong>.<\/p><p>Esta vulnerabilidad fue inicialmente revelada en <strong>noviembre de 2023<\/strong>.<\/p><p>A principios de este a\u00f1o, una campa\u00f1a de <strong>Balada Injector<\/strong> aprovech\u00f3 esta vulnerabilidad espec\u00edfica para infectar m\u00e1s de <strong>6,700 sitios web<\/strong>, evidenciando que muchos administradores de sitios no aplicaron los <strong>parches<\/strong> lo suficientemente r\u00e1pido.<\/p><p>Recientemente, <a href=\"https:\/\/blog.sucuri.net\/2024\/03\/new-malware-campaign-found-exploiting-stored-xss-in-popup-builder-4-2-3.html\" target=\"_blank\" rel=\"noopener\"><strong>Sucuri ha identificado<\/strong> <strong>una nueva campa\u00f1a<\/strong><\/a> que ha experimentado un notable aumento en las \u00faltimas tres semanas, dirigida a la misma vulnerabilidad en el <strong>plugin<\/strong> de <strong>WordPress.<\/strong><\/p><p><a href=\"https:\/\/publicwww.com\/websites\/%22var+e+%3D+d%5B%27create%27+%2B+%27Element%27%5D%28%27scr%27+%2B+%27ipt%27%29%3B+e%5B%27src%27%5D+%3D+%27https%3A%2F%2Fhost.cloudsonicwave.com%22\/\" target=\"_blank\" rel=\"noopener\"><strong>PublicWWW revela<\/strong><\/a> que las inyecciones de c\u00f3digo vinculadas a esta \u00faltima campa\u00f1a est\u00e1n presentes en <strong>3,329<\/strong> <strong>sitios web de WordPress<\/strong>, y los esc\u00e1neres de <strong>Sucuri<\/strong> han detectado <strong>1,170 infecciones.<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e4d757b elementor-grid-1 elementor-grid-tablet-2 elementor-grid-mobile-1 elementor-widget elementor-widget-loop-grid\" data-id=\"e4d757b\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;template_id&quot;:&quot;30519&quot;,&quot;columns&quot;:1,&quot;_skin&quot;:&quot;post&quot;,&quot;columns_tablet&quot;:&quot;2&quot;,&quot;columns_mobile&quot;:&quot;1&quot;,&quot;edit_handle_selector&quot;:&quot;[data-elementor-type=\\&quot;loop-item\\&quot;]&quot;,&quot;row_gap&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]},&quot;row_gap_tablet&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]},&quot;row_gap_mobile&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]}}\" data-widget_type=\"loop-grid.post\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-loop-container elementor-grid\" role=\"list\">\n\t\t<style id=\"loop-30519\">.elementor-30519 .elementor-element.elementor-element-98493d2 .elementor-column-gap-custom .elementor-column > .elementor-element-populated{padding:2px;}.elementor-30519 .elementor-element.elementor-element-ccee508 > .elementor-widget-wrap > .elementor-widget:not(.elementor-widget__width-auto):not(.elementor-widget__width-initial):not(:last-child):not(.elementor-absolute){--kit-widget-spacing:1px;}.elementor-widget-image .widget-image-caption{font-family:var( --e-global-typography-text-font-family ), Sans-serif;font-weight:var( --e-global-typography-text-font-weight );}.elementor-30519 .elementor-element.elementor-element-80149f2 img{height:85px;object-fit:cover;object-position:center center;}.elementor-30519 .elementor-element.elementor-element-80149f2:not( .elementor-widget-image ), .elementor-30519 .elementor-element.elementor-element-80149f2.elementor-widget-image img{-webkit-mask-image:url( https:\/\/quike.it\/es\/wp-content\/plugins\/elementor\/assets\/mask-shapes\/circle.svg );-webkit-mask-size:contain;-webkit-mask-position:center center;-webkit-mask-repeat:no-repeat;}.elementor-30519 .elementor-element.elementor-element-2109b1e > .elementor-widget-wrap > .elementor-widget:not(.elementor-widget__width-auto):not(.elementor-widget__width-initial):not(:last-child):not(.elementor-absolute){--kit-widget-spacing:3px;}.elementor-widget-post-info .elementor-icon-list-item{font-family:var( --e-global-typography-text-font-family ), Sans-serif;font-weight:var( --e-global-typography-text-font-weight );}.elementor-30519 .elementor-element.elementor-element-26a68f7 .elementor-icon-list-icon{width:17px;}.elementor-30519 .elementor-element.elementor-element-26a68f7 .elementor-icon-list-icon i{font-size:17px;}.elementor-30519 .elementor-element.elementor-element-26a68f7 .elementor-icon-list-icon svg{--e-icon-list-icon-size:17px;}body:not(.rtl) .elementor-30519 .elementor-element.elementor-element-26a68f7 .elementor-icon-list-text{padding-left:5px;}body.rtl .elementor-30519 .elementor-element.elementor-element-26a68f7 .elementor-icon-list-text{padding-right:5px;}.elementor-30519 .elementor-element.elementor-element-26a68f7 .elementor-icon-list-item{font-family:\"Work Sans\", Sans-serif;font-weight:600;text-transform:uppercase;word-spacing:0px;}.elementor-30519 .elementor-element.elementor-element-26a68f7{width:100%;max-width:100%;align-self:center;}.elementor-widget-heading .elementor-heading-title{font-family:var( --e-global-typography-primary-font-family ), Sans-serif;font-weight:var( --e-global-typography-primary-font-weight );}.elementor-30519 .elementor-element.elementor-element-1ed9e84 .elementor-heading-title{font-family:\"Roboto\", Sans-serif;font-weight:600;color:#000000;}.elementor-widget-icon-list .elementor-icon-list-item > .elementor-icon-list-text, .elementor-widget-icon-list .elementor-icon-list-item > a{font-family:var( --e-global-typography-text-font-family ), Sans-serif;font-weight:var( --e-global-typography-text-font-weight );}.elementor-30519 .elementor-element.elementor-element-714486b .elementor-icon-list-icon i{color:#000000;transition:color 0.3s;}.elementor-30519 .elementor-element.elementor-element-714486b .elementor-icon-list-icon svg{fill:#000000;transition:fill 0.3s;}.elementor-30519 .elementor-element.elementor-element-714486b{--e-icon-list-icon-size:13px;--e-icon-list-icon-align:left;--e-icon-list-icon-margin:0 calc(var(--e-icon-list-icon-size, 1em) * 0.25) 0 0;--icon-vertical-align:center;--icon-vertical-offset:0px;margin:0px 0px calc(var(--kit-widget-spacing, 0px) + 0px) 0px;padding:0px 0px 0px 0px;width:100%;max-width:100%;}.elementor-30519 .elementor-element.elementor-element-714486b .elementor-icon-list-item > .elementor-icon-list-text, .elementor-30519 .elementor-element.elementor-element-714486b .elementor-icon-list-item > a{font-family:\"Work Sans\", Sans-serif;font-size:11px;font-weight:500;text-transform:capitalize;line-height:16px;letter-spacing:1px;}.elementor-30519 .elementor-element.elementor-element-714486b .elementor-icon-list-text{color:#333333;transition:color 0.3s;}.elementor-30519 .elementor-element.elementor-element-0a32de7 .elementor-icon-list-icon i{color:#000000;transition:color 0.3s;}.elementor-30519 .elementor-element.elementor-element-0a32de7 .elementor-icon-list-icon svg{fill:#000000;transition:fill 0.3s;}.elementor-30519 .elementor-element.elementor-element-0a32de7{--e-icon-list-icon-size:13px;--e-icon-list-icon-align:left;--e-icon-list-icon-margin:0 calc(var(--e-icon-list-icon-size, 1em) * 0.25) 0 0;--icon-vertical-align:center;--icon-vertical-offset:0px;margin:0px 0px calc(var(--kit-widget-spacing, 0px) + 0px) 0px;padding:0px 0px 0px 0px;width:100%;max-width:100%;}.elementor-30519 .elementor-element.elementor-element-0a32de7 .elementor-icon-list-item > .elementor-icon-list-text, .elementor-30519 .elementor-element.elementor-element-0a32de7 .elementor-icon-list-item > a{font-family:\"Work Sans\", Sans-serif;font-size:11px;font-weight:500;text-transform:capitalize;line-height:16px;letter-spacing:1px;}.elementor-30519 .elementor-element.elementor-element-0a32de7 .elementor-icon-list-text{color:#333333;transition:color 0.3s;}@media(min-width:768px){.elementor-30519 .elementor-element.elementor-element-ccee508{width:20%;}.elementor-30519 .elementor-element.elementor-element-2109b1e{width:79.997%;}}@media(max-width:767px){.elementor-30519 .elementor-element.elementor-element-98493d2 .elementor-column-gap-custom .elementor-column > .elementor-element-populated{padding:2px;}.elementor-30519 .elementor-element.elementor-element-ccee508{width:25%;}.elementor-30519 .elementor-element.elementor-element-2109b1e{width:75%;}.elementor-30519 .elementor-element.elementor-element-1ed9e84 .elementor-heading-title{font-size:15px;}}<\/style>\t\t<div data-elementor-type=\"loop-item\" data-elementor-id=\"30519\" class=\"elementor elementor-30519 e-loop-item e-loop-item-35401 post-35401 post type-post status-publish format-standard has-post-thumbnail hentry category-seguridad category-wordpress\" data-elementor-post-type=\"elementor_library\" data-custom-edit-handle=\"1\">\n\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-98493d2 elementor-section-full_width elementor-section-height-default elementor-section-height-default\" data-id=\"98493d2\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-custom\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-ccee508\" data-id=\"ccee508\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-80149f2 elementor-widget elementor-widget-image\" data-id=\"80149f2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/quike.it\/es\/hackers-aprovechan-falla-rce-en-bricks-de-wordpress\/\" target=\"_blank\">\n\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"1120\" height=\"600\" src=\"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/02\/WordPress_Alert.png\" class=\"attachment-full size-full wp-image-35403\" alt=\"\" srcset=\"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/02\/WordPress_Alert.png 1120w, https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/02\/WordPress_Alert-300x161.png 300w, https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/02\/WordPress_Alert-1024x549.png 1024w, https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/02\/WordPress_Alert-768x411.png 768w\" sizes=\"(max-width: 1120px) 100vw, 1120px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-2109b1e\" data-id=\"2109b1e\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-26a68f7 elementor-align-left elementor-widget__width-inherit elementor-widget elementor-widget-post-info\" data-id=\"26a68f7\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"categorias-post\" data-widget_type=\"post-info.default\">\n\t\t\t\t\t\t\t<ul class=\"elementor-inline-items elementor-icon-list-items elementor-post-info\">\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-repeater-item-dfd774d elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text elementor-post-info__item elementor-post-info__item--type-custom\">\n\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/quike.it\/es\/category\/informatica\/seguridad\/\" rel=\"tag\">Seguridad<\/a> <a href=\"https:\/\/quike.it\/es\/category\/web\/wordpress\/\" rel=\"tag\">WordPress<\/a>\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1ed9e84 elementor-widget elementor-widget-heading\" data-id=\"1ed9e84\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"top-post\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\"><a href=\"https:\/\/quike.it\/es\/hackers-aprovechan-falla-rce-en-bricks-de-wordpress\/\" target=\"_blank\">Hackers Aprovechan Falla RCE en Bricks de WordPress<\/a><\/div>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-714486b elementor-icon-list--layout-inline elementor-align-start elementor-hidden-tablet elementor-hidden-mobile elementor-widget__width-inherit elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"714486b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items elementor-inline-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/quike.it\/es\/hackers-aprovechan-falla-rce-en-bricks-de-wordpress\/\">\n\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-book-reader\" viewBox=\"0 0 512 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M352 96c0-53.02-42.98-96-96-96s-96 42.98-96 96 42.98 96 96 96 96-42.98 96-96zM233.59 241.1c-59.33-36.32-155.43-46.3-203.79-49.05C13.55 191.13 0 203.51 0 219.14v222.8c0 14.33 11.59 26.28 26.49 27.05 43.66 2.29 131.99 10.68 193.04 41.43 9.37 4.72 20.48-1.71 20.48-11.87V252.56c-.01-4.67-2.32-8.95-6.42-11.46zm248.61-49.05c-48.35 2.74-144.46 12.73-203.78 49.05-4.1 2.51-6.41 6.96-6.41 11.63v245.79c0 10.19 11.14 16.63 20.54 11.9 61.04-30.72 149.32-39.11 192.97-41.4 14.9-.78 26.49-12.73 26.49-27.06V219.14c-.01-15.63-13.56-28.01-29.81-27.09z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">132 lecturas<\/span>\n\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-comments\" viewBox=\"0 0 576 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 192c0-88.4-93.1-160-208-160S0 103.6 0 192c0 34.3 14.1 65.9 38 92-13.4 30.2-35.5 54.2-35.8 54.5-2.2 2.3-2.8 5.7-1.5 8.7S4.8 352 8 352c36.6 0 66.9-12.3 88.7-25 32.2 15.7 70.3 25 111.3 25 114.9 0 208-71.6 208-160zm122 220c23.9-26 38-57.7 38-92 0-66.9-53.5-124.2-129.3-148.1.9 6.6 1.3 13.3 1.3 20.1 0 105.9-107.7 192-240 192-10.8 0-21.3-.8-31.7-1.9C207.8 439.6 281.8 480 368 480c41 0 79.1-9.2 111.3-25 21.8 12.7 52.1 25 88.7 25 3.2 0 6.1-1.9 7.3-4.8 1.3-2.9.7-6.3-1.5-8.7-.3-.3-22.4-24.2-35.8-54.5z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\"><a href=\"https:\/\/quike.it\/es\/hackers-aprovechan-falla-rce-en-bricks-de-wordpress\/#respond\">sin comentarios<\/a><\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0a32de7 elementor-icon-list--layout-inline elementor-align-start elementor-widget__width-inherit elementor-hidden-desktop elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"0a32de7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items elementor-inline-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/quike.it\/es\/hackers-aprovechan-falla-rce-en-bricks-de-wordpress\/\">\n\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-book-reader\" viewBox=\"0 0 512 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M352 96c0-53.02-42.98-96-96-96s-96 42.98-96 96 42.98 96 96 96 96-42.98 96-96zM233.59 241.1c-59.33-36.32-155.43-46.3-203.79-49.05C13.55 191.13 0 203.51 0 219.14v222.8c0 14.33 11.59 26.28 26.49 27.05 43.66 2.29 131.99 10.68 193.04 41.43 9.37 4.72 20.48-1.71 20.48-11.87V252.56c-.01-4.67-2.32-8.95-6.42-11.46zm248.61-49.05c-48.35 2.74-144.46 12.73-203.78 49.05-4.1 2.51-6.41 6.96-6.41 11.63v245.79c0 10.19 11.14 16.63 20.54 11.9 61.04-30.72 149.32-39.11 192.97-41.4 14.9-.78 26.49-12.73 26.49-27.06V219.14c-.01-15.63-13.56-28.01-29.81-27.09z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">132 lecturas<\/span>\n\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-comments\" viewBox=\"0 0 576 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 192c0-88.4-93.1-160-208-160S0 103.6 0 192c0 34.3 14.1 65.9 38 92-13.4 30.2-35.5 54.2-35.8 54.5-2.2 2.3-2.8 5.7-1.5 8.7S4.8 352 8 352c36.6 0 66.9-12.3 88.7-25 32.2 15.7 70.3 25 111.3 25 114.9 0 208-71.6 208-160zm122 220c23.9-26 38-57.7 38-92 0-66.9-53.5-124.2-129.3-148.1.9 6.6 1.3 13.3 1.3 20.1 0 105.9-107.7 192-240 192-10.8 0-21.3-.8-31.7-1.9C207.8 439.6 281.8 480 368 480c41 0 79.1-9.2 111.3-25 21.8 12.7 52.1 25 88.7 25 3.2 0 6.1-1.9 7.3-4.8 1.3-2.9.7-6.3-1.5-8.7-.3-.3-22.4-24.2-35.8-54.5z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\"><a href=\"https:\/\/quike.it\/es\/hackers-aprovechan-falla-rce-en-bricks-de-wordpress\/#respond\">0<\/a><\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-35b608a elementor-widget elementor-widget-heading\" data-id=\"35b608a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Detalles de la infecci\u00f3n<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0ec01f9 elementor-widget elementor-widget-text-editor\" data-id=\"0ec01f9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Los ataques comprometen las secciones de <strong>JavaScript<\/strong> personalizado o <strong>CSS<\/strong> personalizado en la interfaz de administraci\u00f3n de <strong>WordPress,<\/strong> depositando el c\u00f3digo malicioso en la tabla <strong>&#8216;wp_postmeta&#8217;<\/strong> de la <strong>base de datos<\/strong>.<\/p><p>La funci\u00f3n principal de este c\u00f3digo inyectado es actuar como <em>manejadores<\/em> de eventos para diversas acciones del <em>plugin<\/em> <strong>Popup Builder,<\/strong> tales como <strong><em>&#8216;sgpb-ShouldOpen&#8217;,<\/em> <em>&#8216;sgpb-ShouldClose&#8217;,<\/em> <em>&#8216;sgpb-WillOpen&#8217;,<\/em> <em>&#8216;sgpbDidOpen&#8217;,<\/em> <em>&#8216;sgpbWillClose&#8217;<\/em><\/strong> y <strong><em>&#8216;sgpb-DidClose&#8217;.<\/em><\/strong><\/p><p>Al lograrlo, el c\u00f3digo malicioso se activa en eventos espec\u00edficos del <strong><em>plugin,<\/em><\/strong> como la apertura o cierre de ventanas emergentes.<\/p><p>Si bien las acciones precisas del c\u00f3digo pueden variar, la finalidad principal de las <strong><em>inyecciones<\/em><\/strong> parece ser redirigir a los visitantes de los sitios afectados a destinos maliciosos, tales como p\u00e1ginas de <a href=\"https:\/\/quike.it\/es\/phishing-no-caigas-en-la-trampa\/\" target=\"_blank\" rel=\"noopener\"><strong>phishing<\/strong><\/a> y sitios que distribuyen <strong>malware.<\/strong><\/p><p>En algunas infecciones particulares, los analistas observaron que el c\u00f3digo inyectaba una <strong>URL<\/strong> de <em>redirecci\u00f3n <strong>(hxxp:\/\/ttincoming.traveltraffic[.]cc\/?traffic)<\/strong><\/em> como el par\u00e1metro <strong><em>&#8216;redirect-url&#8217;<\/em><\/strong> para una ventana emergente de <strong><em>\u00abcontact-form-7\u00bb.<\/em><\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f9a8c2f elementor-widget elementor-widget-image\" data-id=\"f9a8c2f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/03\/blog_2683.jpg\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"blog_2683\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6MzU5MjYsInVybCI6Imh0dHBzOlwvXC9xdWlrZS5pdFwvZXNcL3dwLWNvbnRlbnRcL3VwbG9hZHNcL3NpdGVzXC8zXC8yMDI0XC8wM1wvYmxvZ18yNjgzLmpwZyJ9\">\n\t\t\t\t\t\t\t<img decoding=\"async\" width=\"652\" height=\"215\" src=\"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/03\/blog_2683.jpg\" class=\"attachment-full size-full wp-image-35926\" alt=\"infectan 3300 sitios wordpress\" srcset=\"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/03\/blog_2683.jpg 652w, https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/03\/blog_2683-300x99.jpg 300w\" sizes=\"(max-width: 652px) 100vw, 652px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\">Una variante de la inyecci\u00f3n (Sucuri)<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-020660a elementor-widget elementor-widget-text-editor\" data-id=\"020660a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>La inyecci\u00f3n mencionada recoge un fragmento de <strong>c\u00f3digo malicioso<\/strong> de una fuente externa y lo inserta en el encabezado de la <em><strong>p\u00e1gina web<\/strong><\/em>, permitiendo su ejecuci\u00f3n a trav\u00e9s del navegador.<\/p><p>Este m\u00e9todo otorga a los atacantes la capacidad de alcanzar una amplia gama de fines malintencionados, algunos de los cuales pueden resultar en consecuencias m\u00e1s perjudiciales que simples <em>redirecciones.<\/em><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d2dcd62 elementor-grid-1 elementor-grid-tablet-2 elementor-grid-mobile-1 elementor-widget elementor-widget-loop-grid\" data-id=\"d2dcd62\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;template_id&quot;:&quot;30519&quot;,&quot;columns&quot;:1,&quot;_skin&quot;:&quot;post&quot;,&quot;columns_tablet&quot;:&quot;2&quot;,&quot;columns_mobile&quot;:&quot;1&quot;,&quot;edit_handle_selector&quot;:&quot;[data-elementor-type=\\&quot;loop-item\\&quot;]&quot;,&quot;row_gap&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]},&quot;row_gap_tablet&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]},&quot;row_gap_mobile&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]}}\" data-widget_type=\"loop-grid.post\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-loop-container elementor-grid\" role=\"list\">\n\t\t\t\t<div data-elementor-type=\"loop-item\" data-elementor-id=\"30519\" class=\"elementor elementor-30519 e-loop-item e-loop-item-33835 post-33835 post type-post status-publish format-standard has-post-thumbnail hentry category-noticias category-web category-wordpress\" data-elementor-post-type=\"elementor_library\" data-custom-edit-handle=\"1\">\n\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-98493d2 elementor-section-full_width elementor-section-height-default elementor-section-height-default\" data-id=\"98493d2\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-custom\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-ccee508\" data-id=\"ccee508\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-80149f2 elementor-widget elementor-widget-image\" data-id=\"80149f2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/quike.it\/es\/vulnerabilidad-en-plugin-wordpress-en-riesgo-50-000-sitios-web\/\" target=\"_blank\">\n\t\t\t\t\t\t\t<img decoding=\"async\" width=\"1280\" height=\"682\" src=\"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2022\/06\/wordpress-581849_1280.jpg\" class=\"attachment-full size-full wp-image-12638\" alt=\"\" srcset=\"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2022\/06\/wordpress-581849_1280.jpg 1280w, https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2022\/06\/wordpress-581849_1280-300x160.jpg 300w, https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2022\/06\/wordpress-581849_1280-1024x546.jpg 1024w, https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2022\/06\/wordpress-581849_1280-768x409.jpg 768w\" sizes=\"(max-width: 1280px) 100vw, 1280px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-2109b1e\" data-id=\"2109b1e\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-26a68f7 elementor-align-left elementor-widget__width-inherit elementor-widget elementor-widget-post-info\" data-id=\"26a68f7\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"categorias-post\" data-widget_type=\"post-info.default\">\n\t\t\t\t\t\t\t<ul class=\"elementor-inline-items elementor-icon-list-items elementor-post-info\">\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-repeater-item-dfd774d elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text elementor-post-info__item elementor-post-info__item--type-custom\">\n\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/quike.it\/es\/category\/general\/noticias\/\" rel=\"tag\">Noticias<\/a> <a href=\"https:\/\/quike.it\/es\/category\/web\/\" rel=\"tag\">WEB<\/a> <a href=\"https:\/\/quike.it\/es\/category\/web\/wordpress\/\" rel=\"tag\">WordPress<\/a>\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1ed9e84 elementor-widget elementor-widget-heading\" data-id=\"1ed9e84\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"top-post\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<div class=\"elementor-heading-title elementor-size-default\"><a href=\"https:\/\/quike.it\/es\/vulnerabilidad-en-plugin-wordpress-en-riesgo-50-000-sitios-web\/\" target=\"_blank\">Vulnerabilidad en Plugin de WordPress, en Riesgo 50.000 Sitios Web<\/a><\/div>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-714486b elementor-icon-list--layout-inline elementor-align-start elementor-hidden-tablet elementor-hidden-mobile elementor-widget__width-inherit elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"714486b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items elementor-inline-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/quike.it\/es\/vulnerabilidad-en-plugin-wordpress-en-riesgo-50-000-sitios-web\/\">\n\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-book-reader\" viewBox=\"0 0 512 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M352 96c0-53.02-42.98-96-96-96s-96 42.98-96 96 42.98 96 96 96 96-42.98 96-96zM233.59 241.1c-59.33-36.32-155.43-46.3-203.79-49.05C13.55 191.13 0 203.51 0 219.14v222.8c0 14.33 11.59 26.28 26.49 27.05 43.66 2.29 131.99 10.68 193.04 41.43 9.37 4.72 20.48-1.71 20.48-11.87V252.56c-.01-4.67-2.32-8.95-6.42-11.46zm248.61-49.05c-48.35 2.74-144.46 12.73-203.78 49.05-4.1 2.51-6.41 6.96-6.41 11.63v245.79c0 10.19 11.14 16.63 20.54 11.9 61.04-30.72 149.32-39.11 192.97-41.4 14.9-.78 26.49-12.73 26.49-27.06V219.14c-.01-15.63-13.56-28.01-29.81-27.09z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">110 lecturas<\/span>\n\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-comments\" viewBox=\"0 0 576 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 192c0-88.4-93.1-160-208-160S0 103.6 0 192c0 34.3 14.1 65.9 38 92-13.4 30.2-35.5 54.2-35.8 54.5-2.2 2.3-2.8 5.7-1.5 8.7S4.8 352 8 352c36.6 0 66.9-12.3 88.7-25 32.2 15.7 70.3 25 111.3 25 114.9 0 208-71.6 208-160zm122 220c23.9-26 38-57.7 38-92 0-66.9-53.5-124.2-129.3-148.1.9 6.6 1.3 13.3 1.3 20.1 0 105.9-107.7 192-240 192-10.8 0-21.3-.8-31.7-1.9C207.8 439.6 281.8 480 368 480c41 0 79.1-9.2 111.3-25 21.8 12.7 52.1 25 88.7 25 3.2 0 6.1-1.9 7.3-4.8 1.3-2.9.7-6.3-1.5-8.7-.3-.3-22.4-24.2-35.8-54.5z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\"><a href=\"https:\/\/quike.it\/es\/vulnerabilidad-en-plugin-wordpress-en-riesgo-50-000-sitios-web\/#respond\">sin comentarios<\/a><\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0a32de7 elementor-icon-list--layout-inline elementor-align-start elementor-widget__width-inherit elementor-hidden-desktop elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"0a32de7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items elementor-inline-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/quike.it\/es\/vulnerabilidad-en-plugin-wordpress-en-riesgo-50-000-sitios-web\/\">\n\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-book-reader\" viewBox=\"0 0 512 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M352 96c0-53.02-42.98-96-96-96s-96 42.98-96 96 42.98 96 96 96 96-42.98 96-96zM233.59 241.1c-59.33-36.32-155.43-46.3-203.79-49.05C13.55 191.13 0 203.51 0 219.14v222.8c0 14.33 11.59 26.28 26.49 27.05 43.66 2.29 131.99 10.68 193.04 41.43 9.37 4.72 20.48-1.71 20.48-11.87V252.56c-.01-4.67-2.32-8.95-6.42-11.46zm248.61-49.05c-48.35 2.74-144.46 12.73-203.78 49.05-4.1 2.51-6.41 6.96-6.41 11.63v245.79c0 10.19 11.14 16.63 20.54 11.9 61.04-30.72 149.32-39.11 192.97-41.4 14.9-.78 26.49-12.73 26.49-27.06V219.14c-.01-15.63-13.56-28.01-29.81-27.09z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">110 lecturas<\/span>\n\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-comments\" viewBox=\"0 0 576 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 192c0-88.4-93.1-160-208-160S0 103.6 0 192c0 34.3 14.1 65.9 38 92-13.4 30.2-35.5 54.2-35.8 54.5-2.2 2.3-2.8 5.7-1.5 8.7S4.8 352 8 352c36.6 0 66.9-12.3 88.7-25 32.2 15.7 70.3 25 111.3 25 114.9 0 208-71.6 208-160zm122 220c23.9-26 38-57.7 38-92 0-66.9-53.5-124.2-129.3-148.1.9 6.6 1.3 13.3 1.3 20.1 0 105.9-107.7 192-240 192-10.8 0-21.3-.8-31.7-1.9C207.8 439.6 281.8 480 368 480c41 0 79.1-9.2 111.3-25 21.8 12.7 52.1 25 88.7 25 3.2 0 6.1-1.9 7.3-4.8 1.3-2.9.7-6.3-1.5-8.7-.3-.3-22.4-24.2-35.8-54.5z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\"><a href=\"https:\/\/quike.it\/es\/vulnerabilidad-en-plugin-wordpress-en-riesgo-50-000-sitios-web\/#respond\">0<\/a><\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2caf5fb elementor-widget elementor-widget-heading\" data-id=\"2caf5fb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">C\u00f3mo defenderse<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a269f60 elementor-widget elementor-widget-text-editor\" data-id=\"a269f60\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Los ataques se originan en los dominios <em><strong>\u00abttincoming.traveltraffic[.]cc\u00bb<\/strong><\/em> y <em><strong>\u00abhost.cloudsonicwave[.]com\u00bb,<\/strong><\/em> recomend\u00e1ndose su bloqueo inmediato.<\/p><p>Para usuarios del <strong>plugin<\/strong> <strong>Popup Builder<\/strong>, es crucial actualizar a la versi\u00f3n m\u00e1s reciente, la <strong>4.2.7,<\/strong> que corrige la vulnerabilidad <strong>CVE-2023-6000<\/strong> y otros problemas de seguridad.<\/p><p><a href=\"https:\/\/wordpress.org\/plugins\/popup-builder\/advanced\/\" target=\"_blank\" rel=\"noopener\"><strong>Datos de WordPress indican que aproximadamente 80,000 sitios<\/strong><\/a> activos a\u00fan operan con la versi\u00f3n <strong>4.1<\/strong> de <strong>Popup Builder<\/strong> o anteriores, manteniendo una amplia exposici\u00f3n al riesgo de ataque.<\/p><p>Para remediar una infecci\u00f3n, es necesario eliminar las entradas maliciosas en las secciones personalizadas del <strong>Popup Builder<\/strong> y realizar un escaneo en busca de <a href=\"https:\/\/es.wikipedia.org\/wiki\/Puerta_trasera\" target=\"_blank\" rel=\"noopener\"><strong>puertas traseras<\/strong><\/a>, asegurando as\u00ed la prevenci\u00f3n contra futuras infecciones.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Los ciberdelincuentes est\u00e1n comprometiendo sitios web de WordPress al explotar una vulnerabilidad presente en versiones desactualizadas del plugin Popup Builder, logrando infectar a m\u00e1s de 3300 sitios WordPress con c\u00f3digo malicioso. La vulnerabilidad explotada en estos ataques, identificada como CVE-2023-6000, es una brecha de script entre sitios (XSS) que afecta a las versiones 4.2.3 y [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":35403,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[89,44,45],"tags":[],"class_list":["post-35922","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-seguridad","category-web","category-wordpress"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Hackers Infectan 3300 Sitios WordPress mediante Vulnerabilidad en Plugin<\/title>\n<meta name=\"description\" content=\"explotar una vulnerabilidad presente en versiones desactualizadas del plugin Popup Builder, logrando infectar a m\u00e1s de 3300 sitios WordPress.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/quike.it\/es\/hackers-infectan-3300-sitios-wordpress-mediante-vulnerabilidad-en-plugin\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Hackers Infectan 3300 Sitios WordPress mediante Vulnerabilidad en Plugin\" \/>\n<meta property=\"og:description\" content=\"explotar una vulnerabilidad presente en versiones desactualizadas del plugin Popup Builder, logrando infectar a m\u00e1s de 3300 sitios WordPress.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/quike.it\/es\/hackers-infectan-3300-sitios-wordpress-mediante-vulnerabilidad-en-plugin\/\" \/>\n<meta property=\"og:site_name\" content=\"El BLOG de Enrique V\u00e1squez B.\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/zeven.sa.1\" \/>\n<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/zeven.sa.1\" \/>\n<meta property=\"article:published_time\" content=\"2024-03-11T19:41:41+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-03-11T19:41:42+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/02\/WordPress_Alert.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1120\" \/>\n\t<meta property=\"og:image:height\" content=\"600\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Enrique V\u00e1squez B.\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@quike1974\" \/>\n<meta name=\"twitter:site\" content=\"@quike1974\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"Enrique V\u00e1squez B.\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/quike.it\\\/es\\\/hackers-infectan-3300-sitios-wordpress-mediante-vulnerabilidad-en-plugin\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/quike.it\\\/es\\\/hackers-infectan-3300-sitios-wordpress-mediante-vulnerabilidad-en-plugin\\\/\"},\"author\":{\"name\":\"Enrique V\u00e1squez B.\",\"@id\":\"https:\\\/\\\/quike.it\\\/es\\\/#\\\/schema\\\/person\\\/e53c62e8ab2e3f878e77d3a617483cc8\"},\"headline\":\"Hackers Infectan 3300 Sitios WordPress mediante Vulnerabilidad en Plugin\",\"datePublished\":\"2024-03-11T19:41:41+00:00\",\"dateModified\":\"2024-03-11T19:41:42+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/quike.it\\\/es\\\/hackers-infectan-3300-sitios-wordpress-mediante-vulnerabilidad-en-plugin\\\/\"},\"wordCount\":527,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/quike.it\\\/es\\\/#\\\/schema\\\/person\\\/e53c62e8ab2e3f878e77d3a617483cc8\"},\"image\":{\"@id\":\"https:\\\/\\\/quike.it\\\/es\\\/hackers-infectan-3300-sitios-wordpress-mediante-vulnerabilidad-en-plugin\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/quike.it\\\/es\\\/wp-content\\\/uploads\\\/sites\\\/3\\\/2024\\\/02\\\/WordPress_Alert.png\",\"articleSection\":[\"Seguridad\",\"WEB\",\"WordPress\"],\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/quike.it\\\/es\\\/hackers-infectan-3300-sitios-wordpress-mediante-vulnerabilidad-en-plugin\\\/#respond\"]}]},{\"@type\":[\"WebPage\",\"ItemPage\"],\"@id\":\"https:\\\/\\\/quike.it\\\/es\\\/hackers-infectan-3300-sitios-wordpress-mediante-vulnerabilidad-en-plugin\\\/\",\"url\":\"https:\\\/\\\/quike.it\\\/es\\\/hackers-infectan-3300-sitios-wordpress-mediante-vulnerabilidad-en-plugin\\\/\",\"name\":\"Hackers Infectan 3300 Sitios WordPress mediante Vulnerabilidad en Plugin\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/quike.it\\\/es\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/quike.it\\\/es\\\/hackers-infectan-3300-sitios-wordpress-mediante-vulnerabilidad-en-plugin\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/quike.it\\\/es\\\/hackers-infectan-3300-sitios-wordpress-mediante-vulnerabilidad-en-plugin\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/quike.it\\\/es\\\/wp-content\\\/uploads\\\/sites\\\/3\\\/2024\\\/02\\\/WordPress_Alert.png\",\"datePublished\":\"2024-03-11T19:41:41+00:00\",\"dateModified\":\"2024-03-11T19:41:42+00:00\",\"description\":\"explotar una vulnerabilidad presente en versiones desactualizadas del plugin Popup Builder, logrando infectar a m\u00e1s de 3300 sitios WordPress.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/quike.it\\\/es\\\/hackers-infectan-3300-sitios-wordpress-mediante-vulnerabilidad-en-plugin\\\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/quike.it\\\/es\\\/hackers-infectan-3300-sitios-wordpress-mediante-vulnerabilidad-en-plugin\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/quike.it\\\/es\\\/hackers-infectan-3300-sitios-wordpress-mediante-vulnerabilidad-en-plugin\\\/#primaryimage\",\"url\":\"https:\\\/\\\/quike.it\\\/es\\\/wp-content\\\/uploads\\\/sites\\\/3\\\/2024\\\/02\\\/WordPress_Alert.png\",\"contentUrl\":\"https:\\\/\\\/quike.it\\\/es\\\/wp-content\\\/uploads\\\/sites\\\/3\\\/2024\\\/02\\\/WordPress_Alert.png\",\"width\":1120,\"height\":600},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/quike.it\\\/es\\\/hackers-infectan-3300-sitios-wordpress-mediante-vulnerabilidad-en-plugin\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Inicio\",\"item\":\"https:\\\/\\\/quike.it\\\/es\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"WEB\",\"item\":\"https:\\\/\\\/quike.it\\\/es\\\/category\\\/web\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"WordPress\",\"item\":\"https:\\\/\\\/quike.it\\\/es\\\/category\\\/web\\\/wordpress\\\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Hackers Infectan 3300 Sitios WordPress mediante Vulnerabilidad en Plugin\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/quike.it\\\/es\\\/#website\",\"url\":\"https:\\\/\\\/quike.it\\\/es\\\/\",\"name\":\"El BLOG de Enrique V\u00e1squez B.\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/quike.it\\\/es\\\/#\\\/schema\\\/person\\\/e53c62e8ab2e3f878e77d3a617483cc8\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/quike.it\\\/es\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/quike.it\\\/es\\\/#\\\/schema\\\/person\\\/e53c62e8ab2e3f878e77d3a617483cc8\",\"name\":\"Enrique V\u00e1squez B.\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/quike.it\\\/es\\\/wp-content\\\/uploads\\\/sites\\\/3\\\/2021\\\/02\\\/me.png\",\"url\":\"https:\\\/\\\/quike.it\\\/es\\\/wp-content\\\/uploads\\\/sites\\\/3\\\/2021\\\/02\\\/me.png\",\"contentUrl\":\"https:\\\/\\\/quike.it\\\/es\\\/wp-content\\\/uploads\\\/sites\\\/3\\\/2021\\\/02\\\/me.png\",\"width\":512,\"height\":512,\"caption\":\"Enrique V\u00e1squez B.\"},\"logo\":{\"@id\":\"https:\\\/\\\/quike.it\\\/es\\\/wp-content\\\/uploads\\\/sites\\\/3\\\/2021\\\/02\\\/me.png\"},\"description\":\"Programador desde 1988, con pasi\u00f3n por escribir art\u00edculos de todo tipo. Actualmente desarrolla para ZEVEN S.A. el Sistema de Facturaci\u00f3n Electr\u00f3nica. Ecuatoriano de nacimiento e italiano de residencia, escribe desde G\u00e9nova, ciudad que ha llegado a amar tanto como su natal Guayaquil. Padre de dos hijos que son su orgullo y esposo de una mujer excepcional.\",\"sameAs\":[\"https:\\\/\\\/quike.it\",\"https:\\\/\\\/www.facebook.com\\\/zeven.sa.1\",\"https:\\\/\\\/www.instagram.com\\\/quikev1974\",\"https:\\\/\\\/www.linkedin.com\\\/in\\\/carlos-enrique-vasquez-bautista-074893b\\\/\",\"https:\\\/\\\/x.com\\\/quike1974\"],\"url\":\"https:\\\/\\\/quike.it\\\/es\\\/author\\\/quike\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Hackers Infectan 3300 Sitios WordPress mediante Vulnerabilidad en Plugin","description":"explotar una vulnerabilidad presente en versiones desactualizadas del plugin Popup Builder, logrando infectar a m\u00e1s de 3300 sitios WordPress.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/quike.it\/es\/hackers-infectan-3300-sitios-wordpress-mediante-vulnerabilidad-en-plugin\/","og_locale":"es_ES","og_type":"article","og_title":"Hackers Infectan 3300 Sitios WordPress mediante Vulnerabilidad en Plugin","og_description":"explotar una vulnerabilidad presente en versiones desactualizadas del plugin Popup Builder, logrando infectar a m\u00e1s de 3300 sitios WordPress.","og_url":"https:\/\/quike.it\/es\/hackers-infectan-3300-sitios-wordpress-mediante-vulnerabilidad-en-plugin\/","og_site_name":"El BLOG de Enrique V\u00e1squez B.","article_publisher":"https:\/\/www.facebook.com\/zeven.sa.1","article_author":"https:\/\/www.facebook.com\/zeven.sa.1","article_published_time":"2024-03-11T19:41:41+00:00","article_modified_time":"2024-03-11T19:41:42+00:00","og_image":[{"width":1120,"height":600,"url":"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/02\/WordPress_Alert.png","type":"image\/png"}],"author":"Enrique V\u00e1squez B.","twitter_card":"summary_large_image","twitter_creator":"@quike1974","twitter_site":"@quike1974","twitter_misc":{"Escrito por":"Enrique V\u00e1squez B.","Tiempo de lectura":"3 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/quike.it\/es\/hackers-infectan-3300-sitios-wordpress-mediante-vulnerabilidad-en-plugin\/#article","isPartOf":{"@id":"https:\/\/quike.it\/es\/hackers-infectan-3300-sitios-wordpress-mediante-vulnerabilidad-en-plugin\/"},"author":{"name":"Enrique V\u00e1squez B.","@id":"https:\/\/quike.it\/es\/#\/schema\/person\/e53c62e8ab2e3f878e77d3a617483cc8"},"headline":"Hackers Infectan 3300 Sitios WordPress mediante Vulnerabilidad en Plugin","datePublished":"2024-03-11T19:41:41+00:00","dateModified":"2024-03-11T19:41:42+00:00","mainEntityOfPage":{"@id":"https:\/\/quike.it\/es\/hackers-infectan-3300-sitios-wordpress-mediante-vulnerabilidad-en-plugin\/"},"wordCount":527,"commentCount":0,"publisher":{"@id":"https:\/\/quike.it\/es\/#\/schema\/person\/e53c62e8ab2e3f878e77d3a617483cc8"},"image":{"@id":"https:\/\/quike.it\/es\/hackers-infectan-3300-sitios-wordpress-mediante-vulnerabilidad-en-plugin\/#primaryimage"},"thumbnailUrl":"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/02\/WordPress_Alert.png","articleSection":["Seguridad","WEB","WordPress"],"inLanguage":"es","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/quike.it\/es\/hackers-infectan-3300-sitios-wordpress-mediante-vulnerabilidad-en-plugin\/#respond"]}]},{"@type":["WebPage","ItemPage"],"@id":"https:\/\/quike.it\/es\/hackers-infectan-3300-sitios-wordpress-mediante-vulnerabilidad-en-plugin\/","url":"https:\/\/quike.it\/es\/hackers-infectan-3300-sitios-wordpress-mediante-vulnerabilidad-en-plugin\/","name":"Hackers Infectan 3300 Sitios WordPress mediante Vulnerabilidad en Plugin","isPartOf":{"@id":"https:\/\/quike.it\/es\/#website"},"primaryImageOfPage":{"@id":"https:\/\/quike.it\/es\/hackers-infectan-3300-sitios-wordpress-mediante-vulnerabilidad-en-plugin\/#primaryimage"},"image":{"@id":"https:\/\/quike.it\/es\/hackers-infectan-3300-sitios-wordpress-mediante-vulnerabilidad-en-plugin\/#primaryimage"},"thumbnailUrl":"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/02\/WordPress_Alert.png","datePublished":"2024-03-11T19:41:41+00:00","dateModified":"2024-03-11T19:41:42+00:00","description":"explotar una vulnerabilidad presente en versiones desactualizadas del plugin Popup Builder, logrando infectar a m\u00e1s de 3300 sitios WordPress.","breadcrumb":{"@id":"https:\/\/quike.it\/es\/hackers-infectan-3300-sitios-wordpress-mediante-vulnerabilidad-en-plugin\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/quike.it\/es\/hackers-infectan-3300-sitios-wordpress-mediante-vulnerabilidad-en-plugin\/"]}]},{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/quike.it\/es\/hackers-infectan-3300-sitios-wordpress-mediante-vulnerabilidad-en-plugin\/#primaryimage","url":"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/02\/WordPress_Alert.png","contentUrl":"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2024\/02\/WordPress_Alert.png","width":1120,"height":600},{"@type":"BreadcrumbList","@id":"https:\/\/quike.it\/es\/hackers-infectan-3300-sitios-wordpress-mediante-vulnerabilidad-en-plugin\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Inicio","item":"https:\/\/quike.it\/es\/"},{"@type":"ListItem","position":2,"name":"WEB","item":"https:\/\/quike.it\/es\/category\/web\/"},{"@type":"ListItem","position":3,"name":"WordPress","item":"https:\/\/quike.it\/es\/category\/web\/wordpress\/"},{"@type":"ListItem","position":4,"name":"Hackers Infectan 3300 Sitios WordPress mediante Vulnerabilidad en Plugin"}]},{"@type":"WebSite","@id":"https:\/\/quike.it\/es\/#website","url":"https:\/\/quike.it\/es\/","name":"El BLOG de Enrique V\u00e1squez B.","description":"","publisher":{"@id":"https:\/\/quike.it\/es\/#\/schema\/person\/e53c62e8ab2e3f878e77d3a617483cc8"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/quike.it\/es\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":["Person","Organization"],"@id":"https:\/\/quike.it\/es\/#\/schema\/person\/e53c62e8ab2e3f878e77d3a617483cc8","name":"Enrique V\u00e1squez B.","image":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2021\/02\/me.png","url":"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2021\/02\/me.png","contentUrl":"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2021\/02\/me.png","width":512,"height":512,"caption":"Enrique V\u00e1squez B."},"logo":{"@id":"https:\/\/quike.it\/es\/wp-content\/uploads\/sites\/3\/2021\/02\/me.png"},"description":"Programador desde 1988, con pasi\u00f3n por escribir art\u00edculos de todo tipo. Actualmente desarrolla para ZEVEN S.A. el Sistema de Facturaci\u00f3n Electr\u00f3nica. Ecuatoriano de nacimiento e italiano de residencia, escribe desde G\u00e9nova, ciudad que ha llegado a amar tanto como su natal Guayaquil. Padre de dos hijos que son su orgullo y esposo de una mujer excepcional.","sameAs":["https:\/\/quike.it","https:\/\/www.facebook.com\/zeven.sa.1","https:\/\/www.instagram.com\/quikev1974","https:\/\/www.linkedin.com\/in\/carlos-enrique-vasquez-bautista-074893b\/","https:\/\/x.com\/quike1974"],"url":"https:\/\/quike.it\/es\/author\/quike\/"}]}},"_links":{"self":[{"href":"https:\/\/quike.it\/es\/wp-json\/wp\/v2\/posts\/35922","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/quike.it\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/quike.it\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/quike.it\/es\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/quike.it\/es\/wp-json\/wp\/v2\/comments?post=35922"}],"version-history":[{"count":8,"href":"https:\/\/quike.it\/es\/wp-json\/wp\/v2\/posts\/35922\/revisions"}],"predecessor-version":[{"id":35932,"href":"https:\/\/quike.it\/es\/wp-json\/wp\/v2\/posts\/35922\/revisions\/35932"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/quike.it\/es\/wp-json\/wp\/v2\/media\/35403"}],"wp:attachment":[{"href":"https:\/\/quike.it\/es\/wp-json\/wp\/v2\/media?parent=35922"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/quike.it\/es\/wp-json\/wp\/v2\/categories?post=35922"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/quike.it\/es\/wp-json\/wp\/v2\/tags?post=35922"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}