Vulnerability in WordPress plug-in allows hackers to clean up up to 200000 websites, and wordpress attacks

Message from webmaster's home (ChinaZ. com) on February 18: Users of WordPress sites that use the business themes provided by ThemeGrill have noticed. We suggest that you update a plug-in installed with these themes as soon as possible to fix a key vulnerability that allows attackers to clear websites.

The vulnerability lies in the ThemeGrill Demo Importer, which comes with the sales business WordPress Theme Themes sold by ThemeGrill, a web development company.

This plug-in is installed on more than 200000 websites, allowing website owners to import demo content into their ThemeGrill theme, so that they can build their own websites based on examples.

However, in a report released yesterday, WebARX, a WordPress security company, said that the old version of ThemeGrill Demo Importer was vulnerable to remote attacks by unauthenticated attackers. Remote hackers can send specially crafted payloads to vulnerable websites and trigger the internal functions of plug-ins.

The vulnerable function resets the content of the site to zero, effectively clearing the content activated by the ThemeGrill theme in all WordPress sites, and installing vulnerable plug-ins.

In addition, if the site's database contains a user named "admin", the attacker will be granted access to the user, who has full administrator privileges of the site.

WebARX indicates that this vulnerability affects all 1.3 4 to 1.6 1 version of the ThemeGrill Demo Importer plug-in. ThemeGrill, the plug-in developer, fixed this vulnerability and released 1.6 Version 2. （zdnet）