{"id":659,"date":"2023-04-22T15:36:45","date_gmt":"2023-04-22T18:36:45","guid":{"rendered":"https:\/\/techsecurity.com.br\/?p=659"},"modified":"2023-04-22T15:36:45","modified_gmt":"2023-04-22T18:36:45","slug":"plugin-descontinuado-e-usado-para-invadir-sites-wordpress","status":"publish","type":"post","link":"https:\/\/techsecurity.com.br\/2023\/04\/plugin-descontinuado-e-usado-para-invadir-sites-wordpress\/","title":{"rendered":"Plugin descontinuado \u00e9 usado para invadir sites WordPress"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Plugin Eval PHP para WordPress \u00e9 um exemplo recente de como softwares desatualizados podem ser perigosos. A orienta\u00e7\u00e3o de que devemos tomar cuidado com softwares antigos, descontinuados ou desatualizados n\u00e3o \u00e9 exagerada. Prova recente disso vem do <strong>Eval PHP<\/strong>. Esse \u00e9 nome de um plugin para WordPress que n\u00e3o \u00e9 atualizado desde 2012 e, agora, vem sendo usado por cibercriminosos para invadir sites wordpress.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">O Eval PHP permite que o administrador de um site em WordPress adicione c\u00f3digos PHP diretamente em p\u00e1ginas ou postagens. O recurso pode ser usado para testar fun\u00e7\u00f5es ou oferecer funcionalidades aos visitantes do site.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Mas a empresa de seguran\u00e7a digital Sucuri alertou que, nas \u00faltimas semanas, v\u00e1rios sites estavam sendo infectados com um backdoor cujo c\u00f3digo tem rela\u00e7\u00e3o com o plugin. A Sucuri constatou que, no final de mar\u00e7o, o Eval PHP chegou a um pico di\u00e1rio de 7 mil downloads. Antes disso, o plugin raramente registrava um \u00fanico download por dia. A companhia estima que, desde ent\u00e3o, mais de 100 mil downloads j\u00e1 foram realizados.<\/p>\n\n\n\n<p class=\"has-large-font-size wp-block-paragraph\">Comprometimento do site<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">O n\u00famero de downloads do plugin disparou nos \u00faltimos dias porque ele vem sem usado pelos invasores, n\u00e3o por administradores de sites. Tudo come\u00e7a quando o invasor insere um c\u00f3digo malicioso na tabela &#8220;wp_posts&#8221; do banco de dados do WordPress. Para isso, ele usa uma conta de administrador comprometida, que tamb\u00e9m serve para que o plugin seja instalado. Por meio do plugin, o c\u00f3digo \u00e9 injetado em p\u00e1ginas ou postagens do WordPress. Basta ent\u00e3o ao invasor acessar esses links para o c\u00f3digo ser executado. Quando isso ocorre, o backdoor \u00e9 inserido na raiz do site. V\u00e1rias a\u00e7\u00f5es maliciosas podem ser executadas a partir da\u00ed, como dissemina\u00e7\u00e3o de malware, captura de dados e ataques a outros sites. Para evitar que as p\u00e1ginas e postagens comprometidas sejam descobertas, os invasores as salvam como rascunho. Assim, os links n\u00e3o aparecem na rela\u00e7\u00e3o de conte\u00fado p\u00fablico do site.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">O que torna todo esse esquema diferente de outros tipos de invas\u00f5es \u00e9 que, como o c\u00f3digo malicioso \u00e9 executado gra\u00e7as ao Eval PHP, \u00e9 mais dif\u00edcil o seu rastreamento por mecanismos de seguran\u00e7a. Para piorar a situa\u00e7\u00e3o, se o backdoor for removido, ele poder\u00e1 ser inserido no site novamente ap\u00f3s o simples acesso a uma das p\u00e1ginas ou postagens comprometidas.<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"774\" height=\"557\" src=\"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/04\/image-4.png\" alt=\"\" class=\"wp-image-660\" srcset=\"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/04\/image-4.png 774w, https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/04\/image-4-300x216.png 300w, https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/04\/image-4-768x553.png 768w\" sizes=\"auto, (max-width: 774px) 100vw, 774px\" \/><\/figure>\n\n\n\n<p class=\"has-large-font-size wp-block-paragraph\">Como se proteger <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Evitar o uso de softwares (no caso, plugins) desatualizados \u00e9 uma das formas de se prevenir contra invas\u00f5es em sites WordPress. Tamb\u00e9m \u00e9 recomendado sempre atualizar themas, e qualquer outro componente associado a aplica\u00e7\u00e3o web. Emilio Simoni, CEO da AHT Security, empresa que fornece o plugin de prote\u00e7\u00e3o para WordPress <a href=\"https:\/\/ahtsecurity.com\/app\/wordpress.php\" target=\"_blank\" rel=\"noreferrer noopener\">WP Anti-Hacker<\/a>, comenta: <em>&#8220;Muitas vezes o site \u00e9 seguro, mas um plugin, thema ou servi\u00e7o desatualizado \u00e9 suficiente para ser uma porta de entrada para uma pessoa mal intencionada, por isso a import\u00e2ncia de todos os componentes estarem sempre atualizados. Em uma aplica\u00e7\u00e3o de larga escala \u00e9 um desafio manter todo o ecossistema de componentes atualizados, por isso recomendamos ferramentas que d\u00e3o apoio ao administrador como nossos plugins de prote\u00e7\u00e3o&#8221;<\/em>. <\/p>\n","protected":false},"excerpt":{"rendered":"<p>Plugin descontinuado \u00e9 usado para invadir sites WordPress<\/p>\n","protected":false},"author":2,"featured_media":661,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[19],"tags":[68],"class_list":["post-659","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-informativo","tag-wordpress"],"yoast_head":"<title>Plugin descontinuado \u00e9 usado para invadir sites WordPress - Tech Security<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/techsecurity.com.br\/2023\/04\/plugin-descontinuado-e-usado-para-invadir-sites-wordpress\/\" \/>\n<meta property=\"og:locale\" content=\"pt_BR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Plugin descontinuado \u00e9 usado para invadir sites WordPress - Tech Security\" \/>\n<meta property=\"og:description\" content=\"Plugin descontinuado \u00e9 usado para invadir sites WordPress\" \/>\n<meta property=\"og:url\" content=\"https:\/\/techsecurity.com.br\/2023\/04\/plugin-descontinuado-e-usado-para-invadir-sites-wordpress\/\" \/>\n<meta property=\"og:site_name\" content=\"Tech Security\" \/>\n<meta property=\"article:published_time\" content=\"2023-04-22T18:36:45+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/04\/2023-04-22-evalphp1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"572\" \/>\n\t<meta property=\"og:image:height\" content=\"390\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"redator\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"redator\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. tempo de leitura\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/04\\\/plugin-descontinuado-e-usado-para-invadir-sites-wordpress\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/04\\\/plugin-descontinuado-e-usado-para-invadir-sites-wordpress\\\/\"},\"author\":{\"name\":\"redator\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#\\\/schema\\\/person\\\/cbf56a9c02423f4f6f5bbfad3e3f95f6\"},\"headline\":\"Plugin descontinuado \u00e9 usado para invadir sites WordPress\",\"datePublished\":\"2023-04-22T18:36:45+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/04\\\/plugin-descontinuado-e-usado-para-invadir-sites-wordpress\\\/\"},\"wordCount\":540,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/04\\\/plugin-descontinuado-e-usado-para-invadir-sites-wordpress\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/04\\\/2023-04-22-evalphp1.jpg\",\"keywords\":[\"wordpress\"],\"articleSection\":[\"Informativo\"],\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/04\\\/plugin-descontinuado-e-usado-para-invadir-sites-wordpress\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/04\\\/plugin-descontinuado-e-usado-para-invadir-sites-wordpress\\\/\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/04\\\/plugin-descontinuado-e-usado-para-invadir-sites-wordpress\\\/\",\"name\":\"Plugin descontinuado \u00e9 usado para invadir sites WordPress - Tech Security\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/04\\\/plugin-descontinuado-e-usado-para-invadir-sites-wordpress\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/04\\\/plugin-descontinuado-e-usado-para-invadir-sites-wordpress\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/04\\\/2023-04-22-evalphp1.jpg\",\"datePublished\":\"2023-04-22T18:36:45+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/04\\\/plugin-descontinuado-e-usado-para-invadir-sites-wordpress\\\/#breadcrumb\"},\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/04\\\/plugin-descontinuado-e-usado-para-invadir-sites-wordpress\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/04\\\/plugin-descontinuado-e-usado-para-invadir-sites-wordpress\\\/#primaryimage\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/04\\\/2023-04-22-evalphp1.jpg\",\"contentUrl\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/04\\\/2023-04-22-evalphp1.jpg\",\"width\":572,\"height\":390},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/04\\\/plugin-descontinuado-e-usado-para-invadir-sites-wordpress\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"In\u00edcio\",\"item\":\"https:\\\/\\\/techsecurity.com.br\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Plugin descontinuado \u00e9 usado para invadir sites WordPress\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#website\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/\",\"name\":\"Tech Security\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/techsecurity.com.br\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pt-BR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#organization\",\"name\":\"Tech Security\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/01\\\/Captura-de-tela-2023-01-26-092032-e1674773223849.png\",\"contentUrl\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/01\\\/Captura-de-tela-2023-01-26-092032-e1674773223849.png\",\"width\":100,\"height\":89,\"caption\":\"Tech Security\"},\"image\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#\\\/schema\\\/person\\\/cbf56a9c02423f4f6f5bbfad3e3f95f6\",\"name\":\"redator\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g\",\"caption\":\"redator\"},\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/author\\\/redator\\\/\"}]}<\/script>","yoast_head_json":{"title":"Plugin descontinuado \u00e9 usado para invadir sites WordPress - Tech Security","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/techsecurity.com.br\/2023\/04\/plugin-descontinuado-e-usado-para-invadir-sites-wordpress\/","og_locale":"pt_BR","og_type":"article","og_title":"Plugin descontinuado \u00e9 usado para invadir sites WordPress - Tech Security","og_description":"Plugin descontinuado \u00e9 usado para invadir sites WordPress","og_url":"https:\/\/techsecurity.com.br\/2023\/04\/plugin-descontinuado-e-usado-para-invadir-sites-wordpress\/","og_site_name":"Tech Security","article_published_time":"2023-04-22T18:36:45+00:00","og_image":[{"width":572,"height":390,"url":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/04\/2023-04-22-evalphp1.jpg","type":"image\/jpeg"}],"author":"redator","twitter_card":"summary_large_image","twitter_misc":{"Escrito por":"redator","Est. tempo de leitura":"3 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/techsecurity.com.br\/2023\/04\/plugin-descontinuado-e-usado-para-invadir-sites-wordpress\/#article","isPartOf":{"@id":"https:\/\/techsecurity.com.br\/2023\/04\/plugin-descontinuado-e-usado-para-invadir-sites-wordpress\/"},"author":{"name":"redator","@id":"https:\/\/techsecurity.com.br\/#\/schema\/person\/cbf56a9c02423f4f6f5bbfad3e3f95f6"},"headline":"Plugin descontinuado \u00e9 usado para invadir sites WordPress","datePublished":"2023-04-22T18:36:45+00:00","mainEntityOfPage":{"@id":"https:\/\/techsecurity.com.br\/2023\/04\/plugin-descontinuado-e-usado-para-invadir-sites-wordpress\/"},"wordCount":540,"commentCount":0,"publisher":{"@id":"https:\/\/techsecurity.com.br\/#organization"},"image":{"@id":"https:\/\/techsecurity.com.br\/2023\/04\/plugin-descontinuado-e-usado-para-invadir-sites-wordpress\/#primaryimage"},"thumbnailUrl":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/04\/2023-04-22-evalphp1.jpg","keywords":["wordpress"],"articleSection":["Informativo"],"inLanguage":"pt-BR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/techsecurity.com.br\/2023\/04\/plugin-descontinuado-e-usado-para-invadir-sites-wordpress\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/techsecurity.com.br\/2023\/04\/plugin-descontinuado-e-usado-para-invadir-sites-wordpress\/","url":"https:\/\/techsecurity.com.br\/2023\/04\/plugin-descontinuado-e-usado-para-invadir-sites-wordpress\/","name":"Plugin descontinuado \u00e9 usado para invadir sites WordPress - Tech Security","isPartOf":{"@id":"https:\/\/techsecurity.com.br\/#website"},"primaryImageOfPage":{"@id":"https:\/\/techsecurity.com.br\/2023\/04\/plugin-descontinuado-e-usado-para-invadir-sites-wordpress\/#primaryimage"},"image":{"@id":"https:\/\/techsecurity.com.br\/2023\/04\/plugin-descontinuado-e-usado-para-invadir-sites-wordpress\/#primaryimage"},"thumbnailUrl":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/04\/2023-04-22-evalphp1.jpg","datePublished":"2023-04-22T18:36:45+00:00","breadcrumb":{"@id":"https:\/\/techsecurity.com.br\/2023\/04\/plugin-descontinuado-e-usado-para-invadir-sites-wordpress\/#breadcrumb"},"inLanguage":"pt-BR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/techsecurity.com.br\/2023\/04\/plugin-descontinuado-e-usado-para-invadir-sites-wordpress\/"]}]},{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/techsecurity.com.br\/2023\/04\/plugin-descontinuado-e-usado-para-invadir-sites-wordpress\/#primaryimage","url":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/04\/2023-04-22-evalphp1.jpg","contentUrl":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/04\/2023-04-22-evalphp1.jpg","width":572,"height":390},{"@type":"BreadcrumbList","@id":"https:\/\/techsecurity.com.br\/2023\/04\/plugin-descontinuado-e-usado-para-invadir-sites-wordpress\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"In\u00edcio","item":"https:\/\/techsecurity.com.br\/"},{"@type":"ListItem","position":2,"name":"Plugin descontinuado \u00e9 usado para invadir sites WordPress"}]},{"@type":"WebSite","@id":"https:\/\/techsecurity.com.br\/#website","url":"https:\/\/techsecurity.com.br\/","name":"Tech Security","description":"","publisher":{"@id":"https:\/\/techsecurity.com.br\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/techsecurity.com.br\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pt-BR"},{"@type":"Organization","@id":"https:\/\/techsecurity.com.br\/#organization","name":"Tech Security","url":"https:\/\/techsecurity.com.br\/","logo":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/techsecurity.com.br\/#\/schema\/logo\/image\/","url":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/01\/Captura-de-tela-2023-01-26-092032-e1674773223849.png","contentUrl":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/01\/Captura-de-tela-2023-01-26-092032-e1674773223849.png","width":100,"height":89,"caption":"Tech Security"},"image":{"@id":"https:\/\/techsecurity.com.br\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/techsecurity.com.br\/#\/schema\/person\/cbf56a9c02423f4f6f5bbfad3e3f95f6","name":"redator","image":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/secure.gravatar.com\/avatar\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g","caption":"redator"},"url":"https:\/\/techsecurity.com.br\/author\/redator\/"}]}},"wps_subtitle":"","_links":{"self":[{"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/posts\/659","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/comments?post=659"}],"version-history":[{"count":1,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/posts\/659\/revisions"}],"predecessor-version":[{"id":662,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/posts\/659\/revisions\/662"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/media\/661"}],"wp:attachment":[{"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/media?parent=659"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/categories?post=659"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/tags?post=659"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}