---
id: 7409
title: "Phát hiện lỗ hổng nghiêm trọng trong plugin WordPress của 400.000 website"
source_domain: blog.viettelcybersecurity.com
source_url: "https://blog.viettelcybersecurity.com/phat-hien-lo-hong-nghiem-trong-trong-plugin-wordpress-cua-400-000-website/"
published_at: "2020-01-26T08:20:00Z"
tags: ["authentication-bypass", "wordpress", "vulnerability", "plugin", "patch", "cms"]
phying_url: "https://phying.com/item/7409"
lang: en
---

# Phát hiện lỗ hổng nghiêm trọng trong plugin WordPress của 400.000 website

## Summary

Authentication bypass flaws in InfiniteWP Client, WP Time Capsule and WP Database Reset plugins exposed 400,000 WordPress sites to unauthenticated admin logins; patches were released.

## Intelligence Metadata

- **Sources:** blog.viettelcybersecurity.com
- **Published:** 2020-01-26T08:20:00Z
- **Original:** https://blog.viettelcybersecurity.com/phat-hien-lo-hong-nghiem-trong-trong-plugin-wordpress-cua-400-000-website/
- **Phying News:** https://phying.com/item/7409