{"id":1253,"date":"2014-11-25T06:42:17","date_gmt":"2014-11-25T06:42:17","guid":{"rendered":"http:\/\/www.webhozz.com\/blog\/?p=1253"},"modified":"2014-11-25T06:42:36","modified_gmt":"2014-11-25T06:42:36","slug":"plugin-wordpress-yang-mengandung-lubang-keamanan-2","status":"publish","type":"post","link":"https:\/\/www.webhozz.com\/blog\/plugin-wordpress-yang-mengandung-lubang-keamanan-2\/","title":{"rendered":"Plugin WordPress yang Mengandung Lubang Keamanan"},"content":{"rendered":"<p><a href=\"http:\/\/www.webhozz.com\/blog\/wp-content\/uploads\/2013\/10\/kunci.jpg\"><img fetchpriority=\"high\" decoding=\"async\" class=\"alignnone size-full wp-image-308\" src=\"http:\/\/www.webhozz.com\/blog\/wp-content\/uploads\/2013\/10\/kunci.jpg\" alt=\"kunci\" width=\"600\" height=\"361\" srcset=\"https:\/\/www.webhozz.com\/blog\/wp-content\/uploads\/2013\/10\/kunci.jpg 600w, https:\/\/www.webhozz.com\/blog\/wp-content\/uploads\/2013\/10\/kunci-300x180.jpg 300w\" sizes=\"(max-width: 600px) 100vw, 600px\" \/><\/a><\/p>\n<p><a href=\"http:\/\/wordpress.org\/\" target=\"_blank\" rel=\"external nofollow\">WordPress<\/a> yang baru saja merayakan ulang tahunnya yang ke-10 pada tanggal 27 Mei 2013 yang lalu ternyata masih tetap menjadi Content-Management-System (CMS) tervaforit di seluruh dunia seperti yang dilansir dari builtwith.com. Sehingga banyak cracker yang berusaha membobol sistem keamanan WordPress. Berikut ini beberapa plugin WordPress yang teridentifikasi mengandung lubang keamanan yang dapat dimanfaatkan orang lain untuk menyusupkan file ke blog kita:<!--more--><br \/>\n<strong>Metode XSS<br \/>\n<\/strong><\/p>\n<ul>\n<li>WordPress DX-Contribute Plugin 1.1.0 \u2013 XSS<\/li>\n<li>Post-views plugin 2.6.1. \u2013 XSS<\/li>\n<li>WP e-Commerce 1.1.1 \u2013 XSS<\/li>\n<li>WordPress WooCommerce Predictive Search Plugin 1.0.6. \u2013 XSS<\/li>\n<li>Video Lead Form 0.5 \u2013 XSS<\/li>\n<li>Pretty Link Lite Plugin 1.6.0 \u2013 XSS<\/li>\n<li>WP125 plugin 1.4.5. XSS<\/li>\n<li>Ultimate TinyMCE plugin 3.6. \u2013 XSS<\/li>\n<li>Wysija Newsletters Plugin 2.1.7. \u2013 XSS<\/li>\n<li>WordPress Carousel Slideshow 3.10 \u2013 XSS<\/li>\n<li>BuddyStream plugin 2.6.2 \u2013 XSS<\/li>\n<li>NextGEN Gallery 1.9.7 \u2013 XSS<\/li>\n<li>Amazon Associate plugin 2.0 \u2013 XSS<\/li>\n<\/ul>\n<p><strong>SQL Injection<\/strong><\/p>\n<ul>\n<li>Hitasoft FLV Player Plugin 1.1 SQL Injection<\/li>\n<li>AJAX Post Search Plugin 1.1 \u2013 SQL Injection<\/li>\n<\/ul>\n<p><strong>Lainnya<br \/>\n<\/strong><\/p>\n<ul>\n<li>Advanced Custom Fields Plugin 3.5.2. \u2013 Arbitrary file inclusion<\/li>\n<li>vTiger CRM Lead Capture 1.1.0. \u2013 unspecified errors<\/li>\n<li>WP-Filebase Plugin 0.2.9.24. \u2013 unspecified errors<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>WordPress yang baru saja merayakan ulang tahunnya yang ke-10 pada tanggal 27 Mei 2013 yang lalu ternyata masih tetap menjadi Content-Management-System (CMS) tervaforit di seluruh<\/p>\n","protected":false},"author":9,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[28,27,64,62,371,415,63,414],"class_list":["post-1253","post","type-post","status-publish","format-standard","hentry","category-belajar-wordpress","tag-belajar-wordpress-2","tag-kursus-wordpress","tag-lubang-keamanan","tag-plugin-wordpress","tag-plugin-wordpress-yang-mengandung-lubang-keamanan","tag-webworpress-plugin","tag-wordpress","tag-wordpress-plugin-untuk-keamanan"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.9 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Plugin WordPress yang Mengandung Lubang Keamanan - WebHozz Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.webhozz.com\/blog\/plugin-wordpress-yang-mengandung-lubang-keamanan-2\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Plugin WordPress yang Mengandung Lubang Keamanan - WebHozz Blog\" \/>\n<meta property=\"og:description\" content=\"WordPress yang baru saja merayakan ulang tahunnya yang ke-10 pada tanggal 27 Mei 2013 yang lalu ternyata masih tetap menjadi Content-Management-System (CMS) tervaforit di seluruh\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.webhozz.com\/blog\/plugin-wordpress-yang-mengandung-lubang-keamanan-2\/\" \/>\n<meta property=\"og:site_name\" content=\"WebHozz Blog\" \/>\n<meta property=\"article:published_time\" content=\"2014-11-25T06:42:17+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2014-11-25T06:42:36+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.webhozz.com\/blog\/wp-content\/uploads\/2013\/10\/kunci.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"600\" \/>\n\t<meta property=\"og:image:height\" content=\"361\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.webhozz.com\\\/blog\\\/plugin-wordpress-yang-mengandung-lubang-keamanan-2\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.webhozz.com\\\/blog\\\/plugin-wordpress-yang-mengandung-lubang-keamanan-2\\\/\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\\\/\\\/www.webhozz.com\\\/blog\\\/#\\\/schema\\\/person\\\/ad1c5822a60b5b228c5ceda20e439fea\"},\"headline\":\"Plugin WordPress yang Mengandung Lubang Keamanan\",\"datePublished\":\"2014-11-25T06:42:17+00:00\",\"dateModified\":\"2014-11-25T06:42:36+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.webhozz.com\\\/blog\\\/plugin-wordpress-yang-mengandung-lubang-keamanan-2\\\/\"},\"wordCount\":150,\"publisher\":{\"@id\":\"https:\\\/\\\/www.webhozz.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.webhozz.com\\\/blog\\\/plugin-wordpress-yang-mengandung-lubang-keamanan-2\\\/#primaryimage\"},\"thumbnailUrl\":\"http:\\\/\\\/www.webhozz.com\\\/blog\\\/wp-content\\\/uploads\\\/2013\\\/10\\\/kunci.jpg\",\"keywords\":[\"belajar wordpress\",\"kursus wordpress\",\"lubang keamanan\",\"plugin wordpress\",\"Plugin WordPress yang Mengandung Lubang Keamanan\",\"webworpress plugin\",\"wordpress\",\"wordpress plugin untuk keamanan\"],\"articleSection\":[\"Belajar Wordpress\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.webhozz.com\\\/blog\\\/plugin-wordpress-yang-mengandung-lubang-keamanan-2\\\/\",\"url\":\"https:\\\/\\\/www.webhozz.com\\\/blog\\\/plugin-wordpress-yang-mengandung-lubang-keamanan-2\\\/\",\"name\":\"Plugin WordPress yang Mengandung Lubang Keamanan - WebHozz Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.webhozz.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.webhozz.com\\\/blog\\\/plugin-wordpress-yang-mengandung-lubang-keamanan-2\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.webhozz.com\\\/blog\\\/plugin-wordpress-yang-mengandung-lubang-keamanan-2\\\/#primaryimage\"},\"thumbnailUrl\":\"http:\\\/\\\/www.webhozz.com\\\/blog\\\/wp-content\\\/uploads\\\/2013\\\/10\\\/kunci.jpg\",\"datePublished\":\"2014-11-25T06:42:17+00:00\",\"dateModified\":\"2014-11-25T06:42:36+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.webhozz.com\\\/blog\\\/plugin-wordpress-yang-mengandung-lubang-keamanan-2\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.webhozz.com\\\/blog\\\/plugin-wordpress-yang-mengandung-lubang-keamanan-2\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.webhozz.com\\\/blog\\\/plugin-wordpress-yang-mengandung-lubang-keamanan-2\\\/#primaryimage\",\"url\":\"http:\\\/\\\/www.webhozz.com\\\/blog\\\/wp-content\\\/uploads\\\/2013\\\/10\\\/kunci.jpg\",\"contentUrl\":\"http:\\\/\\\/www.webhozz.com\\\/blog\\\/wp-content\\\/uploads\\\/2013\\\/10\\\/kunci.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.webhozz.com\\\/blog\\\/plugin-wordpress-yang-mengandung-lubang-keamanan-2\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.webhozz.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Plugin WordPress yang Mengandung Lubang Keamanan\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.webhozz.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.webhozz.com\\\/blog\\\/\",\"name\":\"WebHozz Blog\",\"description\":\"Kursus Web &amp; Android di Jakarta Bandung\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.webhozz.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.webhozz.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.webhozz.com\\\/blog\\\/#organization\",\"name\":\"WebHozz\",\"url\":\"https:\\\/\\\/www.webhozz.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.webhozz.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.webhozz.com\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/04\\\/logo-persegi.jpg\",\"contentUrl\":\"https:\\\/\\\/www.webhozz.com\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/04\\\/logo-persegi.jpg\",\"width\":442,\"height\":442,\"caption\":\"WebHozz\"},\"image\":{\"@id\":\"https:\\\/\\\/www.webhozz.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.webhozz.com\\\/blog\\\/#\\\/schema\\\/person\\\/ad1c5822a60b5b228c5ceda20e439fea\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/bff35e4083f3870e2f911c4437e788147d340f274268d361dd7e1cf20bebb156?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/bff35e4083f3870e2f911c4437e788147d340f274268d361dd7e1cf20bebb156?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/bff35e4083f3870e2f911c4437e788147d340f274268d361dd7e1cf20bebb156?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"url\":\"https:\\\/\\\/www.webhozz.com\\\/blog\\\/author\\\/putralucio\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Plugin WordPress yang Mengandung Lubang Keamanan - WebHozz Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.webhozz.com\/blog\/plugin-wordpress-yang-mengandung-lubang-keamanan-2\/","og_locale":"en_US","og_type":"article","og_title":"Plugin WordPress yang Mengandung Lubang Keamanan - WebHozz Blog","og_description":"WordPress yang baru saja merayakan ulang tahunnya yang ke-10 pada tanggal 27 Mei 2013 yang lalu ternyata masih tetap menjadi Content-Management-System (CMS) tervaforit di seluruh","og_url":"https:\/\/www.webhozz.com\/blog\/plugin-wordpress-yang-mengandung-lubang-keamanan-2\/","og_site_name":"WebHozz Blog","article_published_time":"2014-11-25T06:42:17+00:00","article_modified_time":"2014-11-25T06:42:36+00:00","og_image":[{"width":600,"height":361,"url":"https:\/\/www.webhozz.com\/blog\/wp-content\/uploads\/2013\/10\/kunci.jpg","type":"image\/jpeg"}],"author":"admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"admin","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.webhozz.com\/blog\/plugin-wordpress-yang-mengandung-lubang-keamanan-2\/#article","isPartOf":{"@id":"https:\/\/www.webhozz.com\/blog\/plugin-wordpress-yang-mengandung-lubang-keamanan-2\/"},"author":{"name":"admin","@id":"https:\/\/www.webhozz.com\/blog\/#\/schema\/person\/ad1c5822a60b5b228c5ceda20e439fea"},"headline":"Plugin WordPress yang Mengandung Lubang Keamanan","datePublished":"2014-11-25T06:42:17+00:00","dateModified":"2014-11-25T06:42:36+00:00","mainEntityOfPage":{"@id":"https:\/\/www.webhozz.com\/blog\/plugin-wordpress-yang-mengandung-lubang-keamanan-2\/"},"wordCount":150,"publisher":{"@id":"https:\/\/www.webhozz.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.webhozz.com\/blog\/plugin-wordpress-yang-mengandung-lubang-keamanan-2\/#primaryimage"},"thumbnailUrl":"http:\/\/www.webhozz.com\/blog\/wp-content\/uploads\/2013\/10\/kunci.jpg","keywords":["belajar wordpress","kursus wordpress","lubang keamanan","plugin wordpress","Plugin WordPress yang Mengandung Lubang Keamanan","webworpress plugin","wordpress","wordpress plugin untuk keamanan"],"articleSection":["Belajar Wordpress"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.webhozz.com\/blog\/plugin-wordpress-yang-mengandung-lubang-keamanan-2\/","url":"https:\/\/www.webhozz.com\/blog\/plugin-wordpress-yang-mengandung-lubang-keamanan-2\/","name":"Plugin WordPress yang Mengandung Lubang Keamanan - WebHozz Blog","isPartOf":{"@id":"https:\/\/www.webhozz.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.webhozz.com\/blog\/plugin-wordpress-yang-mengandung-lubang-keamanan-2\/#primaryimage"},"image":{"@id":"https:\/\/www.webhozz.com\/blog\/plugin-wordpress-yang-mengandung-lubang-keamanan-2\/#primaryimage"},"thumbnailUrl":"http:\/\/www.webhozz.com\/blog\/wp-content\/uploads\/2013\/10\/kunci.jpg","datePublished":"2014-11-25T06:42:17+00:00","dateModified":"2014-11-25T06:42:36+00:00","breadcrumb":{"@id":"https:\/\/www.webhozz.com\/blog\/plugin-wordpress-yang-mengandung-lubang-keamanan-2\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.webhozz.com\/blog\/plugin-wordpress-yang-mengandung-lubang-keamanan-2\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.webhozz.com\/blog\/plugin-wordpress-yang-mengandung-lubang-keamanan-2\/#primaryimage","url":"http:\/\/www.webhozz.com\/blog\/wp-content\/uploads\/2013\/10\/kunci.jpg","contentUrl":"http:\/\/www.webhozz.com\/blog\/wp-content\/uploads\/2013\/10\/kunci.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/www.webhozz.com\/blog\/plugin-wordpress-yang-mengandung-lubang-keamanan-2\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.webhozz.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Plugin WordPress yang Mengandung Lubang Keamanan"}]},{"@type":"WebSite","@id":"https:\/\/www.webhozz.com\/blog\/#website","url":"https:\/\/www.webhozz.com\/blog\/","name":"WebHozz Blog","description":"Kursus Web &amp; Android di Jakarta Bandung","publisher":{"@id":"https:\/\/www.webhozz.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.webhozz.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.webhozz.com\/blog\/#organization","name":"WebHozz","url":"https:\/\/www.webhozz.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.webhozz.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.webhozz.com\/blog\/wp-content\/uploads\/2018\/04\/logo-persegi.jpg","contentUrl":"https:\/\/www.webhozz.com\/blog\/wp-content\/uploads\/2018\/04\/logo-persegi.jpg","width":442,"height":442,"caption":"WebHozz"},"image":{"@id":"https:\/\/www.webhozz.com\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.webhozz.com\/blog\/#\/schema\/person\/ad1c5822a60b5b228c5ceda20e439fea","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/bff35e4083f3870e2f911c4437e788147d340f274268d361dd7e1cf20bebb156?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/bff35e4083f3870e2f911c4437e788147d340f274268d361dd7e1cf20bebb156?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/bff35e4083f3870e2f911c4437e788147d340f274268d361dd7e1cf20bebb156?s=96&d=mm&r=g","caption":"admin"},"url":"https:\/\/www.webhozz.com\/blog\/author\/putralucio\/"}]}},"_links":{"self":[{"href":"https:\/\/www.webhozz.com\/blog\/wp-json\/wp\/v2\/posts\/1253","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.webhozz.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.webhozz.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.webhozz.com\/blog\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/www.webhozz.com\/blog\/wp-json\/wp\/v2\/comments?post=1253"}],"version-history":[{"count":2,"href":"https:\/\/www.webhozz.com\/blog\/wp-json\/wp\/v2\/posts\/1253\/revisions"}],"predecessor-version":[{"id":1255,"href":"https:\/\/www.webhozz.com\/blog\/wp-json\/wp\/v2\/posts\/1253\/revisions\/1255"}],"wp:attachment":[{"href":"https:\/\/www.webhozz.com\/blog\/wp-json\/wp\/v2\/media?parent=1253"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.webhozz.com\/blog\/wp-json\/wp\/v2\/categories?post=1253"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.webhozz.com\/blog\/wp-json\/wp\/v2\/tags?post=1253"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}