<style id="elementor-post-8454">.elementor-8454 .elementor-element.elementor-element-1a0304cf{margin-top:-20px;margin-bottom:0px;padding:0px 0px 0px 0px;}.elementor-8454 .elementor-element.elementor-element-13420e57 > .elementor-widget-wrap > .elementor-widget:not(.elementor-widget__width-auto):not(.elementor-widget__width-initial):not(:last-child):not(.elementor-absolute){margin-block-end:5px;}.elementor-8454 .elementor-element.elementor-element-13420e57 > .elementor-element-populated{padding:0px 0px 20px 0px;}.elementor-8454 .elementor-element.elementor-element-664600c2{--divider-border-style:solid;--divider-color:#0000001A;--divider-border-width:1px;}.elementor-8454 .elementor-element.elementor-element-664600c2 .elementor-divider-separator{width:100%;}.elementor-8454 .elementor-element.elementor-element-664600c2 .elementor-divider{padding-block-start:15px;padding-block-end:15px;}/* Start custom CSS for text-editor, class: .elementor-element-79d4ceb9 */.elementor-8454 .elementor-element.elementor-element-79d4ceb9 a {
    color: #c00000;
}
.elementor-8454 .elementor-element.elementor-element-79d4ceb9 a:hover {
    color: #000000;
}/* End custom CSS */</style>{"id":8454,"date":"2023-07-05T09:42:04","date_gmt":"2023-07-05T07:42:04","guid":{"rendered":"https:\/\/www.infordisa.com\/soc\/?p=8454"},"modified":"2025-08-18T13:17:17","modified_gmt":"2025-08-18T11:17:17","slug":"vulnerabilitat-en-plugin-wordpress-que-permet-crear-comptes-secrets-de-administrador","status":"publish","type":"post","link":"https:\/\/www.infordisa.com\/soc\/ca\/vulnerabilidad-en-plugin-wordpress-que-permite-crear-cuentas-secretas-de-administrador\/","title":{"rendered":"Vulnerabilitat en plugin WordPress que permet crear comptes secrets d&#039;administrador"},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"8454\" class=\"elementor elementor-8454\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-1a0304cf elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"1a0304cf\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-13420e57\" data-id=\"13420e57\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-4c12822c elementor-widget elementor-widget-shortcode\" data-id=\"4c12822c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"shortcode.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-shortcode\"><span style=\"color: #c02b23;font-weight: bold\">Cr&iacute;tica <\/span><img loading=\"lazy\" decoding=\"async\" width=\"10\" height=\"10\" src=\"https:\/\/soc.infordisa.com\/imgs\/alerta-5.png\" alt=\"Alerta 5\"\/><\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-79d4ceb9 elementor-widget elementor-widget-text-editor\" data-id=\"79d4ceb9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div><strong><a href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2023-3460\" target=\"_blank\" rel=\"noopener\">CVE-2023-3460<\/a><\/strong><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-664600c2 elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"664600c2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c24ca7a elementor-widget elementor-widget-text-editor\" data-id=\"c24ca7a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Recursos Afectados<\/h2><p>P&aacute;ginas WordPress que utilicen el <strong>plugin &ldquo;Ultimate Member&rdquo; igual o anterior a la versi&oacute;n 2.6.6<\/strong><\/p><h2>Descripci&oacute;n<\/h2><p>Se conoce que unos 200.000 sitios web basados en WordPress utilizan el plugin &ldquo;Ultimate Member&rdquo;. A este plugin se le ha detectado una <a class=\"glossaryLink\" href=\"https:\/\/www.infordisa.com\/soc\/ca\/glosario-definicion\/vulnerabilidad\/\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">vulnerabilidad<\/a> cr&iacute;tica parcheada en la &uacute;ltima versi&oacute;n (versi&oacute;n 2.6.7) lanzada el 1 de Julio. La vulnerabilidad permite la creaci&oacute;n de cuentas secretas de administrador, a esta se le ha asignado el siguiente c&oacute;digo: <a href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2023-3460\" target=\"_blank\" rel=\"noopener\">CVE-2023-2809<\/a> (con una puntuaci&oacute;n CVSS de 9,8)<\/p><h2>Soluci&oacute;n<\/h2><p>La vulnerabilidad ha sido <strong>solucionada con la actualizaci&oacute;n del plugin a 2.6.7<\/strong><\/p><blockquote><p>Para garantizar la seguridad de las webs WordPress se recomienda siempre <strong>tener el CMS y los plugins actualizados<\/strong>.<\/p><\/blockquote><h2>Detalle<\/h2><p>Este es un problema muy grave, ya que atacantes sin autentificar pueden explotar esta <a class=\"glossaryLink\" href=\"https:\/\/www.infordisa.com\/soc\/ca\/glosario-definicion\/vulnerabilidad\/\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">vulnerabilidad<\/a> y as&iacute; poder crear nuevas cuentas de usuarios con privilegios de administrador, tomando as&iacute; el control total del sitio web afectado.<\/p><p>Debido a que es una vulnerabilidad que <strong>est&aacute; siendo explotada activamente<\/strong>, y ser el <a class=\"glossaryLink\" href=\"https:\/\/www.infordisa.com\/soc\/ca\/glosario-definicion\/parche-de-seguridad\/\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">parche de seguridad<\/a> que lo remedia muy reciente, los detalles t&eacute;cnicos sobre la misma todav&iacute;a no se han hecho p&uacute;blicos.<\/p><p>Este problema sali&oacute; a la luz despu&eacute;s de que aparecieran distintos informes sobre cuentas de administrador fraudulentas que se iban a&ntilde;adiendo a los sitios afectados. Esto llev&oacute; a los responsables del plugin a publicar parches con correcciones parciales en las versiones 2.6.4, 2.6.5 y 2.6.6.<\/p><p>La versi&oacute;n 2.6.7 soluciona el fallo de seguridad, por lo que es recomendable que aquellos sitios web que hagan uso de este plugin lo actualicen a esta &uacute;ltima versi&oacute;n. Adem&aacute;s, como medida de seguridad adicional, los responsables tienen previsto incluir una nueva funci&oacute;n que permitir&aacute; a los administradores del sitio web restablecer las contrase&ntilde;as de todos los usuarios.<\/p><h3>Referencias<\/h3><ul><li><a href=\"https:\/\/wordpress.org\/plugins\/ultimate-member\/\" target=\"_blank\" rel=\"noopener\">Plugin Ultimate Memeber<\/a><\/li><li><a href=\"https:\/\/www.wordfence.com\/blog\/2023\/06\/psa-unpatched-critical-privilege-escalation-vulnerability-in-ultimate-member-plugin-being-actively-exploited\/\" target=\"_blank\" rel=\"noopener\">Nota de Wordfence<\/a><\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Se ha detectado una <a class=\"glossaryLink\" href=\"https:\/\/www.infordisa.com\/soc\/ca\/glosario-definicion\/vulnerabilidad\/\" data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex=\"0\" role=\"link\">vulnerabilidad<\/a> cr&iacute;tica con &ldquo;Ultimate Member&quot;. Unos 200.000 sitios web basados en WordPress utilizan este plugin.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[4],"tags":[78,147,173],"class_list":["post-8454","post","type-post","status-publish","format-standard","hentry","category-alertas-de-seguridad","tag-0-day","tag-vulnerabilidad","tag-wordpress","masonry-post","generate-columns","tablet-grid-50","mobile-grid-100","grid-parent","grid-25"],"acf":[],"yoast_head":"<title>Vulnerabilidad en plugin Wordpress que permite crear cuentas secretas de administrador - Infordisa \/ Security Operations Center<\/title>\n<meta name=\"description\" content=\"Se ha detectado una vulnerabilidad cr\u00edtica con \u201cUltimate Member&quot;. Unos 200.000 sitios web basados en WordPress utilizan este plugin.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.infordisa.com\/soc\/ca\/vulnerabilitat-en-plugin-wordpress-que-permet-crear-comptes-secrets-de-administrador\/\" \/>\n<meta property=\"og:locale\" content=\"ca_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Vulnerabilidad en plugin Wordpress que permite crear cuentas secretas de administrador - Infordisa \/ Security Operations Center\" \/>\n<meta property=\"og:description\" content=\"Se ha detectado una vulnerabilidad cr\u00edtica con \u201cUltimate Member&quot;. Unos 200.000 sitios web basados en WordPress utilizan este plugin.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.infordisa.com\/soc\/ca\/vulnerabilitat-en-plugin-wordpress-que-permet-crear-comptes-secrets-de-administrador\/\" \/>\n<meta property=\"og:site_name\" content=\"Infordisa \/ Security Operations Center\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/infordisa\/\" \/>\n<meta property=\"article:published_time\" content=\"2023-07-05T07:42:04+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-08-18T11:17:17+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2023\/07\/alerta-wordpress.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Jordi Sala\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2023\/07\/alerta-wordpress.jpg\" \/>\n<meta name=\"twitter:creator\" content=\"@infordisa\" \/>\n<meta name=\"twitter:site\" content=\"@infordisa\" \/>\n<meta name=\"twitter:label1\" content=\"Escrit per\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jordi Sala\" \/>\n\t<meta name=\"twitter:label2\" content=\"Temps estimat de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minuts\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-en-plugin-wordpress-que-permite-crear-cuentas-secretas-de-administrador\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-en-plugin-wordpress-que-permite-crear-cuentas-secretas-de-administrador\\\/\"},\"author\":{\"name\":\"Jordi Sala\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/person\\\/9e7088b9a88f62117d466d94479b2375\"},\"headline\":\"Vulnerabilidad en plugin WordPress que permite crear cuentas secretas de administrador\",\"datePublished\":\"2023-07-05T07:42:04+00:00\",\"dateModified\":\"2025-08-18T11:17:17+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-en-plugin-wordpress-que-permite-crear-cuentas-secretas-de-administrador\\\/\"},\"wordCount\":327,\"publisher\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#organization\"},\"keywords\":[\"0-day\",\"Vulnerabilidad\",\"WordPress\"],\"articleSection\":[\"Alertas de seguridad\"],\"inLanguage\":\"ca\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-en-plugin-wordpress-que-permite-crear-cuentas-secretas-de-administrador\\\/\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-en-plugin-wordpress-que-permite-crear-cuentas-secretas-de-administrador\\\/\",\"name\":\"Vulnerabilidad en plugin Wordpress que permite crear cuentas secretas de administrador - Infordisa \\\/ Security Operations Center\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#website\"},\"datePublished\":\"2023-07-05T07:42:04+00:00\",\"dateModified\":\"2025-08-18T11:17:17+00:00\",\"description\":\"Se ha detectado una vulnerabilidad cr\u00edtica con \u201cUltimate Member\\\". Unos 200.000 sitios web basados en WordPress utilizan este plugin.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-en-plugin-wordpress-que-permite-crear-cuentas-secretas-de-administrador\\\/#breadcrumb\"},\"inLanguage\":\"ca\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-en-plugin-wordpress-que-permite-crear-cuentas-secretas-de-administrador\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/vulnerabilidad-en-plugin-wordpress-que-permite-crear-cuentas-secretas-de-administrador\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Vulnerabilidad en plugin WordPress que permite crear cuentas secretas de administrador\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#website\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\",\"name\":\"Infordisa \\\/ Security Operations Center\",\"description\":\"Portal de Ciberseguridad\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"ca\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#organization\",\"name\":\"Infordisa \\\/ Security Operations Center\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"ca\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2021\\\/11\\\/logo-securityoperationscenter.png\",\"contentUrl\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/wp-content\\\/uploads\\\/2021\\\/11\\\/logo-securityoperationscenter.png\",\"width\":400,\"height\":34,\"caption\":\"Infordisa \\\/ Security Operations Center\"},\"image\":{\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/infordisa\\\/\",\"https:\\\/\\\/x.com\\\/infordisa\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/infordisa\",\"https:\\\/\\\/www.youtube.com\\\/user\\\/InfordisaTV\",\"https:\\\/\\\/www.instagram.com\\\/infordisa\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/#\\\/schema\\\/person\\\/9e7088b9a88f62117d466d94479b2375\",\"name\":\"Jordi Sala\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"ca\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g\",\"caption\":\"Jordi Sala\"},\"description\":\"Marketing\",\"sameAs\":[\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/\"],\"url\":\"https:\\\/\\\/www.infordisa.com\\\/soc\\\/ca\\\/author\\\/jsala\\\/\"}]}<\/script>","yoast_head_json":{"title":"Vulnerabilitat en plugin Wordpress que permet crear comptes secrets d&#039;administrador - Infordisa \/ Security Operations Center","description":"S&#039;ha detectat una vulnerabilitat cr\u00edtica amb \u201cUltimate Member\u201d. Uns 200.000 llocs web basats en WordPress utilitzen aquest connector.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.infordisa.com\/soc\/ca\/vulnerabilitat-en-plugin-wordpress-que-permet-crear-comptes-secrets-de-administrador\/","og_locale":"ca_ES","og_type":"article","og_title":"Vulnerabilidad en plugin Wordpress que permite crear cuentas secretas de administrador - Infordisa \/ Security Operations Center","og_description":"Se ha detectado una vulnerabilidad cr\u00edtica con \u201cUltimate Member\". Unos 200.000 sitios web basados en WordPress utilizan este plugin.","og_url":"https:\/\/www.infordisa.com\/soc\/ca\/vulnerabilitat-en-plugin-wordpress-que-permet-crear-comptes-secrets-de-administrador\/","og_site_name":"Infordisa \/ Security Operations Center","article_publisher":"https:\/\/www.facebook.com\/infordisa\/","article_published_time":"2023-07-05T07:42:04+00:00","article_modified_time":"2025-08-18T11:17:17+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2023\/07\/alerta-wordpress.jpg","type":"image\/jpeg"}],"author":"Jordi Sala","twitter_card":"summary_large_image","twitter_image":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2023\/07\/alerta-wordpress.jpg","twitter_creator":"@infordisa","twitter_site":"@infordisa","twitter_misc":{"Escrit per":"Jordi Sala","Temps estimat de lectura":"2 minuts"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-en-plugin-wordpress-que-permite-crear-cuentas-secretas-de-administrador\/#article","isPartOf":{"@id":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-en-plugin-wordpress-que-permite-crear-cuentas-secretas-de-administrador\/"},"author":{"name":"Jordi Sala","@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/person\/9e7088b9a88f62117d466d94479b2375"},"headline":"Vulnerabilidad en plugin WordPress que permite crear cuentas secretas de administrador","datePublished":"2023-07-05T07:42:04+00:00","dateModified":"2025-08-18T11:17:17+00:00","mainEntityOfPage":{"@id":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-en-plugin-wordpress-que-permite-crear-cuentas-secretas-de-administrador\/"},"wordCount":327,"publisher":{"@id":"https:\/\/www.infordisa.com\/soc\/#organization"},"keywords":["0-day","Vulnerabilidad","WordPress"],"articleSection":["Alertas de seguridad"],"inLanguage":"ca"},{"@type":"WebPage","@id":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-en-plugin-wordpress-que-permite-crear-cuentas-secretas-de-administrador\/","url":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-en-plugin-wordpress-que-permite-crear-cuentas-secretas-de-administrador\/","name":"Vulnerabilitat en plugin Wordpress que permet crear comptes secrets d&#039;administrador - Infordisa \/ Security Operations Center","isPartOf":{"@id":"https:\/\/www.infordisa.com\/soc\/#website"},"datePublished":"2023-07-05T07:42:04+00:00","dateModified":"2025-08-18T11:17:17+00:00","description":"S&#039;ha detectat una vulnerabilitat cr\u00edtica amb \u201cUltimate Member\u201d. Uns 200.000 llocs web basats en WordPress utilitzen aquest connector.","breadcrumb":{"@id":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-en-plugin-wordpress-que-permite-crear-cuentas-secretas-de-administrador\/#breadcrumb"},"inLanguage":"ca","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.infordisa.com\/soc\/vulnerabilidad-en-plugin-wordpress-que-permite-crear-cuentas-secretas-de-administrador\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.infordisa.com\/soc\/vulnerabilidad-en-plugin-wordpress-que-permite-crear-cuentas-secretas-de-administrador\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/www.infordisa.com\/soc\/"},{"@type":"ListItem","position":2,"name":"Vulnerabilidad en plugin WordPress que permite crear cuentas secretas de administrador"}]},{"@type":"WebSite","@id":"https:\/\/www.infordisa.com\/soc\/#website","url":"https:\/\/www.infordisa.com\/soc\/","name":"Infordisa \/ Security Operations Center","description":"Portal de Ciberseguretat","publisher":{"@id":"https:\/\/www.infordisa.com\/soc\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.infordisa.com\/soc\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"ca"},{"@type":"Organization","@id":"https:\/\/www.infordisa.com\/soc\/#organization","name":"Infordisa \/ Security Operations Center","url":"https:\/\/www.infordisa.com\/soc\/","logo":{"@type":"ImageObject","inLanguage":"ca","@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/logo\/image\/","url":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2021\/11\/logo-securityoperationscenter.png","contentUrl":"https:\/\/www.infordisa.com\/soc\/wp-content\/uploads\/2021\/11\/logo-securityoperationscenter.png","width":400,"height":34,"caption":"Infordisa \/ Security Operations Center"},"image":{"@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/infordisa\/","https:\/\/x.com\/infordisa","https:\/\/www.linkedin.com\/company\/infordisa","https:\/\/www.youtube.com\/user\/InfordisaTV","https:\/\/www.instagram.com\/infordisa\/"]},{"@type":"Person","@id":"https:\/\/www.infordisa.com\/soc\/#\/schema\/person\/9e7088b9a88f62117d466d94479b2375","name":"Jordi Sala","image":{"@type":"ImageObject","inLanguage":"ca","@id":"https:\/\/secure.gravatar.com\/avatar\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8c54ab66e828adf2561016ace1f387fbc25b3e9bb35a24b65c0d3cb64e309c28?s=96&r=g","caption":"Jordi Sala"},"description":"M\u00e0rqueting","sameAs":["https:\/\/www.infordisa.com\/soc\/"],"url":"https:\/\/www.infordisa.com\/soc\/ca\/author\/jsala\/"}]}},"_links":{"self":[{"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/posts\/8454","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/comments?post=8454"}],"version-history":[{"count":5,"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/posts\/8454\/revisions"}],"predecessor-version":[{"id":8462,"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/posts\/8454\/revisions\/8462"}],"wp:attachment":[{"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/media?parent=8454"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/categories?post=8454"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.infordisa.com\/soc\/ca\/wp-json\/wp\/v2\/tags?post=8454"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}