Version Description
- Deutsch: Erkennung der MailPoet-Sicherheitslcke
- English: Detection and warning for the MailPoet Vulnerability
Download this release
Release Info
| Developer | sergej.mueller |
| Plugin |  AntiVirus |
| Version | 1.3.8 |
| Comparing to | |
| See all releases | |
Code changes from version 1.3.7 to 1.3.8
- antivirus.php +23 -2
- readme.txt +5 -1
antivirus.php
CHANGED
|
@@ -8,7 +8,7 @@ Author: Sergej Müller
|
|
| 8 |
Author URI: http://wpcoder.de
|
| 9 |
Plugin URI: http://wpantivirus.com
|
| 10 |
License: GPLv2 or later
|
| 11 |
-
Version: 1.3.
|
| 12 |
*/
|
| 13 |
|
| 14 |
/*
|
|
@@ -753,6 +753,11 @@ class AntiVirus {
|
|
| 753 |
exit();
|
| 754 |
}
|
| 755 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 756 |
/* Init */
|
| 757 |
$values = array();
|
| 758 |
$output = '';
|
|
@@ -907,7 +912,7 @@ class AntiVirus {
|
|
| 907 |
* Prüfung einer Zeile
|
| 908 |
*
|
| 909 |
* @since 0.1
|
| 910 |
-
* @change 1.3.
|
| 911 |
*
|
| 912 |
* @param string $line Zeile zur Prüfung
|
| 913 |
* @param integer $num Nummer zur Prüfung
|
|
@@ -940,6 +945,7 @@ class AntiVirus {
|
|
| 940 |
$results = $matches[1];
|
| 941 |
}
|
| 942 |
|
|
|
|
| 943 |
/* Base64 suchen */
|
| 944 |
preg_match_all(
|
| 945 |
'/[\'\"\$\\ \/]*?([a-zA-Z0-9]{' .strlen(base64_encode('sergej + swetlana = love.')). ',})/', /* get length of my life ;) */
|
|
@@ -952,6 +958,7 @@ class AntiVirus {
|
|
| 952 |
$results = array_merge($results, $matches[1]);
|
| 953 |
}
|
| 954 |
|
|
|
|
| 955 |
/* Frames suchen */
|
| 956 |
preg_match_all(
|
| 957 |
'/<\s*?(i?frame)/',
|
|
@@ -964,6 +971,20 @@ class AntiVirus {
|
|
| 964 |
$results = array_merge($results, $matches[1]);
|
| 965 |
}
|
| 966 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 967 |
/* Option suchen */
|
| 968 |
preg_match(
|
| 969 |
'/get_option\s*\(\s*[\'"](.*?)[\'"]\s*\)/',
|
| 8 |
Author URI: http://wpcoder.de
|
| 9 |
Plugin URI: http://wpantivirus.com
|
| 10 |
License: GPLv2 or later
|
| 11 |
+
Version: 1.3.8
|
| 12 |
*/
|
| 13 |
|
| 14 |
/*
|
| 753 |
exit();
|
| 754 |
}
|
| 755 |
|
| 756 |
+
/* Capability check */
|
| 757 |
+
if ( ! current_user_can('manage_options') ) {
|
| 758 |
+
return;
|
| 759 |
+
}
|
| 760 |
+
|
| 761 |
/* Init */
|
| 762 |
$values = array();
|
| 763 |
$output = '';
|
| 912 |
* Prüfung einer Zeile
|
| 913 |
*
|
| 914 |
* @since 0.1
|
| 915 |
+
* @change 1.3.8
|
| 916 |
*
|
| 917 |
* @param string $line Zeile zur Prüfung
|
| 918 |
* @param integer $num Nummer zur Prüfung
|
| 945 |
$results = $matches[1];
|
| 946 |
}
|
| 947 |
|
| 948 |
+
|
| 949 |
/* Base64 suchen */
|
| 950 |
preg_match_all(
|
| 951 |
'/[\'\"\$\\ \/]*?([a-zA-Z0-9]{' .strlen(base64_encode('sergej + swetlana = love.')). ',})/', /* get length of my life ;) */
|
| 958 |
$results = array_merge($results, $matches[1]);
|
| 959 |
}
|
| 960 |
|
| 961 |
+
|
| 962 |
/* Frames suchen */
|
| 963 |
preg_match_all(
|
| 964 |
'/<\s*?(i?frame)/',
|
| 971 |
$results = array_merge($results, $matches[1]);
|
| 972 |
}
|
| 973 |
|
| 974 |
+
|
| 975 |
+
/* MailPoet Vulnerability */
|
| 976 |
+
preg_match_all(
|
| 977 |
+
'/explode\s?\(chr\s?\(\s?\(\d{3}\s?-\s?\d{3}\s?\)\s?\)\s?,/',
|
| 978 |
+
$line,
|
| 979 |
+
$matches
|
| 980 |
+
);
|
| 981 |
+
|
| 982 |
+
/* Ergebnis speichern */
|
| 983 |
+
if ( $matches[0] ) {
|
| 984 |
+
$results = array_merge($results, $matches[0]);
|
| 985 |
+
}
|
| 986 |
+
|
| 987 |
+
|
| 988 |
/* Option suchen */
|
| 989 |
preg_match(
|
| 990 |
'/get_option\s*\(\s*[\'"](.*?)[\'"]\s*\)/',
|
readme.txt
CHANGED
|
@@ -1,6 +1,6 @@
|
|
| 1 |
=== AntiVirus ===
|
| 2 |
Contributors: sergej.mueller
|
| 3 |
-
Tags: antivirus, malware, scanner, phishing, safe browsing
|
| 4 |
Donate link: https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=5RDDW9FEHGLG6
|
| 5 |
Requires at least: 3.8
|
| 6 |
Tested up to: 3.9.1
|
|
@@ -60,6 +60,10 @@ Useful plugin that will scan your theme templates for malicious injections. Auto
|
|
| 60 |
|
| 61 |
== Changelog ==
|
| 62 |
|
|
|
|
|
|
|
|
|
|
|
|
|
| 63 |
= 1.3.7 =
|
| 64 |
* Deutsch: Aktualisierung auf Safe Browsing Lookup API 3.1
|
| 65 |
* English: Update the Google Safe Browsing Lookup API to v3.1
|
| 1 |
=== AntiVirus ===
|
| 2 |
Contributors: sergej.mueller
|
| 3 |
+
Tags: antivirus, malware, scanner, phishing, safe browsing, vulnerability
|
| 4 |
Donate link: https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=5RDDW9FEHGLG6
|
| 5 |
Requires at least: 3.8
|
| 6 |
Tested up to: 3.9.1
|
| 60 |
|
| 61 |
== Changelog ==
|
| 62 |
|
| 63 |
+
= 1.3.8 =
|
| 64 |
+
* Deutsch: Erkennung der [MailPoet-Sicherheitslücke](http://blog.sucuri.net/2014/07/mailpoet-vulnerability-exploited-in-the-wild-breaking-thousands-of-wordpress-sites.html)
|
| 65 |
+
* English: Detection and warning for the [MailPoet Vulnerability](http://blog.sucuri.net/2014/07/mailpoet-vulnerability-exploited-in-the-wild-breaking-thousands-of-wordpress-sites.html)
|
| 66 |
+
|
| 67 |
= 1.3.7 =
|
| 68 |
* Deutsch: Aktualisierung auf Safe Browsing Lookup API 3.1
|
| 69 |
* English: Update the Google Safe Browsing Lookup API to v3.1
|
