Plugin-Found/EN
Version vom 4. Juli 2018, 10:09 Uhr von Siwebot (Diskussion | Beiträge) (Die Seite wurde neu angelegt: „=== <span style="color:#c31622">{{:{{PAGENAME}}/Headline}}<span>=== {| class="wikitable" |'''Check'''|| {{:{{PAGENAME}}/Negative}} |- |'''Beschreibung'''…“)
Check for CMS plug-ins
Check | CMS plug-in detected |
Beschreibung | A plug-in that is used by your content management system (CMS) was detected. An attacker could use this information to search for specific security flaws for your website. |
Hintergrund | A plug-in is an optional software module that extends or modifies an existing software. Plug-ins are often written by inexperienced developers. Therefore they often have security flaws which are not fixed in time. Further information |
Auswirkung | Content management system (CMS) offer a wide range of extensions. Vulnerabilities and security flaws in plug-ins are often exploited by attackers to gain control of a CMS installation or to misuse it for other purposes. A large attack surface is a disadvantage that should be avoided. -sicherheit-teil3/ Further Information (German only). |
Lösung / Tipps | The use of plug-ins should be limited to those plug-ins that are absolutely necessary. This can reduce the attack surface significantly. In addition, installed plugins should always be kept up to date. |
[[Category: ]]