{"id":11252,"date":"2014-01-09T22:28:09","date_gmt":"2014-01-09T21:28:09","guid":{"rendered":"https:\/\/www.saasweb.agency\/blog\/les-extensions-comme-porte-dentree-pour-les-attaques-wordpress\/"},"modified":"2026-10-27T08:17:54","modified_gmt":"2026-10-27T07:17:54","slug":"les-extensions-comme-porte-dentree-pour-les-attaques-wordpress","status":"publish","type":"post","link":"https:\/\/www.saasweb.agency\/fr\/blog\/les-extensions-comme-porte-dentree-pour-les-attaques-wordpress\/","title":{"rendered":"Les extensions comme porte d\u2019entr\u00e9e pour les attaques WordPress"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/www.saasweb.agency\/wp-content\/uploads\/2011\/11\/wordpress-logo.png\" alt=\"Logo WordPress\" width=\"150\" height=\"150\" class=\"alignleft size-full wp-image-549\" srcset=\"https:\/\/www.saasweb.agency\/wp-content\/uploads\/2011\/11\/wordpress-logo.png 150w, https:\/\/www.saasweb.agency\/wp-content\/uploads\/2011\/11\/wordpress-logo-50x50.png 50w, https:\/\/www.saasweb.agency\/wp-content\/uploads\/2011\/11\/wordpress-logo-100x100.png 100w, https:\/\/www.saasweb.agency\/wp-content\/uploads\/2011\/11\/wordpress-logo-140x140.png 140w\" sizes=\"(max-width: 150px) 100vw, 150px\" \/><a href=\"https:\/\/blogs.akamai.com\/2014\/01\/wordpress-plugins-exploitation-through-the-big-data-prism.html\" title=\"\u00c9tude Akamai sur les attaques ciblant WordPress\" target=\"_blank\" rel=\"noopener\">Une \u00e9tude r\u00e9cente de l\u2019op\u00e9rateur r\u00e9seau Akamai<\/a> confirme la mauvaise r\u00e9putation des extensions WordPress en tant que cibles de nombreuses attaques. Au cours d\u2019une p\u00e9riode d\u2019observation d\u2019une semaine, 43\u202f000 attaques sur des installations WordPress ont \u00e9t\u00e9 enregistr\u00e9es via diff\u00e9rentes extensions. Huit extensions sont particuli\u00e8rement pris\u00e9es comme cibles : Tim Thumb (72 %), MyFlash (16 %), openEMR (7 %) et les quatre suivantes avec 1 % chacune : Bti Team Bti Tracker, Is-human, WordPress Cloudsafe365, Comment Rating et MyGallery. La m\u00e9thode d\u2019intrusion la plus populaire est la \u00ab Remote File Inclusion \u00bb, qui se distingue nettement avec 96 % des formes d\u2019attaque.<br \/>\nL\u2019\u00e9tude contient encore quelques statistiques int\u00e9ressantes.   <\/p>\n<p>La conclusion n\u2019est toutefois certainement pas qu\u2019il ne faut pas utiliser d\u2019extensions, mais plut\u00f4t qu\u2019elles doivent \u00eatre int\u00e9gr\u00e9es avec discernement. \u00c0 cet \u00e9gard, les informations du <a href=\"http:\/\/wordpress.org\/plugins\/\" title=\"Extensions WordPress\" target=\"_blank\" rel=\"noopener\">r\u00e9pertoire des extensions WordPress<\/a> concernant les d\u00e9veloppeurs, les derni\u00e8res mises \u00e0 jour et les avis sont utiles. De plus, les utilisateurs devraient prendre le temps de mettre \u00e0 jour les extensions rapidement, en particulier lorsque des probl\u00e8mes de s\u00e9curit\u00e9 sont connus.  <\/p>\n","protected":false},"excerpt":{"rendered":"<p>Une \u00e9tude r\u00e9cente de l\u2019op\u00e9rateur r\u00e9seau Akamai confirme la mauvaise r\u00e9putation des extensions WordPress en tant que cibles de nombreuses attaques. Au cours d\u2019une p\u00e9riode d\u2019observation d\u2019une semaine, 43\u202f000 attaques sur des installations WordPress ont \u00e9t\u00e9 enregistr\u00e9es via diff\u00e9rentes extensions. Huit extensions sont particuli\u00e8rement pris\u00e9es comme cibles : Tim Thumb (72 %), MyFlash (16 %), \u2026<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[812],"tags":[1129,1603,901],"class_list":["post-11252","post","type-post","status-publish","format-standard","hentry","category-infos-saas-web","tag-akaimai","tag-plugin","tag-wordpress"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.saasweb.agency\/fr\/wp-json\/wp\/v2\/posts\/11252","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.saasweb.agency\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.saasweb.agency\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.saasweb.agency\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.saasweb.agency\/fr\/wp-json\/wp\/v2\/comments?post=11252"}],"version-history":[{"count":0,"href":"https:\/\/www.saasweb.agency\/fr\/wp-json\/wp\/v2\/posts\/11252\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.saasweb.agency\/fr\/wp-json\/wp\/v2\/media?parent=11252"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.saasweb.agency\/fr\/wp-json\/wp\/v2\/categories?post=11252"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.saasweb.agency\/fr\/wp-json\/wp\/v2\/tags?post=11252"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}