سلام عزیزان
متاسفانه باگی وحشتناک در وردپرس یافت شده که خواهشمندم هر چه زودتر این مورد را حل نمایند
کل وضعیت باگ با توضیحات کامل به شرح ذیل می باشد
کد php:

On Fri, Jun 07, 2013 at 06:29:48PM +0200, Krzysztof KatowiczKowalewski wrote:

> Version 3.5.1 (latest) of popular blogging engine WordPress suffers
from remote denial of service vulnerability
. The bug exists in
encryption module
(class-phpass.php). The exploitation of this
vulnerability is possible only when at least one post is
protected by a
password
.

>

> Time frames:

> 31.05.2013 WordPress security team has been informed about the vulnerability (no response).

> 07.06.2013 The vulnerability has been released to the public.

>

> More information (including proof of concept):

> https://vndh.net/note:wordpress-351-denial-service

>

> A way out (before official WordPress update) to secure existing installations is to apply the following patch:

>

> — wpincludes/class-phpass.php

> +++ wpincludes/class-phpass.php

> @@ –120,7 +120,7 @@

> return $output;

>

> $count_log2 = strpos($this->itoa64, $setting[3]);

> – if ($count_log2 < 7 || $count_log2 > 30)

> + if ($count_log2 < 7 || $count_log2 > 13)

> return $output;

>

> $count = 1 << $count_log2;

Please use CVE20132173 for this issue.

Henri Salo

—–BEGIN PGP SIGNATURE—–

Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAlG5Z+oACgkQXf6hBi6kbk9jYwCeMIThfuTWFfGOalupCsLJLIbg

KYgAoIyjMj/ikxhoeyQBUIT+Xp1LgeeH

=2I3B

—–END PGP SIGNATURE—–

برای رفع این مشکل فایل زیر را با ادیتور باز کنید
wp-includes/class-phpass.php

در سطر 123
if ($count_log2 < 7 || $count_log2 > 30)

را حذف و به جای آن

if ($count_log2 < 7 || $count_log2 > 13)

قرار دهید.

مسیر فایل در هاست لینوکس: public_html/wp-includes

چنانچه سئوالی دارید از طریق این فرم اقدام نمایید