{"id":30007,"date":"2026-07-31T09:55:18","date_gmt":"2026-07-31T07:55:18","guid":{"rendered":"https:\/\/perseus.de\/ataques-activos-a-wordpress-vulnerabilidad-critica-permite-la-toma-total-de-control-de-sitios-web\/"},"modified":"2026-08-10T10:16:23","modified_gmt":"2026-08-10T08:16:23","slug":"ataques-activos-a-wordpress-vulnerabilidad-critica-permite-la-toma-total-de-control-de-sitios-web","status":"publish","type":"post","link":"https:\/\/perseus.de\/es\/ataques-activos-a-wordpress-vulnerabilidad-critica-permite-la-toma-total-de-control-de-sitios-web\/","title":{"rendered":"Ataques activos a WordPress: Vulnerabilidad cr\u00edtica permite la toma total de control de sitios web"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"30007\" class=\"elementor elementor-30007 elementor-28873\" data-elementor-post-type=\"post\">\n\t\t\t\t<div class=\"elementor-element elementor-element-dcf4ec4 e-flex e-con-boxed e-con e-parent\" data-id=\"dcf4ec4\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-e1db58c elementor-widget elementor-widget-image\" data-id=\"e1db58c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"800\" height=\"200\" src=\"https:\/\/perseus.de\/wp-content\/uploads\/2026\/07\/Coverbild-Gefahrenwarnung_ES-1024x256.png\" class=\"attachment-large size-large wp-image-30045\" alt=\"En caso de que se detecte un patr\u00f3n de ataque actual o una vulnerabilidad de seguridad, Perseus env\u00eda correos electr\u00f3nicos de alerta con medidas concretas para contrarrestarlo.\" srcset=\"https:\/\/perseus.de\/wp-content\/uploads\/2026\/07\/Coverbild-Gefahrenwarnung_ES-1024x256.png 1024w, https:\/\/perseus.de\/wp-content\/uploads\/2026\/07\/Coverbild-Gefahrenwarnung_ES-300x75.png 300w, https:\/\/perseus.de\/wp-content\/uploads\/2026\/07\/Coverbild-Gefahrenwarnung_ES-768x192.png 768w, https:\/\/perseus.de\/wp-content\/uploads\/2026\/07\/Coverbild-Gefahrenwarnung_ES.png 1200w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-1258a43 e-flex e-con-boxed e-con e-parent\" data-id=\"1258a43\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-2de4e88 e-con-full e-flex e-con e-child\" data-id=\"2de4e88\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-4982c80 elementor-widget elementor-widget-text-editor\" data-id=\"4982c80\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h6>30.07.2026<\/h6>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8348bc5 elementor-widget elementor-widget-heading\" data-id=\"8348bc5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Ataques activos a WordPress: Vulnerabilidad cr\u00edtica permite la toma total de control de sitios web\n<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-eb03842 e-con-full e-flex e-con e-child\" data-id=\"eb03842\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-91d0988 elementor-widget elementor-widget-text-editor\" data-id=\"91d0988\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>  <\/p><p class=\"PDq2pG_selectionAnchorContainer\" data-start=\"194\" data-end=\"422\"><strong data-start=\"194\" data-end=\"422\">Actualmente, hay una oleada creciente de ataques a sitios web de WordPress en todo el mundo. Los ciberdelincuentes explotan vulnerabilidades cr\u00edticas para atacar sistemas vulnerables y, en el peor de los casos, toman el control por completo. <\/strong><\/p><p data-start=\"427\" data-end=\"631\"><strong data-start=\"427\" data-end=\"631\">Es especialmente cr\u00edtico que la vulnerabilidad est\u00e9 localizada directamente en el n\u00facleo de WordPress y no en un plugin o tema. Esto puede afectar a numerosas instalaciones de WordPress. <\/strong><\/p><p data-start=\"636\" data-end=\"960\"><strong data-start=\"636\" data-end=\"960\">Tambi\u00e9n estamos observando actualmente un n\u00famero creciente de incidentes de seguridad relacionados con instalaciones comprometidas de WordPress como parte de nuestras misiones de respuesta a incidentes. Esto subraya la importancia de actualizar los sistemas afectados de forma oportuna y comprobar si hay signos de compromiso. <\/strong><\/p><p data-start=\"965\" data-end=\"1129\"><strong data-start=\"965\" data-end=\"1129\">A continuaci\u00f3n, aprender\u00e1s c\u00f3mo funciona la cadena de ataques, por qu\u00e9 supone un alto riesgo para las empresas y qu\u00e9 medidas se recomiendan actualmente.<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-ceb0f40 e-flex e-con-boxed e-con e-parent\" data-id=\"ceb0f40\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-ffbdc12 elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"ffbdc12\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-02dd0e9 e-flex e-con-boxed e-con e-parent\" data-id=\"02dd0e9\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-16d621d e-con-full e-flex e-con e-child\" data-id=\"16d621d\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-89904c7 elementor-widget elementor-widget-text-editor\" data-id=\"89904c7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>\u00bfQu\u00e9 ha pasado?<\/b><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-fae461d e-con-full e-flex e-con e-child\" data-id=\"fae461d\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-0f04793 elementor-widget elementor-widget-text-editor\" data-id=\"0f04793\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"PDq2pG_selectionAnchorContainer\" data-start=\"752\" data-end=\"1158\">La cadena de ataques conocida como <strong data-start=\"772\" data-end=\"786\">\u00abWP2Shell\u00bb<\/strong> combina dos vulnerabilidades (<strong data-start=\"842\" data-end=\"860\">CVE-2026-63030<\/strong> y <strong data-start=\"865\" data-end=\"883\">CVE-2026-60137<\/strong>). En conjunto, permiten a los atacantes manipular consultas a bases de datos (<strong data-start=\"962\" data-end=\"1020\">inyecci\u00f3n SQL \u2013 la inyecci\u00f3n de comandos de base de datos<\/strong>) y luego ejecutar su propio c\u00f3digo malicioso en el servidor web (<strong data-start=\"1088\" data-end=\"1156\">ejecuci\u00f3n remota de c\u00f3digo \u2013 la ejecuci\u00f3n remota de comandos<\/strong>). <\/p><p data-start=\"1160\" data-end=\"1683\"><strong data-start=\"1181\" data-end=\"1212\">No se requieren credenciales v\u00e1lidas<\/strong> para el ataque. En su lugar, los atacantes utilizan las vulnerabilidades para eludir los mecanismos de seguridad y tomar el control de una instalaci\u00f3n vulnerable de WordPress. Tras un compromiso exitoso, se pueden instalar <strong data-start=\"1458\" data-end=\"1556\">web shells (programas que dan acceso remoto permanente al servidor a los atacantes)<\/strong> u otras puertas traseras, manipular sitios web, propagar malware o robar datos confidenciales.  <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-54c68ef e-flex e-con-boxed e-con e-parent\" data-id=\"54c68ef\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-96849ac elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"96849ac\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-174b215 e-flex e-con-boxed e-con e-parent\" data-id=\"174b215\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-e560a6b e-con-full e-flex e-con e-child\" data-id=\"e560a6b\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-013b67e elementor-widget elementor-widget-text-editor\" data-id=\"013b67e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>\u00bfPor qu\u00e9 es esto tan importante?<\/b><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-a72ed48 e-con-full e-flex e-con e-child\" data-id=\"a72ed48\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-db8754f elementor-widget elementor-widget-text-editor\" data-id=\"db8754f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"PDq2pG_selectionAnchorContainer\" data-start=\"1721\" data-end=\"1919\">La cadena de ataque alcanza uno de los niveles de severidad m\u00e1s altos posibles, con una <strong data-start=\"1758\" data-end=\"1794\">puntuaci\u00f3n CVSS de 9,8 sobre 10 puntos<\/strong> . Sin embargo, es especialmente cr\u00edtico que la vulnerabilidad ya est\u00e9 siendo explotada activamente. <\/p><p data-start=\"1921\" data-end=\"2358\">Tambi\u00e9n estamos observando actualmente un n\u00famero creciente de incidentes de seguridad relacionados con instalaciones comprometidas de WordPress como parte de nuestras <strong data-start=\"1959\" data-end=\"1989\">misiones de respuesta a incidentes<\/strong> . En varios casos, los atacantes obtuvieron acceso permanente al servidor web mediante <strong data-start=\"2172\" data-end=\"2185\">interfaces web<\/strong> instaladas, robaron datos sensibles o utilizaron sistemas comprometidos para atacar otros sitios web dentro del mismo entorno de alojamiento. <\/p><p data-start=\"2360\" data-end=\"2661\">Dado que WordPress es uno de los <strong data-start=\"2416\" data-end=\"2453\">sistemas de gesti\u00f3n de contenidos (CMS)<\/strong> m\u00e1s utilizados en el mundo y muchos sitios web son accesibles p\u00fablicamente, los atacantes buscan autom\u00e1ticamente instalaciones vulnerables. Los sistemas que no se actualizan pueden verse comprometidos en un corto periodo de tiempo. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-54465d1 e-flex e-con-boxed e-con e-parent\" data-id=\"54465d1\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d02be9e elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"d02be9e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-d3f9227 e-flex e-con-boxed e-con e-parent\" data-id=\"d3f9227\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-6059711 e-con-full e-flex e-con e-child\" data-id=\"6059711\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-26eea72 elementor-widget elementor-widget-text-editor\" data-id=\"26eea72\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>\u00bfQu\u00e9 se ve afectado? <\/b><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-724b6c6 e-con-full e-flex e-con e-child\" data-id=\"724b6c6\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f0c2fb4 elementor-widget elementor-widget-text-editor\" data-id=\"f0c2fb4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<table class=\"m_-5732044313742528098list_block\" role=\"presentation\" border=\"0\" width=\"100%\" cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td><div><ul><li>WordPress 6.8.0-6.8.5 (solo afectado por CVE-2026-60137)<\/li><li>WordPress 6.9.0 a 6.9.4<\/li><li>WordPress 7.0.0 a 7.0.1<\/li><li>Beta de WordPress 7.1<\/li><\/ul><\/div><\/td><\/tr><\/tbody><\/table><table role=\"presentation\" border=\"0\" width=\"100%\" cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td><div><p>Las siguientes versiones de WordPress no se ven afectadas, ya que la vulnerabilidad ya se ha corregido all\u00ed. Deber\u00edas actualizar tus sistemas a estas versiones: <\/p><\/div><\/td><\/tr><\/tbody><\/table><table class=\"m_-5732044313742528098list_block\" role=\"presentation\" border=\"0\" width=\"100%\" cellspacing=\"0\" cellpadding=\"0\"><tbody><tr><td><div><ul><li>WordPress 6.8.6<\/li><li>WordPress 6.9.5<\/li><li><a href=\"https:\/\/fwtrackfm.perseus.de\/v1\/clk\/dTRb6GPDSVCKWg8pxM9KAg,D_o9E3hEQYe8ZK2W_VeWFA,3,aHR0cHM6Ly93b3JkcHJlc3Mub3JnL25ld3MvY2F0ZWdvcnkvc2VjdXJpdHkv,1,N18xXzg0MDg4NzMzNTIzNDk3OTk5MQ,dXYx,U0lHMQ,MTAwMQ,3Q4LWOt-E_DxEZRNV5-YDp0L6MzHNghliQy0TrZf3X4\" target=\"_blank\" rel=\"noopener\" data-saferedirecturl=\"https:\/\/www.google.com\/url?q=https:\/\/fwtrackfm.perseus.de\/v1\/clk\/dTRb6GPDSVCKWg8pxM9KAg,D_o9E3hEQYe8ZK2W_VeWFA,3,aHR0cHM6Ly93b3JkcHJlc3Mub3JnL25ld3MvY2F0ZWdvcnkvc2VjdXJpdHkv,1,N18xXzg0MDg4NzMzNTIzNDk3OTk5MQ,dXYx,U0lHMQ,MTAwMQ,3Q4LWOt-E_DxEZRNV5-YDp0L6MzHNghliQy0TrZf3X4&amp;source=gmail&amp;ust=1785569004316000&amp;usg=AOvVaw03LAlQUspSm4mPIhxdSi0G\">WordPress 7.0.2<\/a><\/li><li>WordPress 7.1 beta2<\/li><\/ul><\/div><\/td><\/tr><\/tbody><\/table>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-9e25b00 e-flex e-con-boxed e-con e-parent\" data-id=\"9e25b00\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-67b2d4e elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"67b2d4e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-c28550e e-flex e-con-boxed e-con e-parent\" data-id=\"c28550e\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-b5ac00b e-con-full e-flex e-con e-child\" data-id=\"b5ac00b\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-4467aca elementor-widget elementor-widget-text-editor\" data-id=\"4467aca\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>\u00bfC\u00f3mo puedo protegerme? <\/b><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-990ca5f e-con-full e-flex e-con e-child\" data-id=\"990ca5f\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-56e453f elementor-widget elementor-widget-text-editor\" data-id=\"56e453f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"PDq2pG_selectionAnchorContainer\" data-start=\"3441\" data-end=\"3632\">Las empresas y los operadores de sitios web deben comprobar r\u00e1pidamente si su instalaci\u00f3n de WordPress se ve afectada y tomar las medidas de protecci\u00f3n adecuadas. En particular, recomendamos los siguientes pasos: <\/p><ul data-start=\"3634\" data-end=\"4910\"><li data-section-id=\"1ivqdda\" data-start=\"3634\" data-end=\"3764\"><strong data-start=\"3636\" data-end=\"3684\">Revisa la versi\u00f3n de WordPress que est\u00e1s usando<\/strong> e instala las actualizaciones de seguridad disponibles lo antes posible.<\/li><li data-section-id=\"18z9c2i\" data-start=\"3766\" data-end=\"3989\"><strong data-start=\"3768\" data-end=\"3862\">Revisa tu instalaci\u00f3n de WordPress para ver si hay se\u00f1ales de posible compromiso posible.<\/strong>  En particular, comprueba si se han creado usuarios administradores desconocidos o si se han cambiado los derechos existentes de usuario.<\/li><li data-section-id=\"1y850d7\" data-start=\"3991\" data-end=\"4206\"><strong data-start=\"3993\" data-end=\"4055\">Revisa los plugins, temas y archivos instalados<\/strong> para detectar cambios inesperados o extensiones desconocidas. Estos pueden indicar manipulaci\u00f3n del sitio web o puertas traseras instaladas. <\/li><li data-section-id=\"1xb48c7\" data-start=\"4208\" data-end=\"4455\"><strong data-start=\"4210\" data-end=\"4271\">Revisa los registros del servidor web y de WordPress (los registros)<\/strong> para detectar accesos inusuales o actividades sospechosas. En particular, las solicitudes recurrentes o inusuales a la API REST de WordPress pueden proporcionar indicios de intentos de ataque. <\/li><li data-section-id=\"1vbv5ww\" data-start=\"4457\" data-end=\"4652\"><strong data-start=\"4459\" data-end=\"4516\">Escanea el servidor web en busca de archivos sospechosos<\/strong>, como <strong data-start=\"4537\" data-end=\"4620\">web shells (programas que permiten a los atacantes obtener acceso remoto permanente)<\/strong> u otros scripts desconocidos.<\/li><li data-section-id=\"1emv19o\" data-start=\"4654\" data-end=\"4910\"><strong data-start=\"4656\" data-end=\"4713\">Si hay indicios de un compromiso,<\/strong> es recomendable cambiar todas las credenciales de WordPress, base de datos y alojamiento. Tambi\u00e9n debe comprobarse si es necesaria una restauraci\u00f3n desde una copia de seguridad confiable. <\/li><\/ul><blockquote data-start=\"4912\" data-end=\"5359\"><p data-start=\"4914\" data-end=\"5359\"><strong data-start=\"4914\" data-end=\"4926\">Importante:<\/strong> Una actualizaci\u00f3n de seguridad evita m\u00e1s ataques, pero no elimina puertas traseras ni malware que ya hayan sido instalados. Si existe sospecha de un compromiso exitoso, el incidente debe ser investigado primero forensemente. Solo entonces se deber\u00eda decidir si limpiar o restaurar el sistema para asegurar posibles pruebas y evaluar el alcance real del ataque.  <\/p><\/blockquote>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-a2790c7 e-flex e-con-boxed e-con e-parent\" data-id=\"a2790c7\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d4feb2c elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"d4feb2c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-7faf510 e-flex e-con-boxed e-con e-parent\" data-id=\"7faf510\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-9a087a2 e-con-full e-flex e-con e-child\" data-id=\"9a087a2\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-4a4eba5 elementor-widget elementor-widget-text-editor\" data-id=\"4a4eba5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>Conclusi\u00f3n  <\/b><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-f63aea7 e-con-full e-flex e-con e-child\" data-id=\"f63aea7\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-e249ee4 elementor-widget elementor-widget-text-editor\" data-id=\"e249ee4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"PDq2pG_selectionAnchorContainer\" data-start=\"5376\" data-end=\"5708\">La actual ola de ataques ilustra una vez m\u00e1s lo r\u00e1pido que los ciberdelincuentes explotan vulnerabilidades cr\u00edticas en aplicaciones web ampliamente utilizadas. Especialmente con sistemas p\u00fablicos como WordPress, puede haber solo unas pocas horas o d\u00edas entre la publicaci\u00f3n de una vulnerabilidad de seguridad y los primeros ataques. <\/p><p data-start=\"5710\" data-end=\"6003\">Por tanto, las empresas no solo deber\u00edan instalar las actualizaciones de seguridad disponibles de forma r\u00e1pida, sino tambi\u00e9n revisar regularmente sus sistemas en busca de signos de comprometimiento. Esto incluye, en particular, el control de cuentas de usuario, extensiones instaladas y registros del servidor web. <\/p><p class=\"\" data-start=\"6005\" data-end=\"6372\">Si quieres analizar m\u00e1s de cerca los ataques a los sistemas de gesti\u00f3n de contenidos y las medidas de protecci\u00f3n adecuadas, puedes encontrar m\u00e1s informaci\u00f3n en nuestro <strong data-start=\"6162\" data-end=\"6205\">documento t\u00e9cnico \u00ab<a href=\"https:\/\/perseus.de\/content-management-systeme-unter-beschuss\/\">CMS Systems under Attack<\/a>\u00ab.<\/strong> En \u00e9l, mostramos m\u00e9todos t\u00edpicos de ataque, vulnerabilidades comunes y medidas probadas que pueden utilizarse para proteger eficazmente WordPress y otras soluciones CMS. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-8530d6c e-flex e-con-boxed e-con e-parent\" data-id=\"8530d6c\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-3bbb54c elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"3bbb54c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f2d97c9 elementor-widget elementor-widget-text-editor\" data-id=\"f2d97c9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><i>\u00bfQuieres mantenerte informado sobre las amenazas actuales y vulnerabilidades de seguridad?<\/i><\/p><p><i>Suscr\u00edbete a nuestro bolet\u00edn y recibe advertencias importantes, recomendaciones de acci\u00f3n y evaluaciones de los riesgos cibern\u00e9ticos actuales directamente en tu bandeja de entrada.<\/i><\/p><p><b>Fuentes y m\u00e1s informaci\u00f3n<\/b><\/p><ul><li data-section-id=\"pt2o0k\" data-start=\"235\" data-end=\"425\"><strong data-start=\"237\" data-end=\"332\">CrowdSec \u2013 Informe de seguimiento de vulnerabilidades: CVE-2026-63030 \u2013 WordPress \u00abWP2Shell\u00bb SQLi-a-RCE<\/strong><br \/><a class=\"decorated-link\" href=\"https:\/\/www.crowdsec.net\/vulntracking-report\/cve-2026-63030-wordpress-wp2shell-sqli-to-rce\" target=\"_new\" rel=\"noopener\" data-start=\"335\" data-end=\"425\">https:\/\/www.crowdsec.net\/vulntracking-report\/cve-2026-63030-wordpress-wp2shell-sqli-to-rce<\/a><\/li><li data-section-id=\"1wpxktt\" data-start=\"427\" data-end=\"510\"><strong data-start=\"429\" data-end=\"462\">WordPress \u2013 Versiones de seguridad<\/strong><br \/><a class=\"decorated-link\" href=\"https:\/\/wordpress.org\/news\/category\/security\/\" target=\"_new\" rel=\"noopener\" data-start=\"465\" data-end=\"510\">https:\/\/wordpress.org\/news\/category\/security\/<\/a><\/li><li data-section-id=\"itoaa7\" data-start=\"512\" data-end=\"627\"><strong data-start=\"514\" data-end=\"577\">Base de Datos Nacional de Vulnerabilidades del NIST (NVD) &#8211; CVE-2026-63030<\/strong><br \/><a class=\"decorated-link\" href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-63030\" target=\"_new\" rel=\"noopener\" data-start=\"580\" data-end=\"627\">https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-63030<\/a><\/li><li data-section-id=\"1c6r24v\" data-start=\"629\" data-end=\"744\"><strong data-start=\"631\" data-end=\"694\">Base de Datos Nacional de Vulnerabilidades del NIST (NVD) &#8211; CVE-2026-60137<\/strong><br \/><a class=\"decorated-link\" href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-60137\" target=\"_new\" rel=\"noopener\" data-start=\"697\" data-end=\"744\">https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-60137<\/a><\/li><li data-section-id=\"rx2tup\" data-start=\"746\" data-end=\"882\"><strong data-start=\"748\" data-end=\"815\">Tecnolog\u00edas de escape \u2013 WP2Shell: CVE-2026-63030 &amp; CVE-2026-60137<\/strong><br \/><a class=\"decorated-link\" href=\"https:\/\/escape.tech\/blog\/wp2shell-cve-2026-63030-cve-2026-60137\/\" target=\"_new\" rel=\"noopener\" data-start=\"818\" data-end=\"882\">https:\/\/escape.tech\/blog\/wp2shell-cve-2026-63030-cve-2026-60137\/<\/a><\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-9f86355 e-flex e-con-boxed e-con e-parent\" data-id=\"9f86355\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-dd90633 elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"dd90633\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Actualmente, hay una oleada creciente de ataques a sitios web de WordPress en todo el mundo. Los ciberdelincuentes explotan vulnerabilidades cr\u00edticas para atacar sistemas vulnerables y, en el peor de los casos, toman el control por completo. <\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[22],"tags":[],"class_list":["post-30007","post","type-post","status-publish","format-standard","hentry","category-gefahrenwarnung"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.3 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Ataques activos a WordPress: Vulnerabilidad cr\u00edtica permite la toma total de control de sitios web - Perseus Technologies<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/perseus.de\/aktive-angriffe-auf-wordpress-kritische-schwachstelle\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Ataques activos a WordPress: Vulnerabilidad cr\u00edtica permite la toma total de control de sitios web - Perseus Technologies\" \/>\n<meta property=\"og:description\" content=\"Actualmente, hay una oleada creciente de ataques a sitios web de WordPress en todo el mundo. Los ciberdelincuentes explotan vulnerabilidades cr\u00edticas para atacar sistemas vulnerables y, en el peor de los casos, toman el control por completo.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/perseus.de\/aktive-angriffe-auf-wordpress-kritische-schwachstelle\/\" \/>\n<meta property=\"og:site_name\" content=\"Perseus Technologies\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-31T07:55:18+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-10T08:16:23+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/perseus.de\/wp-content\/uploads\/2026\/07\/Coverbild-Gefahrenwarnung_ES.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"300\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Anastasia Pamoukis\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"Anastasia Pamoukis\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/perseus.de\\\/aktive-angriffe-auf-wordpress-kritische-schwachstelle\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/aktive-angriffe-auf-wordpress-kritische-schwachstelle\\\/\"},\"author\":{\"name\":\"Anastasia Pamoukis\",\"@id\":\"https:\\\/\\\/perseus.de\\\/#\\\/schema\\\/person\\\/6c87a2feea6439d0ead16c8f0f07e40b\"},\"headline\":\"Ataques activos a WordPress: Vulnerabilidad cr\u00edtica permite la toma total de control de sitios web\",\"datePublished\":\"2026-07-31T07:55:18+00:00\",\"dateModified\":\"2026-08-10T08:16:23+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/aktive-angriffe-auf-wordpress-kritische-schwachstelle\\\/\"},\"wordCount\":1095,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/aktive-angriffe-auf-wordpress-kritische-schwachstelle\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/perseus.de\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Coverbild-Gefahrenwarnung_ES-1024x256.png\",\"articleSection\":[\"Gefahrenwarnung\"],\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/perseus.de\\\/aktive-angriffe-auf-wordpress-kritische-schwachstelle\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/perseus.de\\\/aktive-angriffe-auf-wordpress-kritische-schwachstelle\\\/\",\"url\":\"https:\\\/\\\/perseus.de\\\/aktive-angriffe-auf-wordpress-kritische-schwachstelle\\\/\",\"name\":\"Ataques activos a WordPress: Vulnerabilidad cr\u00edtica permite la toma total de control de sitios web - Perseus Technologies\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/aktive-angriffe-auf-wordpress-kritische-schwachstelle\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/aktive-angriffe-auf-wordpress-kritische-schwachstelle\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/perseus.de\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Coverbild-Gefahrenwarnung_ES-1024x256.png\",\"datePublished\":\"2026-07-31T07:55:18+00:00\",\"dateModified\":\"2026-08-10T08:16:23+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/aktive-angriffe-auf-wordpress-kritische-schwachstelle\\\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/perseus.de\\\/aktive-angriffe-auf-wordpress-kritische-schwachstelle\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/perseus.de\\\/aktive-angriffe-auf-wordpress-kritische-schwachstelle\\\/#primaryimage\",\"url\":\"https:\\\/\\\/perseus.de\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Coverbild-Gefahrenwarnung_ES-1024x256.png\",\"contentUrl\":\"https:\\\/\\\/perseus.de\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Coverbild-Gefahrenwarnung_ES-1024x256.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/perseus.de\\\/aktive-angriffe-auf-wordpress-kritische-schwachstelle\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/perseus.de\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Ataques activos a WordPress: Vulnerabilidad cr\u00edtica permite la toma total de control de sitios web\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/perseus.de\\\/#website\",\"url\":\"https:\\\/\\\/perseus.de\\\/\",\"name\":\"perseus-web.de\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/perseus.de\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/perseus.de\\\/#organization\",\"name\":\"perseus-web.de\",\"url\":\"https:\\\/\\\/perseus.de\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/perseus.de\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/perseus.de\\\/wp-content\\\/uploads\\\/2025\\\/03\\\/PerseusTechnologie_Color-2.png\",\"contentUrl\":\"https:\\\/\\\/perseus.de\\\/wp-content\\\/uploads\\\/2025\\\/03\\\/PerseusTechnologie_Color-2.png\",\"width\":536,\"height\":172,\"caption\":\"perseus-web.de\"},\"image\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/perseus.de\\\/#\\\/schema\\\/person\\\/6c87a2feea6439d0ead16c8f0f07e40b\",\"name\":\"Anastasia Pamoukis\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/88febef1895859fc3a543c774ae6bc44cde0f02199f7f792af67eaf196406342?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/88febef1895859fc3a543c774ae6bc44cde0f02199f7f792af67eaf196406342?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/88febef1895859fc3a543c774ae6bc44cde0f02199f7f792af67eaf196406342?s=96&d=mm&r=g\",\"caption\":\"Anastasia Pamoukis\"},\"sameAs\":[\"https:\\\/\\\/perseus.de\"],\"url\":\"https:\\\/\\\/perseus.de\\\/es\\\/author\\\/anastasia-pamoukis\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Ataques activos a WordPress: Vulnerabilidad cr\u00edtica permite la toma total de control de sitios web - Perseus Technologies","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/perseus.de\/aktive-angriffe-auf-wordpress-kritische-schwachstelle\/","og_locale":"es_ES","og_type":"article","og_title":"Ataques activos a WordPress: Vulnerabilidad cr\u00edtica permite la toma total de control de sitios web - Perseus Technologies","og_description":"Actualmente, hay una oleada creciente de ataques a sitios web de WordPress en todo el mundo. Los ciberdelincuentes explotan vulnerabilidades cr\u00edticas para atacar sistemas vulnerables y, en el peor de los casos, toman el control por completo.","og_url":"https:\/\/perseus.de\/aktive-angriffe-auf-wordpress-kritische-schwachstelle\/","og_site_name":"Perseus Technologies","article_published_time":"2026-07-31T07:55:18+00:00","article_modified_time":"2026-08-10T08:16:23+00:00","og_image":[{"width":1200,"height":300,"url":"https:\/\/perseus.de\/wp-content\/uploads\/2026\/07\/Coverbild-Gefahrenwarnung_ES.png","type":"image\/png"}],"author":"Anastasia Pamoukis","twitter_card":"summary_large_image","twitter_misc":{"Escrito por":"Anastasia Pamoukis","Tiempo de lectura":"5 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/perseus.de\/aktive-angriffe-auf-wordpress-kritische-schwachstelle\/#article","isPartOf":{"@id":"https:\/\/perseus.de\/aktive-angriffe-auf-wordpress-kritische-schwachstelle\/"},"author":{"name":"Anastasia Pamoukis","@id":"https:\/\/perseus.de\/#\/schema\/person\/6c87a2feea6439d0ead16c8f0f07e40b"},"headline":"Ataques activos a WordPress: Vulnerabilidad cr\u00edtica permite la toma total de control de sitios web","datePublished":"2026-07-31T07:55:18+00:00","dateModified":"2026-08-10T08:16:23+00:00","mainEntityOfPage":{"@id":"https:\/\/perseus.de\/aktive-angriffe-auf-wordpress-kritische-schwachstelle\/"},"wordCount":1095,"commentCount":0,"publisher":{"@id":"https:\/\/perseus.de\/#organization"},"image":{"@id":"https:\/\/perseus.de\/aktive-angriffe-auf-wordpress-kritische-schwachstelle\/#primaryimage"},"thumbnailUrl":"https:\/\/perseus.de\/wp-content\/uploads\/2026\/07\/Coverbild-Gefahrenwarnung_ES-1024x256.png","articleSection":["Gefahrenwarnung"],"inLanguage":"es","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/perseus.de\/aktive-angriffe-auf-wordpress-kritische-schwachstelle\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/perseus.de\/aktive-angriffe-auf-wordpress-kritische-schwachstelle\/","url":"https:\/\/perseus.de\/aktive-angriffe-auf-wordpress-kritische-schwachstelle\/","name":"Ataques activos a WordPress: Vulnerabilidad cr\u00edtica permite la toma total de control de sitios web - Perseus Technologies","isPartOf":{"@id":"https:\/\/perseus.de\/#website"},"primaryImageOfPage":{"@id":"https:\/\/perseus.de\/aktive-angriffe-auf-wordpress-kritische-schwachstelle\/#primaryimage"},"image":{"@id":"https:\/\/perseus.de\/aktive-angriffe-auf-wordpress-kritische-schwachstelle\/#primaryimage"},"thumbnailUrl":"https:\/\/perseus.de\/wp-content\/uploads\/2026\/07\/Coverbild-Gefahrenwarnung_ES-1024x256.png","datePublished":"2026-07-31T07:55:18+00:00","dateModified":"2026-08-10T08:16:23+00:00","breadcrumb":{"@id":"https:\/\/perseus.de\/aktive-angriffe-auf-wordpress-kritische-schwachstelle\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/perseus.de\/aktive-angriffe-auf-wordpress-kritische-schwachstelle\/"]}]},{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/perseus.de\/aktive-angriffe-auf-wordpress-kritische-schwachstelle\/#primaryimage","url":"https:\/\/perseus.de\/wp-content\/uploads\/2026\/07\/Coverbild-Gefahrenwarnung_ES-1024x256.png","contentUrl":"https:\/\/perseus.de\/wp-content\/uploads\/2026\/07\/Coverbild-Gefahrenwarnung_ES-1024x256.png"},{"@type":"BreadcrumbList","@id":"https:\/\/perseus.de\/aktive-angriffe-auf-wordpress-kritische-schwachstelle\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/perseus.de\/"},{"@type":"ListItem","position":2,"name":"Ataques activos a WordPress: Vulnerabilidad cr\u00edtica permite la toma total de control de sitios web"}]},{"@type":"WebSite","@id":"https:\/\/perseus.de\/#website","url":"https:\/\/perseus.de\/","name":"perseus-web.de","description":"","publisher":{"@id":"https:\/\/perseus.de\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/perseus.de\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Organization","@id":"https:\/\/perseus.de\/#organization","name":"perseus-web.de","url":"https:\/\/perseus.de\/","logo":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/perseus.de\/#\/schema\/logo\/image\/","url":"https:\/\/perseus.de\/wp-content\/uploads\/2025\/03\/PerseusTechnologie_Color-2.png","contentUrl":"https:\/\/perseus.de\/wp-content\/uploads\/2025\/03\/PerseusTechnologie_Color-2.png","width":536,"height":172,"caption":"perseus-web.de"},"image":{"@id":"https:\/\/perseus.de\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/perseus.de\/#\/schema\/person\/6c87a2feea6439d0ead16c8f0f07e40b","name":"Anastasia Pamoukis","image":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/secure.gravatar.com\/avatar\/88febef1895859fc3a543c774ae6bc44cde0f02199f7f792af67eaf196406342?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/88febef1895859fc3a543c774ae6bc44cde0f02199f7f792af67eaf196406342?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/88febef1895859fc3a543c774ae6bc44cde0f02199f7f792af67eaf196406342?s=96&d=mm&r=g","caption":"Anastasia Pamoukis"},"sameAs":["https:\/\/perseus.de"],"url":"https:\/\/perseus.de\/es\/author\/anastasia-pamoukis\/"}]}},"_links":{"self":[{"href":"https:\/\/perseus.de\/es\/wp-json\/wp\/v2\/posts\/30007","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/perseus.de\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/perseus.de\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/perseus.de\/es\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/perseus.de\/es\/wp-json\/wp\/v2\/comments?post=30007"}],"version-history":[{"count":4,"href":"https:\/\/perseus.de\/es\/wp-json\/wp\/v2\/posts\/30007\/revisions"}],"predecessor-version":[{"id":30048,"href":"https:\/\/perseus.de\/es\/wp-json\/wp\/v2\/posts\/30007\/revisions\/30048"}],"wp:attachment":[{"href":"https:\/\/perseus.de\/es\/wp-json\/wp\/v2\/media?parent=30007"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/perseus.de\/es\/wp-json\/wp\/v2\/categories?post=30007"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/perseus.de\/es\/wp-json\/wp\/v2\/tags?post=30007"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}