{"id":30479,"date":"2026-08-25T07:31:19","date_gmt":"2026-08-25T05:31:19","guid":{"rendered":"https:\/\/perseus.de\/beveiligingswaarschuwing-kritieke-kwetsbaarheden-in-wordpress-plugins\/"},"modified":"2026-08-25T16:19:32","modified_gmt":"2026-08-25T14:19:32","slug":"beveiligingswaarschuwing-kritieke-kwetsbaarheden-in-wordpress-plugins","status":"publish","type":"post","link":"https:\/\/perseus.de\/nl\/beveiligingswaarschuwing-kritieke-kwetsbaarheden-in-wordpress-plugins\/","title":{"rendered":"Beveiligingswaarschuwing: Kritieke kwetsbaarheden in WordPress-plugins"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"30479\" class=\"elementor elementor-30479 elementor-30371\" data-elementor-post-type=\"post\">\n\t\t\t\t<div class=\"elementor-element elementor-element-dcf4ec4 e-flex e-con-boxed e-con e-parent\" data-id=\"dcf4ec4\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-e1db58c elementor-widget elementor-widget-image\" data-id=\"e1db58c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"800\" height=\"200\" src=\"https:\/\/perseus.de\/wp-content\/uploads\/2025\/04\/Gefahrenwarnung-Headerbild-Website-2025-1024x256.png\" class=\"attachment-large size-large wp-image-30478\" alt=\"\" srcset=\"https:\/\/perseus.de\/wp-content\/uploads\/2025\/04\/Gefahrenwarnung-Headerbild-Website-2025-1024x256.png 1024w, https:\/\/perseus.de\/wp-content\/uploads\/2025\/04\/Gefahrenwarnung-Headerbild-Website-2025-300x75.png 300w, https:\/\/perseus.de\/wp-content\/uploads\/2025\/04\/Gefahrenwarnung-Headerbild-Website-2025-768x192.png 768w, https:\/\/perseus.de\/wp-content\/uploads\/2025\/04\/Gefahrenwarnung-Headerbild-Website-2025.png 1200w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-1258a43 e-flex e-con-boxed e-con e-parent\" data-id=\"1258a43\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-2de4e88 e-con-full e-flex e-con e-child\" data-id=\"2de4e88\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-4982c80 elementor-widget elementor-widget-text-editor\" data-id=\"4982c80\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h6>24.08.2026<\/h6>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8348bc5 elementor-widget elementor-widget-heading\" data-id=\"8348bc5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Kritieke kwetsbaarheden in WordPress-plugins:<br \/><br \/>\nForminatorvormen en Royal Elementor Addons.<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-eb03842 e-con-full e-flex e-con e-child\" data-id=\"eb03842\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-91d0988 elementor-widget elementor-widget-text-editor\" data-id=\"91d0988\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>  <\/p><p class=\"PDq2pG_selectionAnchorContainer\" data-start=\"147\" data-end=\"603\"><strong data-start=\"147\" data-end=\"603\">Huidige beveiligingslekken zijn ontdekt in twee veelgebruikte WordPress-plugins. Forminator Forms en Royal Elementor Addons worden be\u00efnvloed. Een kwetsbaarheid in Forminator Forms is bijzonder kritiek: onder bepaalde omstandigheden kunnen dreigingsactoren kwaadaardige code uitvoeren op een WordPress-website zonder geldige inloggegevens en in het ergste geval deze volledig overnemen. De plugin is actief op meer dan 600.000 WordPress-websites.<\/strong><\/p><p data-start=\"608\" data-end=\"773\">Er werd ook een beveiligingslek ontdekt in Royal Elementor Addons die aanvallers in staat kon stellen een WordPress-website te misbruiken om toegang te krijgen tot interne systemen.<\/p><p data-start=\"778\" data-end=\"988\" data-is-last-node=\"\"><strong data-start=\"778\" data-end=\"988\" data-is-last-node=\"\">In dit artikel geven we een overzicht van de twee kwetsbaarheden, leggen we uit welke versies getroffen zijn en laten we zien welke maatregelen WordPress-websitebeheerders nu moeten nemen.<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-ceb0f40 e-flex e-con-boxed e-con e-parent\" data-id=\"ceb0f40\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-ffbdc12 elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"ffbdc12\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e8d5e68 elementor-widget elementor-widget-spacer\" data-id=\"e8d5e68\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-c054958 e-flex e-con-boxed e-con e-parent\" data-id=\"c054958\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-aa3e4fa elementor-widget elementor-widget-heading\" data-id=\"aa3e4fa\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"forminator\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">1. Kritieke kwetsbaarheid in Forminator-vormen  <\/h4>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-42b4f7d e-flex e-con-boxed e-con e-parent\" data-id=\"42b4f7d\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-eeaec64 elementor-widget elementor-widget-spacer\" data-id=\"eeaec64\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-02dd0e9 e-flex e-con-boxed e-con e-parent\" data-id=\"02dd0e9\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-16d621d e-con-full e-flex e-con e-child\" data-id=\"16d621d\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-89904c7 elementor-widget elementor-widget-text-editor\" data-id=\"89904c7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>Wat is er gebeurd?<\/b><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-fae461d e-con-full e-flex e-con e-child\" data-id=\"fae461d\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-0f04793 elementor-widget elementor-widget-text-editor\" data-id=\"0f04793\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>De <span style=\"font-weight: 400;\"> kritieke beveiligingskwetsbaarheid<\/span><a href=\"https:\/\/www.wordfence.com\/blog\/2026\/08\/600000-wordpress-sites-affected-by-arbitrary-file-upload-vulnerability-in-forminator-forms-wordpress-plugin\/\"> <span style=\"font-weight: 400;\">CVE-2026-15748<\/span><\/a> is ontdekt <span style=\"font-weight: 400;\">in de WordPress-plugin <\/span><b>Forminator Forms<\/b><span style=\"font-weight: 400;\">. De plugin wordt onder andere gebruikt om contactformulieren, enqu\u00eates en andere formulieren op WordPress-websites te integreren.<\/span><\/p><p><span style=\"font-weight: 400;\">De kwetsbaarheid treft versies tot en met <\/span><b>1.56.1<\/b><span style=\"font-weight: 400;\"> en stelt aanvallers in staat om gemanipuleerde bestanden onder bepaalde voorwaarden naar de webserver te uploaden. Bijzonder kritiek: <\/span><b>Er is geen geldige toegangsgegevens<\/b> vereist voor een aanval <span style=\"font-weight: 400;\"> .<\/span><\/p><p><span style=\"font-weight: 400;\">De voorwaarde voor een succesvolle aanval is dat een formulier dat met Forminator op de getroffen website is aangemaakt, zowel een veld voor bestandsuploads als een selectieveld bevat.<\/span><\/p><p data-start=\"1160\" data-end=\"1683\">Voor de aanval <strong data-start=\"1181\" data-end=\"1212\">zijn geen geldige inloggegevens vereist<\/strong> . In plaats daarvan gebruiken de aanvallers de kwetsbaarheden om beveiligingsmechanismen te omzeilen en controle te krijgen over een kwetsbare WordPress-installatie. Na een succesvolle compromis kunnen <strong data-start=\"1458\" data-end=\"1556\">webshells (programma&#8217;s die aanvallers permanente externe toegang tot de server geven)<\/strong> of andere achterdeurtjes worden ge\u00efnstalleerd, kunnen websites worden gemanipuleerd, kan malware worden verspreid of kan vertrouwelijke data worden gestolen.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-54c68ef e-flex e-con-boxed e-con e-parent\" data-id=\"54c68ef\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-96849ac elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"96849ac\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-174b215 e-flex e-con-boxed e-con e-parent\" data-id=\"174b215\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-e560a6b e-con-full e-flex e-con e-child\" data-id=\"e560a6b\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-013b67e elementor-widget elementor-widget-text-editor\" data-id=\"013b67e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>Wat kan ik doen?<\/b><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-a72ed48 e-con-full e-flex e-con e-child\" data-id=\"a72ed48\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-db8754f elementor-widget elementor-widget-text-editor\" data-id=\"db8754f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Wij bevelen de volgende maatregelen aan voor bedrijven en websitebeheerders<\/span><\/p><ol><li style=\"font-weight: 400;\" aria-level=\"1\"><b>: Controleer of Forminator Forms op uw WordPress-website is ge\u00efnstalleerd<\/b><span style=\"font-weight: 400;\"> en welke versie wordt gebruikt.<\/span><\/li>Update <li style=\"font-weight: 400;\" aria-level=\"1\"><b>de plug-in direct<\/b> <span style=\"font-weight: 400;\">als versie 1.56.1 of eerder is ge\u00efnstalleerd. De kwetsbaarheid is opgelost met <\/span><b>versie 1.56.2<\/b><span style=\"font-weight: 400;\">. Installeer indien mogelijk de nieuwste beschikbare versie.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Controleer als voorzorg de WordPress-installatie op verdachte wijzigingen<\/b><span style=\"font-weight: 400;\">, vooral onbekende bestanden, nieuwe beheerders of onverwachte wijzigingen in bestaande gebruikersaccounts.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Controleer de logs van de webserver op<\/b><span style=\"font-weight: 400;\"> ongebruikelijke bestandsuploads en verdachte toegangen.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Als er aanwijzingen zijn voor een compromis<\/b><span style=\"font-weight: 400;\">, moet het incident nader worden onderzocht. Een beveiligingsupdate verwijdert alleen geen malware of achterdeurtjes die al zijn ge\u00efnfiltreerd.<\/span><\/li><\/ol><p> <\/p><p><span style=\"font-weight: 400;\">Meer informatie over de kwetsbaarheid is te vinden bij<\/span><a href=\"https:\/\/www.wordfence.com\/blog\/2026\/08\/600000-wordpress-sites-affected-by-arbitrary-file-upload-vulnerability-in-forminator-forms-wordpress-plugin\/\"> <span style=\"font-weight: 400;\">Wordfence<\/span><\/a><span style=\"font-weight: 400;\"> en bij<\/span><a href=\"https:\/\/www.all-about-security.de\/forminator-forms-luecke-beim-datei-upload-betrifft-ueber-600-000-wordpress-seiten\/\"> <span style=\"font-weight: 400;\">All About Security<\/span><\/a><span style=\"font-weight: 400;\">. <\/span> <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-54465d1 e-flex e-con-boxed e-con e-parent\" data-id=\"54465d1\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d02be9e elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"d02be9e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-990ff39 e-flex e-con-boxed e-con e-parent\" data-id=\"990ff39\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-dd34598 elementor-widget elementor-widget-spacer\" data-id=\"dd34598\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d27064c elementor-widget elementor-widget-heading\" data-id=\"d27064c\" data-element_type=\"widget\" data-e-type=\"widget\" id=\"royal\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">2. Kwetsbaarheid in Royal Elementor Addons<\/h4>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e8dfb65 elementor-widget elementor-widget-spacer\" data-id=\"e8dfb65\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-c28550e e-flex e-con-boxed e-con e-parent\" data-id=\"c28550e\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-b5ac00b e-con-full e-flex e-con e-child\" data-id=\"b5ac00b\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-4467aca elementor-widget elementor-widget-text-editor\" data-id=\"4467aca\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>Wat is er gebeurd?<\/b><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-990ca5f e-con-full e-flex e-con e-child\" data-id=\"990ca5f\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-56e453f elementor-widget elementor-widget-text-editor\" data-id=\"56e453f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Er werd ook een beveiligingslek <span style=\"font-weight: 400;\">ontdekt in de WordPress-plugin <\/span><b>Royal Elementor Addons<\/b><span style=\"font-weight: 400;\">. Volgens<\/span> GitHub betreft de <a href=\"https:\/\/github.com\/advisories\/GHSA-mgg8-m984-r93c\"> <span style=\"font-weight: 400;\">CVE-2026-17123-kwetsbaarheid<\/span><\/a> <span style=\"font-weight: 400;\"> versies tot en met <\/span><b>1.7.1064<\/b><span style=\"font-weight: 400;\"> en werd <\/span><span style=\"font-weight: 400;\"> het beoordeeld als &#8220;hoog&#8221;<\/span> met een <b>CVSS-score van 8,8 van de 10 punten<\/b>.<\/p><p><span style=\"font-weight: 400;\">In tegenstelling tot de kwetsbaarheid in Forminator Forms, heeft een aanvaller al een WordPress-gebruikersaccount nodig met ten minste bijdrager- of werknemersrechten. Als criminelen echter al toegang hebben gekregen tot een WordPress-website \u2013 bijvoorbeeld door gebruik te maken van de kwetsbaarheid in Forminator Forms zoals hierboven beschreven \u2013 kunnen ze mogelijk een gebruikersaccount aanmaken met de benodigde rechten en vervolgens de kwetsbaarheid in Royal Elementor Addons benutten. Op deze manier kunnen verschillende kwetsbaarheden aan elkaar worden gekoppeld.<\/span><\/p><p><span style=\"font-weight: 400;\"><strong>Opmerking:<\/strong> Zelfs al bekende en nog niet gesloten WordPress-kwetsbaarheden worden nog steeds misbruikt door criminelen. We hebben al gewezen op overeenkomstige aanvalsmogelijkheden en het gebruik van webshells als permanente achterdeur in onze waarschuwing voor WP2Shell.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-a2790c7 e-flex e-con-boxed e-con e-parent\" data-id=\"a2790c7\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d4feb2c elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"d4feb2c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-7faf510 e-flex e-con-boxed e-con e-parent\" data-id=\"7faf510\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-9a087a2 e-con-full e-flex e-con e-child\" data-id=\"9a087a2\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-4a4eba5 elementor-widget elementor-widget-text-editor\" data-id=\"4a4eba5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>Hoe kan de kwetsbaarheid worden uitgebuit?<\/b><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-f63aea7 e-con-full e-flex e-con e-child\" data-id=\"f63aea7\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-e249ee4 elementor-widget elementor-widget-text-editor\" data-id=\"e249ee4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">De kwetsbaarheid is een <\/span><b>zogenaamde Server-Side Request Forgery (SSRF).<\/b><span style=\"font-weight: 400;\"> Simpel gezegd kan een aanvaller de getroffen webserver misleiden om verzoeken naar andere systemen te sturen namens hem.<\/span><\/p><p><span style=\"font-weight: 400;\">Als gevolg hiervan kan de WordPress-website <\/span> worden misbruikt <b>als uitgangspunt voor toegang tot interne systemen en diensten<\/b><span style=\"font-weight: 400;\"> die normaal gesproken niet direct toegankelijk zijn vanaf het internet. Op deze manier konden aanvallers interne informatie opvragen of wijzigen.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-4e3ed27 e-flex e-con-boxed e-con e-parent\" data-id=\"4e3ed27\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-397d105 e-con-full e-flex e-con e-child\" data-id=\"397d105\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-6c3b879 elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"6c3b879\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-8cb2db8 e-flex e-con-boxed e-con e-parent\" data-id=\"8cb2db8\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-fbbec3e e-con-full e-flex e-con e-child\" data-id=\"fbbec3e\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-e6d3e3c e-con-full e-flex e-con e-child\" data-id=\"e6d3e3c\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-1f75a8b elementor-widget elementor-widget-text-editor\" data-id=\"1f75a8b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><b>Wat kan ik doen?<\/b><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-1433fc2 e-con-full e-flex e-con e-child\" data-id=\"1433fc2\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-9707813 elementor-widget elementor-widget-text-editor\" data-id=\"9707813\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">Wij bevelen de volgende maatregelen aan voor bedrijven en website-beheerders:<\/span><\/p><ol><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Controleer of Royal Elementor Addons op je WordPress-website is ge\u00efnstalleerd<\/b><span style=\"font-weight: 400;\"> en welke versie wordt gebruikt.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Werk het WordPress CMS bij naar de nieuwste beschikbare versie<\/b> <span style=\"font-weight: 400;\">om kwetsbaarheidsketening via WP2Shell of XSS2Shell te voorkomen.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Controleer bij de fabrikant of er een bijgewerkte versie beschikbaar is<\/b> <span style=\"font-weight: 400;\">waarin de kwetsbaarheid is opgelost. Momenteel toont het<\/span><a href=\"https:\/\/github.com\/advisories\/GHSA-mgg8-m984-r93c\"> <span style=\"font-weight: 400;\">GitHub Security Advisory<\/span><\/a> <span style=\"font-weight: 400;\"> nog geen specifieke gepatchte versie.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Controleer de bestaande WordPress-gebruikersaccounts en hun permissies.<\/b><span style=\"font-weight: 400;\"> Verwijder accounts die niet meer nodig zijn en draag alleen de rechten over die daadwerkelijk nodig zijn.<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><b>Als je een aanval vermoedt, controleer dan de webserver- en WordPress-logs<\/b><span style=\"font-weight: 400;\"> op ongebruikelijke activiteiten en verdachte uitgaande verbindingen.<\/span><\/li><\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-1ea7e9a e-flex e-con-boxed e-con e-parent\" data-id=\"1ea7e9a\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-7644ba2 e-con-full e-flex e-con e-child\" data-id=\"7644ba2\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f33a99d elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"f33a99d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-4ea0526 e-flex e-con-boxed e-con e-parent\" data-id=\"4ea0526\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-26e206a elementor-widget elementor-widget-text-editor\" data-id=\"26e206a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><span style=\"font-weight: 400;\">De huidige kwetsbaarheden tonen opnieuw aan dat niet alleen WordPress zelf, maar ook <\/span><b>ge\u00efnstalleerde plugins regelmatig gecontroleerd en bijgewerkt moeten worden<\/b><span style=\"font-weight: 400;\">. Bedrijven zouden daarom moeten controleren welke extensies op hun WordPress-websites worden gebruikt, onnodige plug-ins verwijderen en beschikbare beveiligingsupdates zo snel mogelijk installeren. <\/span><\/p><p><span style=\"font-weight: 400;\">Nog een opmerking: <\/span><b>indien mogelijk, schakel automatische updates in voor vertrouwde WordPress-plugins<\/b> <span style=\"font-weight: 400;\">zodat belangrijke beveiligingsupdates snel worden ge\u00efnstalleerd. <\/span><\/p><h4><b>In<\/b><\/h4><p><span style=\"font-weight: 400;\">onze huidige incidentresponsgevallen zien we steeds vaker aanvallen op WordPress-websites waarbij bekende kwetsbaarheden in het CMS of plug-ins worden misbruikt. De gevolgen vari\u00ebren van de volledige overname van de website en diefstal van toegangsgegevens tot het stelen van gevoelige klantgegevens. Vaak zijn verouderde systemen die niet op tijd worden bijgewerkt de oorzaak.<\/span><\/p><p><span style=\"font-weight: 400;\">We raden daarom consistent patchbeheer aan voor WordPress en alle gebruikte plugins. Daarnaast kan een webapplicatiefirewall (WAF) helpen om aanvalspogingen in een vroeg stadium te detecteren en blokkeren.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-8530d6c e-flex e-con-boxed e-con e-parent\" data-id=\"8530d6c\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-3bbb54c elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"3bbb54c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f2d97c9 elementor-widget elementor-widget-text-editor\" data-id=\"f2d97c9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><i>Wilt u op de hoogte blijven van actuele bedreigingen en beveiligingslekken?<\/i><\/p><p><i>Abonneer je op onze nieuwsbrief en ontvang belangrijke waarschuwingen, aanbevelingen voor actie en beoordelingen van actuele cyberrisico&#8217;s direct in je inbox.<\/i><\/p><p><b>Bronnen &#038; Verdere informatie<\/b><\/p><p> <\/p><p><em><strong>Forminatorformulieren &#8211; CVE-2026-15748<\/strong><\/em><\/p><ol><li style=\"font-weight: 400;\" aria-level=\"1\"><em><strong>Wordfence \u2013<a href=\"https:\/\/www.wordfence.com\/blog\/2026\/08\/600000-wordpress-sites-affected-by-arbitrary-file-upload-vulnerability-in-forminator-forms-wordpress-plugin\/?utm_source=chatgpt.com\"> <\/a><\/strong><\/em><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><em><strong>Kwetsbaarheidsintelligentieanalyse https:\/\/www.wordfence.com\/blog\/2026\/08\/600000-wordpress-sites-affected-by-arbitrary-file-upload-vulnerability-in-forminator-forms-wordpress-plugin\/ Wordfence \u2013 Kwetsbaarheidsintelligentie \/ Technische Details<a href=\"https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/forminator\/forminator-forms-1561-unauthenticated-arbitrary-file-upload-via-forged-upload-field-configuration?utm_source=chatgpt.com\"> https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/wordpress-plugins\/forminator\/forminator-forms-1561-unauthenticated-arbitrary-file-upload-via-forged-upload-field-configuration<\/a><\/strong><\/em><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><em><strong>Heise Security \u2013 Forminator Forms<a href=\"https:\/\/www.heise.de\/news\/WordPress-Plug-in-Forminator-Forms-Kritische-Luecke-erlaubt-Codeschmuggel-11416793.html\"> https:\/\/www.heise.de\/news\/WordPress-Plug-in-Forminator-Forms-Kritische-Luecke-erlaubt-Codeschmuggel-11416793.html<\/a><\/strong><\/em><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><em><strong>Alles over beveiliging \u2013 Forminatorformulieren<br\/><a href=\"https:\/\/www.all-about-security.de\/forminator-forms-luecke-beim-datei-upload-betrifft-ueber-600-000-wordpress-seiten\/?utm_source=chatgpt.com\">https:\/\/www.all-about-security.de\/forminator-forms-luecke-beim-datei-upload-betrifft-ueber-600-000-wordpress-seiten\/<\/a><\/strong><\/em><\/li><\/ol><p> <\/p><p><em><strong>Royal Elementor Addons \u2013 CVE-2026-17123<\/strong><\/em><\/p><ol><li style=\"font-weight: 400;\" aria-level=\"1\"><em><strong>GitHub Security Advisory \u2013 huidige kwetsbaarheid<br\/><a href=\"https:\/\/github.com\/advisories\/GHSA-mgg8-m984-r93c?utm_source=chatgpt.com\"> https:\/\/github.com\/advisories\/GHSA-mgg8-m984-r93c<\/a><\/strong><\/em><\/li><\/ol><p> <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-9f86355 e-flex e-con-boxed e-con e-parent\" data-id=\"9f86355\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-dd90633 elementor-widget-divider--view-line elementor-widget elementor-widget-divider\" data-id=\"dd90633\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Kritieke beveiligingslekken in de WordPress-plugins Forminator Forms en Royal Elementor Addons brengen tal van websites in gevaar. Ontdek welke versies nu zijn getroffen en welke maatregelen belangrijk zijn.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[79],"tags":[],"class_list":["post-30479","post","type-post","status-publish","format-standard","hentry","category-waarschuwing-voor-gevaar"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.3 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Beveiligingswaarschuwing: Kritieke kwetsbaarheden in WordPress-plugins - Perseus Technologies<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/perseus.de\/nl\/beveiligingswaarschuwing-kritieke-kwetsbaarheden-in-wordpress-plugins\/\" \/>\n<meta property=\"og:locale\" content=\"nl_NL\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Beveiligingswaarschuwing: Kritieke kwetsbaarheden in WordPress-plugins - Perseus Technologies\" \/>\n<meta property=\"og:description\" content=\"Kritieke beveiligingslekken in de WordPress-plugins Forminator Forms en Royal Elementor Addons brengen tal van websites in gevaar. Ontdek welke versies nu zijn getroffen en welke maatregelen belangrijk zijn.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/perseus.de\/nl\/beveiligingswaarschuwing-kritieke-kwetsbaarheden-in-wordpress-plugins\/\" \/>\n<meta property=\"og:site_name\" content=\"Perseus Technologies\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-25T05:31:19+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-25T14:19:32+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/perseus.de\/wp-content\/uploads\/2025\/04\/Gefahrenwarnung-Headerbild-Website-2025.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"300\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Anastasia Pamoukis\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Geschreven door\" \/>\n\t<meta name=\"twitter:data1\" content=\"Anastasia Pamoukis\" \/>\n\t<meta name=\"twitter:label2\" content=\"Geschatte leestijd\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minuten\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/perseus.de\\\/nl\\\/beveiligingswaarschuwing-kritieke-kwetsbaarheden-in-wordpress-plugins\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/nl\\\/beveiligingswaarschuwing-kritieke-kwetsbaarheden-in-wordpress-plugins\\\/\"},\"author\":{\"name\":\"Anastasia Pamoukis\",\"@id\":\"https:\\\/\\\/perseus.de\\\/nl\\\/#\\\/schema\\\/person\\\/6c87a2feea6439d0ead16c8f0f07e40b\"},\"headline\":\"Beveiligingswaarschuwing: Kritieke kwetsbaarheden in WordPress-plugins\",\"datePublished\":\"2026-08-25T05:31:19+00:00\",\"dateModified\":\"2026-08-25T14:19:32+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/nl\\\/beveiligingswaarschuwing-kritieke-kwetsbaarheden-in-wordpress-plugins\\\/\"},\"wordCount\":1004,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/nl\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/nl\\\/beveiligingswaarschuwing-kritieke-kwetsbaarheden-in-wordpress-plugins\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/perseus.de\\\/wp-content\\\/uploads\\\/2025\\\/04\\\/Gefahrenwarnung-Headerbild-Website-2025-1024x256.png\",\"articleSection\":[\"Waarschuwing voor gevaar\"],\"inLanguage\":\"nl-NL\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/perseus.de\\\/nl\\\/beveiligingswaarschuwing-kritieke-kwetsbaarheden-in-wordpress-plugins\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/perseus.de\\\/nl\\\/beveiligingswaarschuwing-kritieke-kwetsbaarheden-in-wordpress-plugins\\\/\",\"url\":\"https:\\\/\\\/perseus.de\\\/nl\\\/beveiligingswaarschuwing-kritieke-kwetsbaarheden-in-wordpress-plugins\\\/\",\"name\":\"Beveiligingswaarschuwing: Kritieke kwetsbaarheden in WordPress-plugins - Perseus Technologies\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/nl\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/nl\\\/beveiligingswaarschuwing-kritieke-kwetsbaarheden-in-wordpress-plugins\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/nl\\\/beveiligingswaarschuwing-kritieke-kwetsbaarheden-in-wordpress-plugins\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/perseus.de\\\/wp-content\\\/uploads\\\/2025\\\/04\\\/Gefahrenwarnung-Headerbild-Website-2025-1024x256.png\",\"datePublished\":\"2026-08-25T05:31:19+00:00\",\"dateModified\":\"2026-08-25T14:19:32+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/nl\\\/beveiligingswaarschuwing-kritieke-kwetsbaarheden-in-wordpress-plugins\\\/#breadcrumb\"},\"inLanguage\":\"nl-NL\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/perseus.de\\\/nl\\\/beveiligingswaarschuwing-kritieke-kwetsbaarheden-in-wordpress-plugins\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"nl-NL\",\"@id\":\"https:\\\/\\\/perseus.de\\\/nl\\\/beveiligingswaarschuwing-kritieke-kwetsbaarheden-in-wordpress-plugins\\\/#primaryimage\",\"url\":\"https:\\\/\\\/perseus.de\\\/wp-content\\\/uploads\\\/2025\\\/04\\\/Gefahrenwarnung-Headerbild-Website-2025-1024x256.png\",\"contentUrl\":\"https:\\\/\\\/perseus.de\\\/wp-content\\\/uploads\\\/2025\\\/04\\\/Gefahrenwarnung-Headerbild-Website-2025-1024x256.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/perseus.de\\\/nl\\\/beveiligingswaarschuwing-kritieke-kwetsbaarheden-in-wordpress-plugins\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/perseus.de\\\/nl\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Beveiligingswaarschuwing: Kritieke kwetsbaarheden in WordPress-plugins\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/perseus.de\\\/nl\\\/#website\",\"url\":\"https:\\\/\\\/perseus.de\\\/nl\\\/\",\"name\":\"perseus-web.de\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/nl\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/perseus.de\\\/nl\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"nl-NL\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/perseus.de\\\/nl\\\/#organization\",\"name\":\"perseus-web.de\",\"url\":\"https:\\\/\\\/perseus.de\\\/nl\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"nl-NL\",\"@id\":\"https:\\\/\\\/perseus.de\\\/nl\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/perseus.de\\\/wp-content\\\/uploads\\\/2025\\\/03\\\/PerseusTechnologie_Color-2.png\",\"contentUrl\":\"https:\\\/\\\/perseus.de\\\/wp-content\\\/uploads\\\/2025\\\/03\\\/PerseusTechnologie_Color-2.png\",\"width\":536,\"height\":172,\"caption\":\"perseus-web.de\"},\"image\":{\"@id\":\"https:\\\/\\\/perseus.de\\\/nl\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/perseus.de\\\/nl\\\/#\\\/schema\\\/person\\\/6c87a2feea6439d0ead16c8f0f07e40b\",\"name\":\"Anastasia Pamoukis\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"nl-NL\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/88febef1895859fc3a543c774ae6bc44cde0f02199f7f792af67eaf196406342?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/88febef1895859fc3a543c774ae6bc44cde0f02199f7f792af67eaf196406342?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/88febef1895859fc3a543c774ae6bc44cde0f02199f7f792af67eaf196406342?s=96&d=mm&r=g\",\"caption\":\"Anastasia Pamoukis\"},\"sameAs\":[\"https:\\\/\\\/perseus.de\"],\"url\":\"https:\\\/\\\/perseus.de\\\/nl\\\/author\\\/anastasia-pamoukis\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Beveiligingswaarschuwing: Kritieke kwetsbaarheden in WordPress-plugins - Perseus Technologies","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/perseus.de\/nl\/beveiligingswaarschuwing-kritieke-kwetsbaarheden-in-wordpress-plugins\/","og_locale":"nl_NL","og_type":"article","og_title":"Beveiligingswaarschuwing: Kritieke kwetsbaarheden in WordPress-plugins - Perseus Technologies","og_description":"Kritieke beveiligingslekken in de WordPress-plugins Forminator Forms en Royal Elementor Addons brengen tal van websites in gevaar. Ontdek welke versies nu zijn getroffen en welke maatregelen belangrijk zijn.","og_url":"https:\/\/perseus.de\/nl\/beveiligingswaarschuwing-kritieke-kwetsbaarheden-in-wordpress-plugins\/","og_site_name":"Perseus Technologies","article_published_time":"2026-08-25T05:31:19+00:00","article_modified_time":"2026-08-25T14:19:32+00:00","og_image":[{"width":1200,"height":300,"url":"https:\/\/perseus.de\/wp-content\/uploads\/2025\/04\/Gefahrenwarnung-Headerbild-Website-2025.png","type":"image\/png"}],"author":"Anastasia Pamoukis","twitter_card":"summary_large_image","twitter_misc":{"Geschreven door":"Anastasia Pamoukis","Geschatte leestijd":"5 minuten"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/perseus.de\/nl\/beveiligingswaarschuwing-kritieke-kwetsbaarheden-in-wordpress-plugins\/#article","isPartOf":{"@id":"https:\/\/perseus.de\/nl\/beveiligingswaarschuwing-kritieke-kwetsbaarheden-in-wordpress-plugins\/"},"author":{"name":"Anastasia Pamoukis","@id":"https:\/\/perseus.de\/nl\/#\/schema\/person\/6c87a2feea6439d0ead16c8f0f07e40b"},"headline":"Beveiligingswaarschuwing: Kritieke kwetsbaarheden in WordPress-plugins","datePublished":"2026-08-25T05:31:19+00:00","dateModified":"2026-08-25T14:19:32+00:00","mainEntityOfPage":{"@id":"https:\/\/perseus.de\/nl\/beveiligingswaarschuwing-kritieke-kwetsbaarheden-in-wordpress-plugins\/"},"wordCount":1004,"commentCount":0,"publisher":{"@id":"https:\/\/perseus.de\/nl\/#organization"},"image":{"@id":"https:\/\/perseus.de\/nl\/beveiligingswaarschuwing-kritieke-kwetsbaarheden-in-wordpress-plugins\/#primaryimage"},"thumbnailUrl":"https:\/\/perseus.de\/wp-content\/uploads\/2025\/04\/Gefahrenwarnung-Headerbild-Website-2025-1024x256.png","articleSection":["Waarschuwing voor gevaar"],"inLanguage":"nl-NL","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/perseus.de\/nl\/beveiligingswaarschuwing-kritieke-kwetsbaarheden-in-wordpress-plugins\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/perseus.de\/nl\/beveiligingswaarschuwing-kritieke-kwetsbaarheden-in-wordpress-plugins\/","url":"https:\/\/perseus.de\/nl\/beveiligingswaarschuwing-kritieke-kwetsbaarheden-in-wordpress-plugins\/","name":"Beveiligingswaarschuwing: Kritieke kwetsbaarheden in WordPress-plugins - Perseus Technologies","isPartOf":{"@id":"https:\/\/perseus.de\/nl\/#website"},"primaryImageOfPage":{"@id":"https:\/\/perseus.de\/nl\/beveiligingswaarschuwing-kritieke-kwetsbaarheden-in-wordpress-plugins\/#primaryimage"},"image":{"@id":"https:\/\/perseus.de\/nl\/beveiligingswaarschuwing-kritieke-kwetsbaarheden-in-wordpress-plugins\/#primaryimage"},"thumbnailUrl":"https:\/\/perseus.de\/wp-content\/uploads\/2025\/04\/Gefahrenwarnung-Headerbild-Website-2025-1024x256.png","datePublished":"2026-08-25T05:31:19+00:00","dateModified":"2026-08-25T14:19:32+00:00","breadcrumb":{"@id":"https:\/\/perseus.de\/nl\/beveiligingswaarschuwing-kritieke-kwetsbaarheden-in-wordpress-plugins\/#breadcrumb"},"inLanguage":"nl-NL","potentialAction":[{"@type":"ReadAction","target":["https:\/\/perseus.de\/nl\/beveiligingswaarschuwing-kritieke-kwetsbaarheden-in-wordpress-plugins\/"]}]},{"@type":"ImageObject","inLanguage":"nl-NL","@id":"https:\/\/perseus.de\/nl\/beveiligingswaarschuwing-kritieke-kwetsbaarheden-in-wordpress-plugins\/#primaryimage","url":"https:\/\/perseus.de\/wp-content\/uploads\/2025\/04\/Gefahrenwarnung-Headerbild-Website-2025-1024x256.png","contentUrl":"https:\/\/perseus.de\/wp-content\/uploads\/2025\/04\/Gefahrenwarnung-Headerbild-Website-2025-1024x256.png"},{"@type":"BreadcrumbList","@id":"https:\/\/perseus.de\/nl\/beveiligingswaarschuwing-kritieke-kwetsbaarheden-in-wordpress-plugins\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/perseus.de\/nl\/"},{"@type":"ListItem","position":2,"name":"Beveiligingswaarschuwing: Kritieke kwetsbaarheden in WordPress-plugins"}]},{"@type":"WebSite","@id":"https:\/\/perseus.de\/nl\/#website","url":"https:\/\/perseus.de\/nl\/","name":"perseus-web.de","description":"","publisher":{"@id":"https:\/\/perseus.de\/nl\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/perseus.de\/nl\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"nl-NL"},{"@type":"Organization","@id":"https:\/\/perseus.de\/nl\/#organization","name":"perseus-web.de","url":"https:\/\/perseus.de\/nl\/","logo":{"@type":"ImageObject","inLanguage":"nl-NL","@id":"https:\/\/perseus.de\/nl\/#\/schema\/logo\/image\/","url":"https:\/\/perseus.de\/wp-content\/uploads\/2025\/03\/PerseusTechnologie_Color-2.png","contentUrl":"https:\/\/perseus.de\/wp-content\/uploads\/2025\/03\/PerseusTechnologie_Color-2.png","width":536,"height":172,"caption":"perseus-web.de"},"image":{"@id":"https:\/\/perseus.de\/nl\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/perseus.de\/nl\/#\/schema\/person\/6c87a2feea6439d0ead16c8f0f07e40b","name":"Anastasia Pamoukis","image":{"@type":"ImageObject","inLanguage":"nl-NL","@id":"https:\/\/secure.gravatar.com\/avatar\/88febef1895859fc3a543c774ae6bc44cde0f02199f7f792af67eaf196406342?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/88febef1895859fc3a543c774ae6bc44cde0f02199f7f792af67eaf196406342?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/88febef1895859fc3a543c774ae6bc44cde0f02199f7f792af67eaf196406342?s=96&d=mm&r=g","caption":"Anastasia Pamoukis"},"sameAs":["https:\/\/perseus.de"],"url":"https:\/\/perseus.de\/nl\/author\/anastasia-pamoukis\/"}]}},"_links":{"self":[{"href":"https:\/\/perseus.de\/nl\/wp-json\/wp\/v2\/posts\/30479","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/perseus.de\/nl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/perseus.de\/nl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/perseus.de\/nl\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/perseus.de\/nl\/wp-json\/wp\/v2\/comments?post=30479"}],"version-history":[{"count":1,"href":"https:\/\/perseus.de\/nl\/wp-json\/wp\/v2\/posts\/30479\/revisions"}],"predecessor-version":[{"id":30480,"href":"https:\/\/perseus.de\/nl\/wp-json\/wp\/v2\/posts\/30479\/revisions\/30480"}],"wp:attachment":[{"href":"https:\/\/perseus.de\/nl\/wp-json\/wp\/v2\/media?parent=30479"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/perseus.de\/nl\/wp-json\/wp\/v2\/categories?post=30479"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/perseus.de\/nl\/wp-json\/wp\/v2\/tags?post=30479"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}