azcomputerguru
b6a2faa9a2
- Show prep for April 5, 11, 18, 2026 (markdown + HTML) - IX server Smart Slider 3 Pro security scan script - Comprehensive security audit report (87 WordPress sites) - All sites safe: 0 PRO (compromised), 3 FREE (safe) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
79 lines
2.7 KiB
Bash
79 lines
2.7 KiB
Bash
#!/bin/bash
|
|
# Smart Slider 3 Pro Security Scanner for IX Server
|
|
# Scans all WordPress installations for Smart Slider plugin
|
|
|
|
echo "[INFO] IX Server Smart Slider 3 Security Scan"
|
|
echo "[INFO] Date: $(date)"
|
|
echo "=============================================="
|
|
echo ""
|
|
|
|
# Initialize counters
|
|
total_wp=0
|
|
found_free=0
|
|
found_pro=0
|
|
|
|
# Create temporary file for results
|
|
results_file="/tmp/smart_slider_scan_$(date +%s).txt"
|
|
|
|
echo "[INFO] Scanning for WordPress installations..."
|
|
echo ""
|
|
|
|
# Find all WordPress installations
|
|
for wpconfig in $(find /home/*/public_html -maxdepth 3 -name "wp-config.php" -type f 2>/dev/null); do
|
|
((total_wp++))
|
|
wpdir=$(dirname "$wpconfig")
|
|
plugindir="$wpdir/wp-content/plugins"
|
|
site_user=$(echo "$wpdir" | cut -d'/' -f3)
|
|
|
|
# Check for Smart Slider 3 PRO
|
|
if [ -d "$plugindir/nextend-smart-slider3-pro" ]; then
|
|
((found_pro++))
|
|
version=$(grep -o "Version: .*" "$plugindir/nextend-smart-slider3-pro/nextend-smart-slider3-pro.php" 2>/dev/null | head -1 | cut -d' ' -f2)
|
|
|
|
echo "[WARNING] SMART SLIDER 3 PRO FOUND" | tee -a "$results_file"
|
|
echo " User: $site_user" | tee -a "$results_file"
|
|
echo " Path: $wpdir" | tee -a "$results_file"
|
|
echo " Version: ${version:-Unknown}" | tee -a "$results_file"
|
|
|
|
# Check if it's active
|
|
if grep -q "nextend-smart-slider3-pro" "$wpdir/wp-content/plugins" 2>/dev/null; then
|
|
echo " Status: Likely Active" | tee -a "$results_file"
|
|
fi
|
|
echo "" | tee -a "$results_file"
|
|
|
|
# Check for Smart Slider 3 FREE
|
|
elif [ -d "$plugindir/smart-slider-3" ]; then
|
|
((found_free++))
|
|
version=$(grep -o "Version: .*" "$plugindir/smart-slider-3/smart-slider-3.php" 2>/dev/null | head -1 | cut -d' ' -f2)
|
|
|
|
echo "[INFO] Smart Slider 3 (Free) Found" | tee -a "$results_file"
|
|
echo " User: $site_user" | tee -a "$results_file"
|
|
echo " Path: $wpdir" | tee -a "$results_file"
|
|
echo " Version: ${version:-Unknown}" | tee -a "$results_file"
|
|
echo "" | tee -a "$results_file"
|
|
fi
|
|
done
|
|
|
|
echo "=============================================="
|
|
echo "[OK] Scan Complete"
|
|
echo ""
|
|
echo "SUMMARY:"
|
|
echo " Total WordPress sites: $total_wp"
|
|
echo " Smart Slider 3 Pro: $found_pro"
|
|
echo " Smart Slider 3 Free: $found_free"
|
|
echo ""
|
|
|
|
if [ $found_pro -gt 0 ]; then
|
|
echo "[WARNING] SECURITY ALERT:"
|
|
echo " Smart Slider 3 Pro was compromised April 7-9, 2026"
|
|
echo " Sites with this plugin may have been infected"
|
|
echo " IMMEDIATE ACTION REQUIRED:"
|
|
echo " 1. Update Smart Slider 3 Pro to latest version"
|
|
echo " 2. Check for unauthorized users/backdoors"
|
|
echo " 3. Review recent file modifications"
|
|
echo " 4. Scan for malware"
|
|
fi
|
|
|
|
echo ""
|
|
echo "Results saved to: $results_file"
|