{"id":11102,"date":"2026-09-25T17:10:41","date_gmt":"2026-09-25T14:10:41","guid":{"rendered":"https:\/\/webmister.pro\/oprava-kriticke-bezpecnostni-zranitelnosti-ve-wordpress-7-1-2\/"},"modified":"2026-09-25T17:10:41","modified_gmt":"2026-09-25T14:10:41","slug":"oprava-kriticke-bezpecnostni-zranitelnosti-ve-wordpress-7-1-2","status":"publish","type":"post","link":"https:\/\/webmister.pro\/cz\/oprava-kriticke-bezpecnostni-zranitelnosti-ve-wordpress-7-1-2\/","title":{"rendered":"Oprava kritick\u00e9 bezpe\u010dnostn\u00ed zranitelnosti ve WordPress 7.1.2"},"content":{"rendered":"<nav class=\"wppub-toc\" aria-label=\"Table of contents\">\n<p class=\"wppub-toc__title\">Table of contents<\/p>\n<ul class=\"wppub-toc__list\">\n<li class=\"wppub-toc__item\"><a class=\"wppub-toc__link\" href=\"#oprava-kriticke-bezpecnostni-zranitelnosti-ve-wordpress-7-1-2\">Oprava kritick\u00e9 bezpe\u010dnostn\u00ed zranitelnosti ve WordPress 7.1.2<\/a><\/li>\n<li class=\"wppub-toc__item\"><a class=\"wppub-toc__link\" href=\"#jak-aktualizovat-svuj-web-wordpress-okamzite\">Jak aktualizovat sv\u016fj web WordPress okam\u017eit\u011b<\/a><\/li>\n<\/ul>\n<\/nav>\n<h2 id=\"oprava-kriticke-bezpecnostni-zranitelnosti-ve-wordpress-7-1-2\">Oprava kritick\u00e9 bezpe\u010dnostn\u00ed zranitelnosti ve WordPress 7.1.2<\/h2>\n<p><img src=\"https:\/\/webmister.pro\/wp-content\/uploads\/2026\/09\/critical-security-vulnerability-fix-in-wordpress-7-1-2.webp\" alt=\"Oprava kritick\u00e9 bezpe\u010dnostn\u00ed zranitelnosti ve WordPress 7.1.2\" title=\"Oprava kritick\u00e9 bezpe\u010dnostn\u00ed zranitelnosti ve WordPress 7.1.2\" loading=\"lazy\" decoding=\"async\"><\/p>\n<p>T\u00fdm pro bezpe\u010dnost WordPressu ofici\u00e1ln\u011b ozn\u00e1mil vyd\u00e1n\u00ed <a href=\"https:\/\/wordpress.org\/news\/2026\/09\/wordpress-7-1-2-release\/\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">WordPress 7.1.2 Release<\/a>, co\u017e je kl\u00ed\u010dov\u00e1 aktualizace navr\u017een\u00e1 k vy\u0159e\u0161en\u00ed nal\u00e9hav\u00e9 bezpe\u010dnostn\u00ed chyby objeven\u00e9 v p\u0159edchoz\u00edch verz\u00edch tohoto obl\u00edben\u00e9ho syst\u00e9mu pro spr\u00e1vu obsahu. Tato nejnov\u011bj\u0161\u00ed z\u00e1plata, kter\u00e1 t\u011bsn\u011b navazuje na d\u0159\u00edv\u011bj\u0161\u00ed vyd\u00e1n\u00ed <a href=\"https:\/\/webmister.pro\/cz\/wordpress-7-1-1-bezpecnostni-a-udrzbova-aktualizace\/\">WordPress 7.1.1 Maintenance and Security Release Now Available<\/a>, c\u00edl\u00ed na zranitelnost kritick\u00e9 z\u00e1va\u017enosti, kter\u00e1 by v p\u0159\u00edpad\u011b ignorov\u00e1n\u00ed spr\u00e1vci str\u00e1nek a v\u00fdvoj\u00e1\u0159i mohla potenci\u00e1ln\u011b vystavit miliony webov\u00fdch str\u00e1nek v\u00e1\u017en\u00e9mu ohro\u017een\u00ed syst\u00e9mu.<\/p>\n<p>J\u00e1drem tohoto bezpe\u010dnostn\u00edho upozorn\u011bn\u00ed je sofistikovan\u00e1 chyba t\u00fdkaj\u00edc\u00ed se mechanism\u016f rozli\u0161en\u00ed \u0161ablon str\u00e1nek. Konkr\u00e9tn\u011b tato zranitelnost umo\u017e\u0148uje neov\u011b\u0159en\u00e9mu \u00fato\u010dn\u00edkovi manipulovat s parametry za p\u0159esn\u00fdch, vysoce specifick\u00fdch p\u0159edpoklad\u016f serverov\u00e9ho prost\u0159ed\u00ed a aktivn\u00edch konfigurac\u00ed \u0161ablon. Kdy\u017e se tyto podm\u00ednky shoduj\u00ed, mechanismus rozli\u0161en\u00ed \u0161ablon v syst\u00e9mu m\u016f\u017ee b\u00fdt oklam\u00e1n tak, \u017ee zahrne zvolen\u00fd \u010diteln\u00fd m\u00edstn\u00ed soubor PHP, kter\u00fd se nach\u00e1z\u00ed striktn\u011b mimo ur\u010den\u00e9 adres\u00e1\u0159e aktivn\u00ed \u0161ablony.<\/p>\n<p>Pokud je tento neopr\u00e1vn\u011bn\u00fd zahrnut\u00fd soubor \u00fasp\u011b\u0161n\u011b proveden, rychle eskaluje do vzd\u00e1len\u00e9ho spu\u0161t\u011bn\u00ed k\u00f3du (RCE). Vzd\u00e1len\u00e9 spu\u0161t\u011bn\u00ed k\u00f3du p\u0159edstavuje jednu z nejnebezpe\u010dn\u011bj\u0161\u00edch kategori\u00ed hrozeb v oblasti zabezpe\u010den\u00ed webov\u00fdch aplikac\u00ed a d\u00e1v\u00e1 \u0161kodliv\u00fdm akt\u00e9r\u016fm schopnost prov\u00e1d\u011bt libovoln\u00e9 p\u0159\u00edkazy, z\u00edsk\u00e1vat citliv\u00e9 p\u0159ihla\u0161ovac\u00ed \u00fadaje k datab\u00e1z\u00edm, instalovat zadn\u00ed vr\u00e1tka nebo zcela p\u0159evz\u00edt kontrolu nad z\u00e1kladn\u00ed hostingovou infrastrukturou. Proto\u017ee vektor \u00fatok\u016f m\u016f\u017ee b\u00fdt spu\u0161t\u011bn neov\u011b\u0159en\u00fdmi u\u017eivateli, d\u016frazn\u011b se doporu\u010duje okam\u017eit\u00e1 aplikace z\u00e1platy 7.1.2 pro v\u0161echna produk\u010dn\u00ed prost\u0159ed\u00ed.<\/p>\n<p>Objjev t\u00e9to kritick\u00e9 chyby je p\u0159ipisov\u00e1n bezpe\u010dnostn\u00edmu v\u00fdzkumn\u00edkovi Robertu Resslovi, kter\u00fd zranitelnost zodpov\u011bdn\u011b nahl\u00e1sil hlavn\u00edmu v\u00fdvoj\u00e1\u0159sk\u00e9mu t\u00fdmu, co\u017e jim umo\u017enilo navrhnout robustn\u00ed z\u00e1platu d\u0159\u00edve, ne\u017e se zhoubn\u00e9 zneu\u017eit\u00ed stalo v p\u0159\u00edrod\u011b \u0161iroce roz\u0161\u00ed\u0159en\u00fdm. V\u00fdvoj a nasazen\u00ed t\u00e9to \u017eivotn\u011b d\u016fle\u017eit\u00e9 bezpe\u010dnostn\u00ed aktualizace odborn\u011b vedl John Blackbourn, \u010d\u00edm\u017e bylo zaji\u0161t\u011bno minim\u00e1ln\u00ed naru\u0161en\u00ed zp\u011btn\u00e9 kompatibility p\u0159i sou\u010dasn\u00e9m \u00fapln\u00e9m uzav\u0159en\u00ed vektoru rozli\u0161en\u00ed \u0161ablon.<\/p>\n<p>Komplexn\u00ed technick\u00e1 dokumentace spolu s form\u00e1ln\u00edmi identifika\u010dn\u00edmi \u00fadaji pro sledov\u00e1n\u00ed pro bezpe\u010dnostn\u00ed analytiky a podnikov\u00e9 syst\u00e9my pro spr\u00e1vu zranitelnost\u00ed byla publikov\u00e1na pod referencemi poradenstv\u00ed CVE-2026-87902 a GHSA-7hp8-65ch-5whp. Webmaste\u0159i a automatizovan\u00e9 n\u00e1stroje pro \u00fadr\u017ebu by m\u011bli ov\u011b\u0159it, zda byly jejich instalace \u00fasp\u011b\u0161n\u011b aktualizov\u00e1ny, aby se zm\u00edrnila jak\u00e1koli expozice.<\/p>\n<h2 id=\"jak-aktualizovat-svuj-web-wordpress-okamzite\">Jak aktualizovat sv\u016fj web WordPress okam\u017eit\u011b<\/h2>\n<p>Proto\u017ee se jedn\u00e1 o kritickou bezpe\u010dnostn\u00ed aktualizaci, d\u016frazn\u011b se spr\u00e1vc\u016fm webu doporu\u010duje, aby sv\u00e9 weby okam\u017eit\u011b aktualizovali a chr\u00e1nili se tak p\u0159ed potenci\u00e1ln\u00edmi zranitelnostmi. Odkl\u00e1d\u00e1n\u00ed tohoto procesu ponech\u00e1v\u00e1 va\u0161i instalaci vystavenou zn\u00e1m\u00fdm \u00fatok\u016fm, kter\u00e9 \u0161kodliv\u00ed akt\u00e9\u0159i aktivn\u011b vyhled\u00e1vaj\u00ed po cel\u00e9m webu.<\/p>\n<p>WordPress 7.1.2 si m\u016f\u017eete snadno st\u00e1hnout p\u0159\u00edmo z WordPress.org, nebo m\u016f\u017eete spr\u00e1vu aktualizac\u00ed prov\u00e9st p\u0159\u00edmo ze sv\u00e9 administr\u00e1torsk\u00e9 oblasti. Jednodu\u0161e se p\u0159ihlaste do sv\u00e9ho panelu WordPress Dashboard, p\u0159ejd\u011bte do sekce \u201eUpdates\u201c a pot\u00e9 kliknut\u00edm na tla\u010d\u00edtko \u201eUpdate Now\u201c bezpe\u010dn\u011b spus\u0165te aktualizaci j\u00e1dra softwaru.<\/p>\n<p>U web\u016f nakonfigurovan\u00fdch pro podporu automatick\u00fdch aktualizac\u00ed na pozad\u00ed se proces aktualizace spust\u00ed automaticky, ani\u017e by vy\u017eadoval ru\u010dn\u00ed z\u00e1sah vlastn\u00edka webu. Tento bezobslu\u017en\u00fd p\u0159\u00edstup zaji\u0161\u0165uje, \u017ee men\u0161\u00ed bezpe\u010dnostn\u00ed aktualizace jsou rychle nasazeny nap\u0159\u00ed\u010d va\u0161\u00ed digit\u00e1ln\u00ed infrastrukturou, \u010d\u00edm\u017e se minimalizuje okno zranitelnosti.<\/p>\n<p>Jako u\u017eite\u010dn\u00e1 laskavost pro spr\u00e1vce spravuj\u00edc\u00ed star\u0161\u00ed syst\u00e9my je bezpe\u010dnostn\u00ed oprava aktivn\u011b zp\u011btn\u011b portov\u00e1na na v\u0161echny historick\u00e9 v\u011btve zp\u016fsobil\u00e9 k p\u0159ij\u00edm\u00e1n\u00ed bezpe\u010dnostn\u00edch oprav, co\u017e aktu\u00e1ln\u011b sah\u00e1 a\u017e do verze 4.7. Jako d\u016fle\u017eit\u00e1 p\u0159ipom\u00ednka pro pl\u00e1nov\u00e1n\u00ed dlouhodob\u00e9 \u00fadr\u017eby v\u0161ak plat\u00ed, \u017ee aktivn\u00ed podporu j\u00e1dra a komplexn\u00ed aktualizace funkc\u00ed z\u00edsk\u00e1v\u00e1 pouze nejnov\u011bj\u0161\u00ed verze WordPress.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>T\u00fdm WordPress vydal mimo\u0159\u00e1dnou bezpe\u010dnostn\u00ed aktualizaci verze 7.1.2, kter\u00e1 opravuje kritickou zranitelnost v syst\u00e9mu rozli\u0161en\u00ed \u0161ablon.<\/p>\n<p>Pokud tuto chybu ignorujete, vystavujete sv\u00e9 webov\u00e9 str\u00e1nky v\u00e1\u017en\u00e9mu riziku napaden\u00ed.<\/p>\n<p>Doporu\u010dujeme v\u0161em spr\u00e1vc\u016fm a v\u00fdvoj\u00e1\u0159\u016fm neprodlen\u011b prov\u00e9st aktualizaci na nejnov\u011bj\u0161\u00ed verzi a zabezpe\u010dit tak sv\u016fj obsah p\u0159ed potenci\u00e1ln\u00edmi \u00fatoky.<\/p>\n","protected":false},"author":1,"featured_media":11024,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[19],"tags":[1472,396,1579,1584,1582],"class_list":["post-11102","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hosting","tag-bezpecnostni-aktualizace","tag-oprava-wordpress","tag-wordpress-7-1-2-2","tag-wordpress-zabezpeceni","tag-wordpress-zranitelnost"],"acf":[],"_links":{"self":[{"href":"https:\/\/webmister.pro\/cz\/wp-json\/wp\/v2\/posts\/11102","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/webmister.pro\/cz\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/webmister.pro\/cz\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/webmister.pro\/cz\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/webmister.pro\/cz\/wp-json\/wp\/v2\/comments?post=11102"}],"version-history":[{"count":0,"href":"https:\/\/webmister.pro\/cz\/wp-json\/wp\/v2\/posts\/11102\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/webmister.pro\/cz\/wp-json\/wp\/v2\/media\/11024"}],"wp:attachment":[{"href":"https:\/\/webmister.pro\/cz\/wp-json\/wp\/v2\/media?parent=11102"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/webmister.pro\/cz\/wp-json\/wp\/v2\/categories?post=11102"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/webmister.pro\/cz\/wp-json\/wp\/v2\/tags?post=11102"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}