Warning: Security issue on plugins

  • alakhnor

    (@alakhnor)


    19 years, 1 month ago

    Not where this should go (nor if already has been posted).

    There has been a warning on security for some plugins who add buttons in the editor bar.

    Plugins involved are myGallery and Wordtube. Update those as soon as possible.

    If you use a plugin which insert such a button, I suggest you check on the plugin site.

    Note: Viper’s nice plugins and Image Manager does not have this security issue.

Viewing 2 replies - 1 through 2 (of 2 total)
  • whooami

    (@whooami)

    19 years, 1 month ago

    meh.

    It’s not buttons that anyone has to be worried about. Both plugins you mention allowed the “path to certain files” to be set via an http_ post

    Given that, its then possible to set a path to malicious file.

    Thread Starter alakhnor

    (@alakhnor)

    19 years, 1 month ago

    Yes, you’re right. But the way they do it (insert button) has been shown many times on internet as a way to insert button with WP 2.1.

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Warning: Security issue on plugins’ is closed to new replies.