Serious Security Exploit – Disable this plugin now!

Viewing 2 replies - 1 through 2 (of 2 total)
  • yoav.aner

    (@yoavaner)

    11 years, 2 months ago

    Thanks for the heads-up!

    Looks like this plugin is no longer maintained on wordpress.org, which is a shame. Or maybe I just couldn’t find it?

    To apply a quickfix for this. in wp-content/plugins/pingdom-status/php/wsproxy/PingdomStatus_wsmain.php you can comment out the line that echos the request

    // Somehow write to wordpress error log.
        if($doEcho){
            echo $toWrite;
        }

    … and change your username/password on pingdom of course.

    Plugin Author Pingdom

    (@pingdom)

    11 years, 2 months ago

    Thank you for reporting the issue with the plugin. It is recommended to turn of the PHP debugging information for production environments to avoid exposing sensitive information.

    However, we’re afraid that the plugin is deprecated and no longer functional with our service, thus removed from the WordPress site. The SOAP API backend have been deprecated for a long time and were shut down some time ago.

    Later on we might develop a new version of the plugin that utilize our REST API, although the future of the plugin hasn’t been decided yet.

    Regards,
    The Pingdom team.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Serious Security Exploit – Disable this plugin now!’ is closed to new replies.