Any intent on a sucurity update? | WordPress.org

Resolved Shopping Kim
(@shoppingkim)

1 week, 2 days ago

Wordfence is reporting this plugin’s most recent version as a security risk
https://www.wordfence.com/threat-intel/vulnerabilities/id/3099875e-ed6e-4d59-9da2-48fb389112ef?source=plugin

When can we expect a security update

Viewing 3 replies - 1 through 3 (of 3 total)

Plugin Author Donncha O Caoimh (a11n)
(@donncha)

1 week, 1 day ago

That’s the duplicate Patchstack issue that was fixed in 2.4.1.

See here for more: https://wordpress.org/support/topic/vulnerable-on-current-version-2-4-1/

The CVE for it was rejected/withdrawn. https://www.cve.org/CVERecord?id=CVE-2026-39660

pineapplepalm
(@pineapplepalm)

1 week ago

Hi @donncha Wordfence still shows it as problematic as a critical issue

Plugin Author Donncha O Caoimh (a11n)
(@donncha)

6 days, 20 hours ago

I contacted Wordfence and asked them to remove the vulnerability report they have. Hopefully they do it soon.

Viewing 3 replies - 1 through 3 (of 3 total)

You must be logged in to reply to this topic.

5 replies
3 participants
Last reply from: Donncha O Caoimh (a11n)
Last activity: 6 days, 20 hours ago
Status: resolved