Security vulnerability

  • Resolved catwingz

    (@catwingz)


    1 week ago

    I use this plugin on most of the websites I build needing custom buttons. Now Wordfence is reporting it has a security vulnerability: To protect your site from this vulnerability, the safest option is to deactivate and completely remove “MaxButtons” until a patched version is available.

    Please fix this now! I am sure I am not alone in wanting to avoid having to come up with a substitute!

    Thank you

    The page I need help with: [log in to see the link]

Viewing 4 replies - 1 through 4 (of 4 total)
  • Thread Starter catwingz

    (@catwingz)

    1 week ago

    An update… I find that the websites using the current version of this plugin are split. Some have the Wordfence alert while the others do not. They have a wide variety of plugins. Perhaps there is a conflict with some? Other than stating it is a security risk Wordfence doesn’t give any indication.

    Plugin Author Bas Schuiling

    (@basszje)

    1 week ago

    hi,

    There was a security release fixing something minor this week. The advice to remove plugin is very overstated. It still gives this error with latest version?

    Thread Starter catwingz

    (@catwingz)

    1 week ago

    On half of the sites I have it on, yes. That’s three out of six, so not a huge number, but not encouraging.

    Thread Starter catwingz

    (@catwingz)

    6 days, 5 hours ago

    @basszje

    Update: I went back and checked the websites again. Now Wordfence is giving them all a clean bill of health.

Viewing 4 replies - 1 through 4 (of 4 total)

You must be logged in to reply to this topic.