Sensitive Data Exposure

Resolved Rhys Wynne
(@rhyswynne)

2 weeks, 1 day ago

Hi There!

I’ve been made aware there’s a security vulnerability in your plugin through Patchstack. Is it on your radar? If so, when can we expect a fix?

Cheers

Rhys

The page I need help with: [log in to see the link]

Viewing 9 replies - 1 through 9 (of 9 total)

Illustrate Digital
(@illustratedigital)

2 weeks, 1 day ago

There also seems to be a PHP Object Injection vulnerability: https://patchstack.com/database/wordpress/plugin/complianz-gdpr/vulnerability/wordpress-complianz-plugin-7-5-0-php-object-injection-vulnerability

and a Server Side Request Forgery vulnerability: https://patchstack.com/database/wordpress/plugin/complianz-gdpr/vulnerability/wordpress-complianz-plugin-7-5-0-server-side-request-forgery-ssrf-vulnerability

so there are three vulnerabilities in versions <= 7.5.0 can we get a timeline on when this is supposed to be fixed?

Plugin Author Aert
(@aahulsebos)

2 weeks, 1 day ago

Good afternoon! We’re checking status internally, coming back to you soon. regards Aert

mcoaster
(@mcoaster)

2 weeks ago

Why isn’t the new version 7.5.1 showing up for me in WordPress? I can’t update the plugin.

Thread Starter Rhys Wynne
(@rhyswynne)

2 weeks ago

@mcoaster it’s a WordPress thing, it sometimes caches the updates. Should show up within the next day or so usually.

jalorod
(@jalorod)

2 weeks ago

But this new release doesn’t fix the security issues, does it?

Regards,

Studio Pence
(@bpence)

1 week, 6 days ago

7.5.1 still showing as vulnerable according to Patchstack.

Xabi
(@mbaie)

1 week, 5 days ago

The 7.5.1 version still showing as vulnerable according to Patchstack:

Sensitive Data Exposure

PHP Object Injection

Server Side Request Forgery (SSRF)

Plugin Author Aert
(@aahulsebos)

1 week, 4 days ago

Tutti – I responded here; https://wordpress.org/support/topic/3-security-issues/ just to get centralized. Thanks

Plugin Support robiub
(@robiub)

4 days, 18 hours ago

Hi everyone,

The update has been released! Simply updating the plugin will fix the vulnerabilities.

We apologize again for the inconvenience and thank you for your patience.

Kind regards,
Roberto.

Viewing 9 replies - 1 through 9 (of 9 total)

You must be logged in to reply to this topic.