Arbitrary File Download Security Vulnerability

  • Resolved Rhys Wynne

    (@rhyswynne)


    1 week ago

    Hi There,

    Patchstack has reported that there’s a security vulnerability in version <= 6.6.46 and below, with no official fix. Are you aware of this and when can a fix be expected?

    Thanks!

    The page I need help with: [log in to see the link]

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Support mansary

    (@mansary)

    6 days, 8 hours ago

    Dear @rhyswynne

    Thank you for bringing this to our attention.

    We’re already aware of the issue reported by Patchstack and have forwarded it to our development team. They are currently working on addressing it, and we’re hoping the issue will be resolved in the upcoming version of the plugin.

    We really appreciate you taking the time to report this and help us improve the security of the plugin.

    Best regards,

    Plugin Support mansary

    (@mansary)

    5 days, 8 hours ago

    Dear @rhyswynne

    We’re pleased to let you know that we have released a new version of the plugin that includes a security fix for the Arbitrary File Download vulnerability reported by Patchstack.

    Please update the plugin to the latest available version to ensure you have the security fix applied.

    We appreciate you taking the time to report this and helping us keep the plugin secure.

    Best regards,

Viewing 2 replies - 1 through 2 (of 2 total)

You must be logged in to reply to this topic.