‘Unpatched Security Issues’ warning

  • Resolved takeon

    (@learn2soarmusic)


    1 week, 4 days ago

    Overnight, our security plugin suddenly warned us to deactivate and delete the Smart COD plugin (1.8.4) with the following explanation:

    Issue details: This plugin has been removed from wordpress.org but is still installed on your site.

    Potential risk: This plugin has unpatched security issues and may not work with your current WordPress version.

    Recommendation: Deactivate plugin & delete to stay secure.

    Please advise on when you will be able to address this issue? We would appreciate an urgent response. Thank you.

Viewing 1 replies (of 1 total)
  • Plugin Author FullStack-ing

    (@fullstackhouse)

    1 week, 3 days ago

    The plugin is 100% safe to use.

    The issue was related to a feature we released that collected pseudonymized information about cancelled Cash on Delivery (COD) orders. The purpose of this feature was to allow plugin users to restrict COD availability for customers who belonged to this group, based on certain configurable conditions — for example, customers with multiple previous refusals to accept COD deliveries.

    The problem was that we initially introduced this functionality without making it explicitly opt-in, which was not compliant with the WordPress.org terms and guidelines.

    This has now been corrected, and the functionality is fully opt-in. Everything is back in order and the plugin can be used safely.

    Thank you

Viewing 1 replies (of 1 total)

You must be logged in to reply to this topic.