Viewing 5 replies - 1 through 5 (of 5 total)
  • Thread Starter patzz

    (@patzz72)

    That is weird, yesterday there where 4-5 other users who reported the problems (see the 8 participants in the discussion on the right), but all of their posts disappeared.

    Plugin Author Aert

    (@aahulsebos)

    @patzz72 I don’t know why posts are deleted.

    Update regarding the security warning; we’re now checking how to resolve – impact is considered low by Patchstack on all. #2 needs admin permission level; to do something less impactful than what you could do with administrator access.

    #1 – If you’re using a Gutenberg block or Shortcode for a custom consent area in a post; and you have the post password protected, it’s possible to check the post_content in this custom consent area by guessing the post_id on a REST endpoint…and this custom consent area could have ‘sensitive data’ – which the author added in a consent area, apparently.

    The #3 is still being investigated, because it’s unclear how Complianz is involved. But it’s an edge case with high permissions.

    We will update when we’re done; and resolve through Patchstack.

    Thread Starter patzz

    (@patzz72)

    Great, good to hear!

    Ron

    (@donniepeters)

    Moderator Support Moderator

    (@moderator)

    There’s no need for anyone to continue to add on to this topic. All non-OP replies have been removed other than the developers. The topic is now closed.

Viewing 5 replies - 1 through 5 (of 5 total)

The topic ‘3 security issues’ is closed to new replies.