• Resolved programmin

    (@programmin)


    Within this plugin I see package.json with:

    {
    "name": "elfinder",
    "version": "2.1.69",
    "description": "Open-source file manager for web, written in JavaScript using jQuery and jQuery UI.",
    "author": "Studio-42 (https://github.com/Studio-42/elFinder)",
    ....

    Does this really include version 2.1.69? Because they have a big warning on Github – 2.1.69 OR EARLIER VERSIONS OF ELFINDER ON PUBLIC SERVERS, IT MAY CAUSE SERIOUS DAMAGE TO YOUR SERVER AND VISITED USER. YOU SHOULD UPDATE TO THE LATEST VERSION OR REMOVE IT FROM THE SERVER.

Viewing 6 replies - 1 through 6 (of 6 total)
  • Plugin Support mubashirbutt

    (@mubashirbutt)

    Hello @programmin ,

    Thank you for bringing this to our attention and sharing the security warning.

    We take security concerns seriously and have shared your report with our development team for review. We’ll provide an update once we have more information.

    We appreciate you taking the time to report this.

    Plugin Support mubashirbutt

    (@mubashirbutt)

    Hi @programmin ,

    The issue has been fixed. Kindly update the plugin with the one provided below.

    Plugin

    Please feel free to reach out if you need any further assistance.

    Thread Starter programmin

    (@programmin)

    That patch version seems to work – so why is it not the latest version available?

    Thanks.

    Plugin Support mubashirbutt

    (@mubashirbutt)

    Hello @programmin ,

    Thank you for confirming that the patch is working. The patch will be included in the next official release.

    Let us know if there is anything else we can assist with.

    Plugin Support mubashirbutt

    (@mubashirbutt)

    We hope you’re finding Advanced File Manager useful for managing your files with ease.

    If you have a moment, we would truly appreciate it if you could share your feedback or leave a review based on your experience with the plugin. Your input helps us improve both the product and the support we provide to all users.

    You can leave your review here: <u>WordPress</u>

    Thread Starter programmin

    (@programmin)

    No security update has been issued in over a week? 🙁

Viewing 6 replies - 1 through 6 (of 6 total)

You must be logged in to reply to this topic.