Is it safe to re-activate Ultimate Member again? | WordPress.org

Resolved Lettobi
(@lettobi)

1 year, 2 months ago

The recommended actions have not been updated since July 1. According to this we are still awaiting feedback from WP Scan. Are there any updates on this? When can I safely re-activate the plugin without experiencing any major hickups or security issues?

https://docs.ultimatemember.com/article/1866-security-incident-update-and-recommended-actions

Viewing 4 replies - 1 through 4 (of 4 total)

Plugin Support yuriinalivaiko
(@yuriinalivaiko)

1 year, 2 months ago

Hello @lettobi

Sorry for these vulnerabilities in our plugin’s code.

Version 2.6.7 has been released on the 1st of July to patch this security vulnerability.

WP Scan confirmed that 2.6.7 fixes the various bypasses reported. WP Scan recommends updating the Ultimate Member plugin to version 2.6.7, which remediates this security issue. You find details in the WP Scan blog.

Regards

Thread Starter Lettobi
(@lettobi)

1 year, 2 months ago

Thank you for this update. Maybe it’s just me but I feel like this was not clearly communicated by Ultimate Member.

Plugin Support yuriinalivaiko
(@yuriinalivaiko)

1 year, 2 months ago

Sorry for the delay. We have updated an article related to this issue: https://docs.ultimatemember.com/article/1866-security-incident-update-and-recommended-actions

Thank you

Thread Starter Lettobi
(@lettobi)

1 year, 2 months ago

Thank you!

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘Is it safe to re-activate Ultimate Member again?’ is closed to new replies.

In: Plugins
5 replies
2 participants
Last reply from: Lettobi
Last activity: 1 year, 2 months ago
Status: resolved