Medium priority Security warning v2.2.18

  • Gareth D

    (@garydee1977)


    6 days, 9 hours ago

    Hi guys – getting this warning:

    https://patchstack.com/database/wordpress/plugin/woo-multi-currency/vulnerability/wordpress-curcy-plugin-2-2-16-cross-site-scripting-xss-vulnerability

    Medium priority
    Mitigate with Patchstack
    2.2.18 Vulnerable version(s)
    No official patch available

    This vulnerability was previously patched, but re-introduced in version 2.2.18. All versions up to 2.2.16 were vulnerable, 2.2.17 contained the fix, and 2.2.18 is now back to being vulnerable and pending a fix by the vendor.

    Just on a sep note – my site I’ve two plugins installed from yourselves:

    CURCY – Multi Currency for WooCommerce
    Version 2.2.18 | By VillaTheme

    and another which I purchased and licenced via Themeforest:
    CURCY – WooCommerce Multi Currency – Currency Switcher
    Version 2.4.5 | By VillaTheme

    Do I actually need this first one (the version 2.2.18 one??)

    Thanks

    The page I need help with: [log in to see the link]

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Author mytrinh

    (@mytrinh)

    6 days, 9 hours ago

    Hi,

    Thank you for bringing this to our attention.

    I’ve forwarded the details to our development team and they are working on this.

    I’ll get back to you as soon as I hear back from them.

    Thank you for your understanding and patience.

    Best regards.

    Plugin Author mytrinh

    (@mytrinh)

    5 days, 11 hours ago

    Hi,

    Thank you for your patience.

    Our development team has checked the issue and prepared a patch to resolve it. However, we’re still waiting for a response from Patchstack.

    We’ll release the fixed version as soon as possible.

    In the meantime, you can use this dev version (2.2.18.1). You can download the file here: https://drive.google.com/file/d/1jLMKaHeClhHKClJOSX2VFo1ObMJDZK5K/view?usp=sharing .

    Best regards.

    Thread Starter Gareth D

    (@garydee1977)

    5 days, 9 hours ago

    Thank you for this – can you clarify this question though??

    My site I’ve two plugins installed from yourselves:

    CURCY – Multi Currency for WooCommerce
    Version 2.2.18 | By VillaTheme

    and another which I purchased and licenced via Themeforest:
    CURCY – WooCommerce Multi Currency – Currency Switcher
    Version 2.4.5 | By VillaTheme

    Do I actually need this first one (the version 2.2.18 one??)

    Plugin Author mytrinh

    (@mytrinh)

    5 days, 9 hours ago

    My bad. If you are using the premium version, you can safe deactivate the free version.

    Best regards.

Viewing 4 replies - 1 through 4 (of 4 total)

You must be logged in to reply to this topic.