Security vulnerability reported

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author rolandbarker

    (@rolandbarker)

    1 week, 4 days ago

    This was fixed in version 2.7.8.2 several months ago. Patchstack has been a bit slow validating the patch. You can see the fix in PDb_Base::delete_file() where the path to the file to be deleted is provided by the plugin, not by the user.

    Plugin Author rolandbarker

    (@rolandbarker)

    1 week, 4 days ago

    Update: this is a new report, so I’m looking into it now.

    By the way, we don’t publicize these unless I don’t fix it, this was scheduled to be published on August 27 if I don’t fix it before that.

Viewing 2 replies - 1 through 2 (of 2 total)

You must be logged in to reply to this topic.