Tim Thumb update

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Author Ajay

    (@ajay)

    9 years, 1 month ago

    Hi,

    I’ll be removing support for Tim Thumb in the next version of the plugin because the author (Ben) is no longer supporting this. As a result, it will no longer be bundled within the plugin.

    danbrady

    (@danbrady)

    9 years ago

    Argh. Now I’ve learned you’re still using Tim Thumb, after serious vulnerabilities were found in it a long time ago, I am deleting this plugin in a hurry.

    danbrady

    (@danbrady)

    9 years ago

    I stand corrected, timthumb has been deprecated so is no longer included (though why it’s taken this long I have no idea)

    Plugin Author Ajay

    (@ajay)

    9 years ago

    Dan,

    As far as I am aware, timthumb isn’t vulnerable. It’s had previous security issues which were fixed.

    I’ve deprecated this from the plugin from v2.1.0 that you have noticed.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Tim Thumb update’ is closed to new replies.