Vulnerability found by Wordfence | WordPress.org

wpkiller
(@wpkiller)

1 year, 5 months ago
Wordfence have found v3.3.0 to have a vunlerability. Unfortunately, this is currently the latest version.

Is there a new version expected soon?

Following is a copy/paste from Wordfence’s scan:
- Plugin Name: Scriptless Social Sharing
- Current Plugin Version: 3.3.0
- Details: To protect your site from this vulnerability, the safest option is to deactivate and completely remove “Scriptless Social Sharing” until a patched version is available. Get more information.(opens in new tab)
- Repository URL: https://wordpress.org/plugins/scriptless-social-sharing(opens in new tab)
- Vulnerability Information: https://www.wordfence.com/threat-intel/vulnerabilities/id/cd016800-ad9b-4617-82ff-1c439b9b3920?source=plugin(opens in new tab)
- Vulnerability Severity: 6.4/10.0 (Medium)

Viewing 5 replies - 1 through 5 (of 5 total)

Plugin Author Robin Cornett
(@littlerchicken)

1 year, 5 months ago

This was fixed in the 3.3.0 version and involved only the shortcode. I submitted the fixed version to Patchstack and am waiting for confirmation that they’ve received/reviewed it.

Thread Starter wpkiller
(@wpkiller)

1 year, 5 months ago

TNX. Please keep us updated.
Thread Starter wpkiller
(@wpkiller)

1 year, 4 months ago
Still same and no updates from the plugin owner.

Also, I now notice this thread is marked as resolved. how come?

EDIT: I’ve changed the status back to not resolved.
- This reply was modified 1 year, 4 months ago by wpkiller.
Thread Starter wpkiller
(@wpkiller)

1 year, 4 months ago

After waiting over 2 weeks, I’m off to another (more secure) plugin.

Plugin Author Robin Cornett
(@littlerchicken)

1 year, 4 months ago

I apologize for the delay–I have reached out to Patchstack again.

Viewing 5 replies - 1 through 5 (of 5 total)

The topic ‘Vulnerability found by Wordfence’ is closed to new replies.

6 replies
7 participants
Last reply from: Robin Cornett
Last activity: 1 year, 4 months ago
Status: not resolved