vulnerable to Arbitrary File Upload? | WordPress.org

Resolved tmuka
(@tmuka)

2 months, 1 week ago

My hosting control panel is flagging this plugin as vulnerable to arbitrary file upload. Is there an update to address that? Thanks!

https://patchstack.com/database/wordpress/plugin/online-accessibility/vulnerability/wordpress-accessibility-suite-plugin-4-17-arbitrary-file-upload-vulnerability?_a_id=110

The page I need help with: [log in to see the link]

Viewing 4 replies - 1 through 4 (of 4 total)

Plugin Author Ability, Inc
(@onlineada)

2 months, 1 week ago

We’ve just released version 4.18 of the plugin, which includes a patch for the issue you reported. You can update to the latest version directly from your WordPress admin dashboard.

If you run into any trouble updating or have further questions, feel free to reach out — happy to help.

Thread Starter tmuka
(@tmuka)

2 months, 1 week ago

thanks for the quick update!

Thread Starter tmuka
(@tmuka)

2 months, 1 week ago

I’m getting another notice now https://patchstack.com/database/wordpress/plugin/online-accessibility/vulnerability/wordpress-accessibility-suite-by-ability-inc-plugin-4-17-sql-injection-vulnerability?_a_id=110

Plugin Author Ability, Inc
(@onlineada)

2 months, 1 week ago

Hi, to further assist you please email me: kimberly.r@onlineada.com.

Viewing 4 replies - 1 through 4 (of 4 total)

You must be logged in to reply to this topic.

In: Plugins
5 replies
2 participants
Last reply from: Ability, Inc
Last activity: 2 months, 1 week ago
Status: resolved