Title: Where has Insert Pages Plugin Gone
Last modified: September 30, 2017

---

# Where has Insert Pages Plugin Gone

 *  Resolved [Christopher Hilling](https://wordpress.org/support/users/chilling/)
 * (@chilling)
 * [8 years, 7 months ago](https://wordpress.org/support/topic/where-has-insert-pages-plugin-gone/)
 * The “Insert Pages” plugin by Paul Ryan appears to have disappeared from the WordPress
   Plugin website, anyone know why?
    (Last version I believe was 3.2.3)
 * The page I need help with: _[[log in](https://login.wordpress.org/?redirect_to=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fwhere-has-insert-pages-plugin-gone%2F%3Foutput_format%3Dmd&locale=en_US)
   to see the link]_

Viewing 4 replies - 1 through 4 (of 4 total)

 *  [Haim](https://wordpress.org/support/users/koostamas/)
 * (@koostamas)
 * [8 years, 7 months ago](https://wordpress.org/support/topic/where-has-insert-pages-plugin-gone/#post-9544854)
 * Yes, it is missing for me, as well.
    I like it a lot… Where did it go?
 *  Thread Starter [Christopher Hilling](https://wordpress.org/support/users/chilling/)
 * (@chilling)
 * [8 years, 7 months ago](https://wordpress.org/support/topic/where-has-insert-pages-plugin-gone/#post-9546143)
 * The WordPress Plugns page Inset Pages has now reappeared on the WordPress.org
   site so this issue is now resolved.
 * [https://wordpress.org/plugins/insert-pages/](https://wordpress.org/plugins/insert-pages/)
 *  [Ladislav](https://wordpress.org/support/users/sirdik/)
 * (@sirdik)
 * [8 years, 7 months ago](https://wordpress.org/support/topic/where-has-insert-pages-plugin-gone/#post-9546823)
 * Can we know the reason why was plugin removed from wordpress.org repo?
 *  Plugin Author [Paul Ryan](https://wordpress.org/support/users/figureone/)
 * (@figureone)
 * [8 years, 7 months ago](https://wordpress.org/support/topic/where-has-insert-pages-plugin-gone/#post-9564220)
 * A vulnerability report was submitted. Basically, a nefarious Editor (or above)
   on your site could specify a custom template in the Insert Pages shortcode that
   was outside of the WordPress root (directory traversal attack). Combined with
   the ability to insert custom PHP code into the web server logs by specifying 
   a fake User Agent string, the attacker could execute arbitrary code by pointing
   the custom template to the log file.
 * The vulnerability is mitigated by the fact that the attacker would already need
   an account on your WordPress site with Editor privileges or higher.
 * The vulnerability was fixed in 3.2.4, and I’ll be releasing another update soon
   because the fix was a bit too restrictive and messed with legitimate custom template
   uses (if the custom templates are in a child theme instead of the parent theme).

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘Where has Insert Pages Plugin Gone’ is closed to new replies.

 * ![](https://s.w.org/plugins/geopattern-icon/insert-pages.svg)
 * [Insert Pages](https://wordpress.org/plugins/insert-pages/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/insert-pages/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/insert-pages/)
 * [Active Topics](https://wordpress.org/support/plugin/insert-pages/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/insert-pages/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/insert-pages/reviews/)

 * 4 replies
 * 4 participants
 * Last reply from: [Paul Ryan](https://wordpress.org/support/users/figureone/)
 * Last activity: [8 years, 7 months ago](https://wordpress.org/support/topic/where-has-insert-pages-plugin-gone/#post-9564220)
 * Status: resolved