Wordfence Warning: Custom Login Page Customizer” has a security vulnerability | WordPress.org

Resolved spotter698
(@spotter698)

1 year, 1 month ago

Hi,

I am receiving emails from Wordfence advising that the Plugin “Custom Login Page Customizer” has a security vulnerability. Something to do with Freemius SDK. Here are the links they provided :-

Vulnerability Severity: 6.1/10.0 (Medium) Vulnerability Information
https://wordpress.org/plugins/login-customizer/#developers

No doubt all your other clients who use Wordfence will be receiving this email and warning as well.

Thanks,
Steve

The page I need help with: [log in to see the link]

Viewing 5 replies - 1 through 5 (of 5 total)

Plugin Author Adnan
(@hiddenpearls)

1 year, 1 month ago

@spotter698 Thank you for reporting. We had pushed their previous vulnerability a week ago. but didn’t notice the one happened 2 days ago.

We are updating the SDK right now and sending an update in few mins.

Thanks again.
Thread Starter spotter698
(@spotter698)

1 year, 1 month ago
You’re welcome. I love this plugin.
- This reply was modified 1 year, 1 month ago by spotter698.
Plugin Author Adnan
(@hiddenpearls)

1 year, 1 month ago

@spotter698 We just sent the release with fixed SDK of freemius.

Thread Starter spotter698
(@spotter698)

1 year, 1 month ago

Thanks. Updated to 2.2.3.

Zainab Afaq
(@wpzainab)

1 year, 1 month ago

@spotter698

Yay! We are thrilled to have this upgrade in our plugin.

Would you please give us 1 minute out of your precious time to post good ratings and excellent comments on the review section? It helps our development team to feel appreciated.

Thanks!

Viewing 5 replies - 1 through 5 (of 5 total)

The topic ‘Wordfence Warning: Custom Login Page Customizer” has a security vulnerability’ is closed to new replies.

In: Plugins
6 replies
3 participants
Last reply from: Zainab Afaq
Last activity: 1 year, 1 month ago
Status: resolved