XSS security release of 7 may 2015 | WordPress.org

Resolved luciole135
(@luciole135)

8 years, 11 months ago

Hi,
These files have been deleted with the new WortdPress 4.2.2 security releas this may 7, 2015.
wp-content/themes/twentyfifteen/genericons/example.html (deleted)
wp-content/themes/twentythirteen/genericons/example.html (deleted)
wp-content/themes/twentyfourteen/genericons/example.html (deleted)
https://codex.wordpress.org/Version_4.2.2#List_of_Files_Revised

Yet your plugin finds that they seem legitimate.

Can you fix it ?

https://wordpress.org/plugins/old-core-files/

Viewing 1 replies (of 1 total)

Plugin Author Rami Yushuvaev
(@ramiy)

8 years, 8 months ago

In our plugin we use the builtin $_old_files array that stores a relative path for each and every old core file.

Those files you mantioned, are not stored in this array because they are not core files – they are theme files.

Viewing 1 replies (of 1 total)

The topic ‘XSS security release of 7 may 2015’ is closed to new replies.

In: Plugins
1 reply
2 participants
Last reply from: Rami Yushuvaev
Last activity: 8 years, 8 months ago
Status: resolved