[webbkk]

Hi,

My site hacked many time in FEB. And now still con’t fix it, I try scan my site from WPScans . The result display attack from your plugin. But I update your plugin to last version 4.14.6.

Effect to my site.
1. Can’t update plugin, WordPress new version.
2. Some plugin crash.
3. Can’t create, update, publish post or page.

Please guide me for fix it.

Thank you.

[Ernest Marcinko]

Hi,

That vulnerability was fixed a very long time ago (over 3 years), and it is also impossible to exploit it within the latest WordPress versions (4.5 and further). The exploit was actually never tested to be working, and was never reported as an issue, it was only a potential threat, reported by a security expert, not published before the fix.
I’m afraid the issue is probably unrelated to the plugin, you might have to ask a security expert about the problem.

[Author]

Posts