WordPress.org

Posted a reply to Vulnerability found: WordPress 2.3-4.8.2 – Host Header Injection in Pass Reset, on the site WordPress.org Forums:
The most recent version of my plugin allows you to ignore unpatched issues such as…

3 months ago

Posted a reply to False positive detection with jQuery Mega Menu, on the site WordPress.org Forums:
No feedback, so closing as resolved.

3 months ago

Posted a reply to Vulnerability found: bbPress – Unauthenticated SQL Injection (False Alarm?), on the site WordPress.org Forums:
Hi George, The WPScan database has now been updated: https://wpvulndb.com/vulnerabilities/8958 > fixed in version 2.5.13…

5 months ago

Posted a reply to Vulnerability found: bbPress – Unauthenticated SQL Injection (False Alarm?), on the site WordPress.org Forums:
Hi George, This is likely a false alarm, but I am going to check with…

5 months ago

Posted a reply to Vulnerability found: WordPress 2.3-4.8.2 – Host Header Injection in Pass Reset, on the site WordPress.org Forums:
It is not currently listed as a vulnerability in 4.9: https://wpvulndb.com/wordpresses This means that either…

6 months ago

Posted a reply to Email not being sent, on the site WordPress.org Forums:
The email will only be sent out if vulnerabilities are found. If nothing is found,…

6 months ago

Posted a reply to Feature request: Custom email to receive notifications, on the site WordPress.org Forums:
Great suggestion! It will be relatively simple for me to add a custom hook to…

6 months ago

Posted a reply to Waste of time to install, on the site WordPress.org Forums:
I'm sorry you are experiencing issues with the plugin. Can you elaborate what you mean…

6 months ago

Posted a reply to Cannot Log Out, on the site WordPress.org Forums:
To re-create the logout page, go to your admin and go to Pages -> Add…

6 months ago

Posted a reply to Cannot Log Out, on the site WordPress.org Forums:
Can confirm that re-creating the logout page and adding the _tml_action=logout meta value (via phpmyadmin)…

6 months ago

Posted a reply to Cannot Log Out, on the site WordPress.org Forums:
Thanks for your response, Jeff. It seems the solution to this issue is to re-create…

6 months ago

Posted a reply to Vulnerability found: WordPress 2.3-4.8.2 – Host Header Injection in Pass Reset, on the site WordPress.org Forums:
The setting can be found under Settings -> General (see screenshot) https://imgur.com/a/nGaAC

6 months ago

Posted a reply to Vulnerability found: WordPress 2.3-4.8.2 – Host Header Injection in Pass Reset, on the site WordPress.org Forums:
Version 1.5.1 of the plugin has a new setting that allows you to ignore the…

7 months ago

Posted a reply to Vulnerability found: WordPress 2.3-4.8.2 – Host Header Injection in Pass Reset, on the site WordPress.org Forums:
The vulnerability is genuine. More details can be found here: http://blog.dewhurstsecurity.com/2017/05/04/exploitbox-wordpress-security-advisories.html Given that no official…

7 months ago

Posted a reply to Cannot Log Out, on the site WordPress.org Forums:
I've also started to experience this issue recently. I think the problem is that there…

7 months ago

Posted a reply to Option for disabling known Security issues, on the site WordPress.org Forums:
Thanks for the idea -- this is something I will consider adding to a future…

7 months ago

Posted a reply to “Empty” page if all is okay?, on the site WordPress.org Forums:
Hi Alpengreis, Yes, usually you should see a message "Scan completed: 0 vulnerabilities found." It…

7 months ago

Posted a reply to Vulnerability found: WordPress 2.3-4.8.2 – Host Header Injection in Pass Reset, on the site WordPress.org Forums:
Yes, unfortunately disabling the plugin is the only option at the moment if you want…

8 months ago

Posted a reply to Setup Webhook Notification, on the site WordPress.org Forums:
.

8 months ago

Posted a reply to Setup Webhook Notification, on the site WordPress.org Forums:
Hi Christoph, You only need to enter a URL into this if you want to…

8 months ago

Posted a reply to False positive detection with jQuery Mega Menu, on the site WordPress.org Forums:
Hi Richard, I was able to re-produce the behaviour you are seeing after I donwloaded…

8 months ago

Posted a reply to False positive detection with jQuery Mega Menu, on the site WordPress.org Forums:
Hi Richard, Can you confirm that this is the plugin you are referring to? https://wordpress.org/plugins/jquery-mega-menu/…

9 months ago

Posted a reply to vulnerability in uninstalled plugin, on the site WordPress.org Forums:
Hi, So I can re-produce this issue, please can you email me your Theme files…

2 years ago