WordPress.org

Posted a reply to Failed to query wpvulndb, status code does not indicate success: 403, on the site WordPress.org Forums:
@carax If you click on "Settings" in the left hand admin menu, then click "Plugin…

2 years ago

Posted a reply to Failed to query wpvulndb, status code does not indicate success: 403, on the site WordPress.org Forums:
Because of changes made to the vulnerability database that this plugin uses, you will now…

2 years ago

Posted a reply to after entering API still emails “please register”, on the site WordPress.org Forums:
If you update your Scanner to v2.0.2 do you still get this message?

2 years ago

Posted a reply to [Plugin Security Scanner] Using up API calls > scanning too often, on the site WordPress.org Forums:
By default, the scanner should run one per day via the WordPress cron system. The…

2 years ago

Posted a reply to Template not being used, on the site WordPress.org Forums:
Thank you for being so responsive. Appreciate it.

3 years ago

Posted a reply to Template not being used, on the site WordPress.org Forums:
Hi Jeff, Thanks for replying. The reason I ask about this approach is that it…

3 years ago

Posted a reply to Fatal Error on initial scan, on the site WordPress.org Forums:
I'm tempted to put this down as a temporary connection issue between your server and…

3 years ago

Posted a reply to Vulnerability found: WordPress 2.3-4.8.2 – Host Header Injection in Pass Reset, on the site WordPress.org Forums:
The most recent version of my plugin allows you to ignore unpatched issues such as…

4 years ago

Posted a reply to False positive detection with jQuery Mega Menu, on the site WordPress.org Forums:
No feedback, so closing as resolved.

4 years ago

Posted a reply to Vulnerability found: bbPress – Unauthenticated SQL Injection (False Alarm?), on the site WordPress.org Forums:
Hi George, The WPScan database has now been updated: https://wpvulndb.com/vulnerabilities/8958 > fixed in version 2.5.13…

4 years ago

Posted a reply to Vulnerability found: bbPress – Unauthenticated SQL Injection (False Alarm?), on the site WordPress.org Forums:
Hi George, This is likely a false alarm, but I am going to check with…

4 years ago

Posted a reply to Vulnerability found: WordPress 2.3-4.8.2 – Host Header Injection in Pass Reset, on the site WordPress.org Forums:
It is not currently listed as a vulnerability in 4.9: https://wpvulndb.com/wordpresses This means that either…

4 years ago

Posted a reply to Email not being sent, on the site WordPress.org Forums:
The email will only be sent out if vulnerabilities are found. If nothing is found,…

4 years ago

Posted a reply to Feature request: Custom email to receive notifications, on the site WordPress.org Forums:
Great suggestion! It will be relatively simple for me to add a custom hook to…

4 years ago

Posted a reply to Waste of time to install, on the site WordPress.org Forums:
I'm sorry you are experiencing issues with the plugin. Can you elaborate what you mean…

4 years ago

Posted a reply to Cannot Log Out, on the site WordPress.org Forums:
To re-create the logout page, go to your admin and go to Pages -> Add…

4 years ago

Posted a reply to Cannot Log Out, on the site WordPress.org Forums:
Can confirm that re-creating the logout page and adding the _tml_action=logout meta value (via phpmyadmin)…

4 years ago

Posted a reply to Cannot Log Out, on the site WordPress.org Forums:
Thanks for your response, Jeff. It seems the solution to this issue is to re-create…

4 years ago

Posted a reply to Vulnerability found: WordPress 2.3-4.8.2 – Host Header Injection in Pass Reset, on the site WordPress.org Forums:
The setting can be found under Settings -> General (see screenshot) https://imgur.com/a/nGaAC

4 years ago

Posted a reply to Vulnerability found: WordPress 2.3-4.8.2 – Host Header Injection in Pass Reset, on the site WordPress.org Forums:
Version 1.5.1 of the plugin has a new setting that allows you to ignore the…

4 years ago

Posted a reply to Vulnerability found: WordPress 2.3-4.8.2 – Host Header Injection in Pass Reset, on the site WordPress.org Forums:
The vulnerability is genuine. More details can be found here: http://blog.dewhurstsecurity.com/2017/05/04/exploitbox-wordpress-security-advisories.html Given that no official…

4 years ago

Posted a reply to Cannot Log Out, on the site WordPress.org Forums:
I've also started to experience this issue recently. I think the problem is that there…

4 years ago

Posted a reply to Option for disabling known Security issues, on the site WordPress.org Forums:
Thanks for the idea -- this is something I will consider adding to a future…

4 years ago

Posted a reply to “Empty” page if all is okay?, on the site WordPress.org Forums:
Hi Alpengreis, Yes, usually you should see a message "Scan completed: 0 vulnerabilities found." It…

4 years ago

Posted a reply to Vulnerability found: WordPress 2.3-4.8.2 – Host Header Injection in Pass Reset, on the site WordPress.org Forums:
Yes, unfortunately disabling the plugin is the only option at the moment if you want…

4 years ago

Posted a reply to Setup Webhook Notification, on the site WordPress.org Forums:
.

4 years ago

Posted a reply to Setup Webhook Notification, on the site WordPress.org Forums:
Hi Christoph, You only need to enter a URL into this if you want to…

4 years ago

Posted a reply to False positive detection with jQuery Mega Menu, on the site WordPress.org Forums:
Hi Richard, I was able to re-produce the behaviour you are seeing after I donwloaded…

4 years ago

Posted a reply to False positive detection with jQuery Mega Menu, on the site WordPress.org Forums:
Hi Richard, Can you confirm that this is the plugin you are referring to? https://wordpress.org/plugins/jquery-mega-menu/…

4 years ago

Posted a reply to vulnerability in uninstalled plugin, on the site WordPress.org Forums:
Hi, So I can re-produce this issue, please can you email me your Theme files…

5 years ago