Google giving me plugin security alert?

  • Hi,

    I maintain the website for a local rabbit rescue shelter and your plugin has been lovingly used by us for quite some time; thank you so much for making it so easy to integrate the Petfinder listings within our website!

    That being said, did something with the plugin recently change? Earlier today the “Google Search Console” tool alerted me that there was malware on our site, but it specifically references the “/wp-content/plugins/petfinder-listings/” directory. And the Google alert says it will flag the site as hosting “harmful content” until it’s resolved.

    Is anyone else reporting this? I’m hoping it is some mistake but I don’t know what action to take? It’s definitely not spam/phishing, since I logged-into the Google Search Console directly and the malware alert/warning is there. And we don’t use any other WordPress plugins on our shelter site so I don’t think that’s the issue.

    Any ideas? Thanks in advance!

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author bridgetwes

    (@bridgetwes)

    Are you using the latest version of the plugin? Version 1.1?

    In March the plugin was removed from the repository because some output strings were not properly sanitized. I got everything properly sanitized and the plugin as added back after it was reviewed by the security team. Perhaps Google is late to pick up the fix?

    I have Google Search Console on my own site that uses the Petfinder plugin and it is not reporting a security warning.

    If you find something that needs fixing in the plugin let me know, but I am not aware of anything, and I thoroughly reviewed it 6 months ago.

    Thread Starter yogilem

    (@yogilem)

    Thanks for the prompt reply! I just deleted and re-installed the plugin to be safe, but it was showing Version 1.1 before I removed it so I don’t know what could have caused it being flagged as malware.

    I just submitted a request for Google to perform a follow-up security review which hopefully comes back clean!

    Thanks again.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Google giving me plugin security alert?’ is closed to new replies.