1.7.7 Security Vulnerability / Can’t Update to 1.7.8

CPanel alerted us to this as well. It’s being reported at https://patchstack.com/database/vulnerability/yikes-inc-easy-custom-woocommerce-product-tabs/wordpress-custom-product-tabs-for-woocommerce-plugin-1-7-7-broken-access-control-vulnerability-leading-to-yikes-the-content-toggle-option-update

The plugin page is still showing 1.7.7 but the download button indicates 1.7.8. There is no update available within WordPress.

Please advise when the patched update will be available.

Thanks!

Hey,

Plesk has also highlighted as a vulnerability and to update to 1.7.8 but can’t se this version available.

Please advise once it’s available for download.

Thanks

Plesk WordPress Toolkit also have issued an email alert about the security issue and no update available.
I think the plugin version number has not been updated at the header info of the main php file.
Please fix asap and let us know.
Thank you!

Hey all, this should be fixed now.

@ucsendre was correct, the comment wasn’t updated in the primary PHP file.

We use a Github Action to deploy, so the easiest solution was to bump it to 1.7.9 with the correct comment. Please try to update to that latest version now.

Jon

Thank you for resolving.

Perfect, thanks for the fix ??

@jpowersdev thanks for the prompt response! wish I could give you another 5* review for the support ??

That is very nice of you to say!

Thank you.
-Tracy