Backdoor detected. Allows user to register as admin

Hello @vadikcoma,

Thank you for bringing this to our notice. Yes, we just found that out on Friday as well. We have released an update to the plugin that fixes it in the latest release that was pushed out an hour ago.

:Vishal

• This reply was modified 5 years, 9 months ago by Vishal Kothari. Reason: removing specific version number information

It seems that there is same backdoor in YITH Wishlist and other YITH plugins, as hacked sites have just YITH plugins installed

Oh, that’s not good. This is a related thread about the issue on the YITH Wishlist plugin forums: https://www.ads-software.com/support/topic/new-user-created/ .

We’ve fixed our plugin to remove this & also informing the customers about the same.

Yes, hopefully YITH will be updated too

True. I am marking this one as resolved.