Broken Acces Control vulnerability

Hello,

Thanks for reaching here…

That is not the information above WordPress WP Responsive Recent Post Slider/Carousel plugin <= 3.4?so please explain which issue for this plugin…

Thanks,

Vulnerability information comes from:

https://www.plesk.com/blog/product-technology/plesk-wp-toolkit-5-8-release-site-vulnerability-scan-autodetection-wordpress-login-url/

Their information provider is: https://patchstack.com/

Hello,

Please shared our plugin Vulnerability?report so we will check…

Thanks,

Here are the vulnerability details: WordPress WP Responsive Recent Post Slider/Carousel plugin <= 3.4 – Broken Access Control vulnerability – Patchstack

Hello,

Thanks for reaching out to us…

We have checked the vulnerability issue link but this link does not properly define the issue and does not define the exact issue for our plugin, so we are talking to the team for the vulnerability issue.

Thanks,

Please fix this asap: https://prnt.sc/aapgxo3zHB93

Hi there,

any idea about how to fix this and when :)?

https://www.wordfence.com/threat-intel/vulnerabilities/detail/multiple-wponlinesupport-plugins-various-versions-missing-authorization-to-notice-dismissal

its description says:

Multiple WPOnlineSupport plugins for WordPress are vulnerable to unauthorized modification of data due to a missing capability check on the wpos_anylc_admin_init_process() function hooked via admin_init in various versions. This makes it possible for unauthenticated attackers to dismiss a license notice.

Hello,

We solved the security issue 2 months ago but Wordfence has not updated the database. we have talked to Wordfence by email and Wordfence updated the database so please check the Vulnerability Severity link all plugins perfectly working without any security issue…