Cross Site Scripting Vulnerability?

Hi

toad78 flagged this up 5 days ago. I’m getting the same from Wordfence. Please can you let us know whether a patch is available.

Message from Wordfence with link to current state:

Critical Problems:

* The Plugin “Smart Recent Posts Widget” has a security vulnerability.

Vulnerability Severity: 4.4/10.0 (Medium)?Vulnerability Information
https://www.ads-software.com/plugins/smart-recent-posts-widget/#developers

Thanks

Same. If no update, does anyone know of anything similar?

If the plugin developer isn’t going to respond, obviously this isn’t going anywhere. I’m currently looking at Recent Posts Widget With Thumbnails. I’ve used it before and am thinking of going back to it, which is simple to use but a pain to format the layouts.

Since I no longer have access to the plugin (acquired last year), I suppose you should wait or move to another plugin.

It was updated on the git repo so will shortly be updated here too:
https://github.com/tombenj/smart-recent-posts-widget/commits/master/

XSS issue was fixed in version 1.0.4. Thanks all!

Hi, Can you confirm this is fixed in 1.0.4 please as some security software is still showing it has XSS vulnerabilities. One example ShieldPro