Skype support live chat.Claim Your Free 999 Pesos Bonus Today

Resolved elbrutalo
(@elbrutalo)

1 year, 2 months ago

Hi there,

there seems to be a security issue with WP Event Manager up to version 3.1.41: The WP Event Manager plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 3.1.41 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Is there going to be a fix soon?

https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/wp-event-manager/wp-event-manager-3139-cross-site-scripting

Thank you so much, best, Patrick

The page I need help with: [log in to see the link]

Viewing 7 replies - 1 through 7 (of 7 total)

Plugin Support wpemhelp
(@wpemhelp)

1 year, 2 months ago

Hello,
We have reported this issue, and we will soon release the updated version.

Regards,
Jathin.

Thread Starter elbrutalo
(@elbrutalo)

1 year, 1 month ago

Still pending and still marked as security issue by WordFence etc. … is there going to be an update soon? thanks, best, Patrick

Plugin Support wpemhelp
(@wpemhelp)

1 year, 1 month ago

Hello,

The issue has been fixed . The updated version will be released soon.

Regards,
Jathin.

wpflexcreate
(@wpflexcreate)

1 year, 1 month ago

@wpemhelp, When do you plan on releasing the patch version? Saying, “The updated version will be released soon,” is not adequate. Based on the history of your plugin, you’ve been saying this since last year.

Plugin Support wpemhelp
(@wpemhelp)

1 year, 1 month ago

Hello,

The updated plugin has been released please update the plugin this has been resolved.

Regards,
Jathin.

Plugin Support wpemhelp
(@wpemhelp)

1 year, 1 month ago

Hello,

Kindly reach us if you have face any issues.

Regards,
Jathin

Plugin Support wpemhelp
(@wpemhelp)

1 year ago

Hello,
@wpflexcreate @elbrutalo

Thank you for the patience and co-operation. Some issues take time to figure out and needs to be tested. We are sorry for the delay and inconvenience and we are here to help you and fix it.
We have released new version with the fix , kindly download the updated version and Let us know if you are facing any problem. Please reach out to us if you face any problem.

Regards,
WP Event Manager.

Viewing 7 replies - 1 through 7 (of 7 total)

The topic ‘Security problem with WP Event Manager’ is closed to new replies.