Security Vulnerability

  • Resolved emswpuser

    (@emswpuser)


    1 year, 1 month ago

    Got a Wordfence Security Alert about this plugin regarding a Cross-Site Scripting vulnerability. When will a fix be released?

    Thanks.

    The page I need help with: [log in to see the link]

Viewing 5 replies - 1 through 5 (of 5 total)
  • Plugin Support wpemhelp

    (@wpemhelp)

    Hello,

    I would like to inform you that The issue has been resolved. The updated version of the plugin will be released soon.


    Regards,
    Jathin.

    Hello,

    The security issue with this plugin started almost 4 months ago with version 3.1.39.

    https://www.ads-software.com/support/topic/security-issue-154/

    They claimed back then that the issue is fixed with version 3.1.41, but that’s not true, as we can see today.

    It has been more than 3 weeks now and whenever someone ask about this issue they will say “The updated version will be released soon.”

    https://www.ads-software.com/support/topic/security-problem-with-wp-event-manager/

    Some people may say “soon” to mean “whenever they get a chance”, which could be very vague and unpredictable. Therefore, this update may never be released.

    Thanks.

    Be warned, DO NOT USE!! or REMOVE PLUGIN IMMEDIATELY!!
    We’re in the same situation now. Just received an email saying, “The updated version will be released soon.” after reaching out to them on multiple channels. We have to remove this from all sites we added it to.

    Plugin Author WP Event Manager

    (@wpeventmanager)

    @wpflexcreate, @inasser @emswpuser,

    Thank you for the patient and co-operating with us. Sometime some issues take times to figure out it and testing so sorry for the delay and inconvenience and we are here to help you and fix it.

    We have released new version with fixed so kindly please download it and Let us know if still any problem.

    Kindly please reach us if you have any problem.

    Regards

    WP Event Manager Team

    Plugin Support wpemhelp

    (@wpemhelp)

    Hello,
    @wpflexcreate,?@inasser?@emswpuser
    We’d like to inform you that we have released v.3.1.43?this has no issues with the security. Please install the latest version.


    Regards,
    Wp Event Manager.

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘Security Vulnerability’ is closed to new replies.