Security Vulnerability

Hi,

Sorry about that, this issue vulnerability has not been fixed.
I’ll will make a fix ASAP.

Hi,

I’ve just released a new version with the fix.

Let me know if you need any information ??

I just got an email from ithemes this morning saying it is not patched yet.

I don’t really know how things work between plug-in developers and security tools like ithemes.

Does this mean they have not accepted your patch or that they have not been notified yet?

Hi,

I’ve uploaded the patch version on the website that reported the vulnerability and it has been accepted.
Here is the link: https://patchstack.com/database/vulnerability/wp-admin-notification-center/wordpress-hide-admin-notices-admin-notification-center-plugin-2-3-2-cross-site-request-forgery-csrf-vulnerability

I’ve tried to search on itheme where I can contact them for that but there is no information about that.

@roumi

I’m guessing the info will filter to IThemes eventually. I don’t really know how that works.

Thanks for patching that though.