Security Vulnerability – No Patch Yet

Hi @ljknechtel

We have investigated this and added the necessary security patch to resolve this vulnerability issue. Kindly update your plugin to the latest version to be able to get and use the version with the security patch.

Thanks.

Kind regards,
Elvis.

• This reply was modified 3 years ago by elviiso.

Hi Support,

Just updated to Foo Gallery v2.1.34 with Freemius patch.
iThemes Security is still reporting vulnerability issue.
Can you please advise.

Cheers Reid

Hi @ewfy1

These security plugins/scanners usually take a bit longer to update their databases once a vulnerability is patched up. This will most likely be updated within the next 24hrs.

Thanks.

Kind regards,
Elvis.

Hello @elviiso

I have just had a warning about this plugin that we have with FooGallery
WordPress FooGallery plugin <= 2.1.34 – Sensitive Information Disclosure vulnerability
WordPress FooGallery plugin <= 2.1.34 – Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

And can be seen here
https://patchstack.com/database/vulnerability/foogallery/wordpress-foogallery-plugin-2134-toggle-the-debug-mode-via-cross-site-request-forgery-csrf-vulnerability
https://patchstack.com/database/vulnerability/foogallery/wordpress-foogallery-plugin-2134-sensitive-information-disclosure-vulnerability

I see your comment that some scanners take a bit longer but these are referencing this specific version that is the latest version released and it has been more than 24hrs now.

Any help appreciated,
Thanks,
Adam