• I’ve received this message from our WordPress host:

    The plugin has a vulnerability that makes it possible for authenticated users with subscriber (and higher) permissions to call an AJAX action.?There is no fix available.

    Is there an update that resolves this please?

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author vaakash

    (@vaakash)

    Hi,

    The reported issue is already fixed in v6.3.1. It was a minor issue which causes no leak/loss.

    I’m following up with patchstack team to get this resolved ASAP.

    Thanks,

    Aakash

    Thread Starter rogerlightfoot

    (@rogerlightfoot)

    Thanks Aakash

    Just show you are aware, Kinsta reported this to me just a day or two ago.

    I’ll make sure we up using the latest version.

    Roger

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Security Worry – AJAX’ is closed to new replies.