TablePress Pulled From Plugin Repository

same here – what does this mean?!

Same here, found out via WordFence warning email. No explanation here yet: https://tablepress.org/news/

I’m concerned – hopefully a response from the author will be posted soon.

Could it be related to this?
(Probably not, as TobiasBg (@tobiasbg) is still active in support threats. Unless someone took his identity.)

FS Contact Form no longer in WP Market
https://www.ads-software.com/support/topic/fs-contact-form-no-longer-in-wp-market/#post-9520284

Display Widgets Plugin Includes Malicious Code to Publish Spam on WP Sites
https://www.wordfence.com/blog/2017/09/display-widgets-malware/

Someone is buying plugins to insert them with malicious code
https://www.wordfence.com/blog/2017/09/man-behind-plugin-spam-mason-soiza/

Hi guys,

thanks for your post, and sorry for the trouble.

Indeed, TablePress is currently not available in the WordPress plugin repository. It has been temporarily suspended by the WordPress plugins team, as they received a report about a potential security issue. I’m currently working with them to get more information about this. Once this is resolved, TablePress will be back in the plugin directory.

I can assure you that I’m still the same TobiasBg :-), that TablePress has not been sold or been given away, and that this is absolutely unrelated to the mentioned issues with other plugins.

At this time, no action by you is necessary. I only ask for a little bit of patience, while I work as quickly as possible to investigate and fix this.

Regards,
Tobias

Love your plugin, Tobias, and use it kinda of extensively on a couple of sites. I’m rooting for you!

Ho.. Good news.. This morning when I’ve received the alert from Wordfence I was really disappointed about.. I hope that all goes good and that Tablepress comes back soon.

Thank @tobiasbg

Many thanks Tobias for such a speedy response!

We’ll all gone buy you a coffee when you have solved this issue. ??

Let us know if we can help. I sent you a donation a week ago, so you have my email details and you can message me confidentially if you want me to help test anything on live, heavy use sites running Tablepress.

I did notice in the past 4 hours my load averages have gone up by 50-75% on WordPress sites running at 50,000+ user sessions a day and have Tablepress installed. I’ve been working all day to find the cause, so hopefully your fix helps to fix my problem?

The question is: do we need to remove Tablepress from our plug-in folder? is there a real security risk right now?

thanks!

Thanks for the quick response. I received notification from Wordfence too, checked WP and became alarmed. The ONLY critical information (required by our customer contracts) on our website is in our tables and we are using your extensions (thank you, we donated). I’m assuming that we’ll get an plugin update notification again when the plugin is restored.

Thanks for the update. I just made a donation of $50. Always want to make sure you have what you need. This is the best plugin I’ve ever used!

That’s really great news. I must say I too found it all rather odd. So relieved.
Good luck and thanks.

I see that the plugin is back online without an update or something, so it was a false alarm?