vulnerabilities detected

Hi,

We’ve release an article about here for full information – https://updraftplus.com/updraftplus-1-23-3-2-23-3-important-security-release/

Thanks,
Bryle

“However the new version hasn’t fixed this.”

Please can you give your source or explanation for this?

I assume OP is using ManageWP, which is flagging version 1.23.3 (free) as still vulnerable. They are using this source: https://patchstack.com/database/vulnerability/updraftplus/wordpress-updraftplus-plugin-1-22-14-1-23-2-broken-access-control-vulnerability

It may be a false flag on ManageWP’s part, since their source says the issue is fixed in version 1.23.3.

Patchstack, as far as I know, haven’t done anything other than read our own blog post.

ManageWP just confirmed it’s a false-positive on their part. They’re working on resolving the issue and the OP can safely ignore it.

Any update here please ? This has been going on since last weekend and the plugin is still reported as vulnerable despite the release of 1.23.3. and this is triggering daily alert emails from my Security plugin…

Thanks

Hi,

It’s not likely that Patchstack visit this forum. To get upn the progress of their products, you’d need to use their own channels.

David