• Resolved userwords

    (@userwords)


    Im getting this alert because of the inclusion of TipTopPress Facebook and Twitter links in the code on

    wp-content/plugins/category-posts/cat-posts.php

    <h4>Follow us on</h4>
    <div>
    <a target="_blank" href="https://www.facebook.com/TipTopPress">Facebook</a> and
    <a target="_blank" href="https://twitter.com/TipTopPress">Twitter</a></br></br>
    </br>
    </div>

    https://www.ads-software.com/plugins/category-posts/

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Author Mark-k

    (@mark-k)

    @userwords, can you please share with us the exact message it gives so we can speak with the wordfence guys

    Thread Starter userwords

    (@userwords)

    Here you have:

    Modified plugin file: wp-content/plugins/category-posts/cat-posts.php
    
    Filename:
    wp-content/plugins/category-posts/cat-posts.php 
    
    File type:
    Plugin 
    
    Issue first detected:
    11 days 2 hours ago. 
    
    Severity:
    Warning 
    
    Status
    Ignoring this file until it changes  
    
    This file belongs to plugin "Category Posts Widget" version "4.1.7" and has been modified from the file that is distributed by www.ads-software.com for this version. Please use the link to see how the file has changed. If you have modified this file yourself, you can safely ignore this warning. If you see a lot of changed files in a plugin that have been made by the author, then try uninstalling and reinstalling the plugin to force an upgrade. Doing this is a workaround for plugin authors who don't manage their code correctly. [See our FAQ on www.wordfence.com for more info]
    Plugin Author Mark-k

    (@mark-k)

    For testing we are running now with a new version in the repository, but we did not bump yet the version number, and that is probably the cause for that message. Didn’t know that WordFence do such test and will take it under consideration from now on.

    If you want to be on the safe side, you can download the plugin from the repository and upload it via FTP, or just edit the file and change the version number to 4.1.6 to trigger the automatic update mechanism.

    In any case we will probably do a formal release this week.

    Plugin Author Daniel Floeter

    (@kometschuh)

    @userwords: It’s why we update the www.ads-software.com svn without increase the version number. I do this after we had to publish a patch version, then there were in the same place another mistake. I called it a ‘trick’ and do this no more. Especially when there are security tools that detect such tricks. After this incident we decided to write automated test. Now we plan a next version number increase which will extinguish your warnings.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Wordfence Alert – TipTopPress Facebook and Twitter links’ is closed to new replies.