WPT::VulnerabilityFound

Hello,

I did not hear back from you after answering your email and asking for details. So if this is still valid, feel free to write again to me.

René

Edit: I’ve replied to your mail. The mentioned issue ?is not serious and requires that an attacker already has full admin permissions.

However, We are already checking how to close this potential issue.

Thanks for the heads up.

THANK YOU

I have the same alert, so we don’t have to do anything.

Thanks

• This reply was modified 2 years, 5 months ago by Pierre236.

I explained to my hosting company that it was not dangerous and I gave them the link to this post, but they insist that I remove your plugin, which has a security vulnerability that makes the hosting company’s antivirus system go crazy.

Can you do an update to correct this?

@pierretoand @bibliata We released a new version yesterday.

Hi,
iThemes Security still detects a vulnerability with v3.8.3, with no fixes available yet:
https://itsec-site-scanner.ithemes.com/vulnerability-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

Even if it is not a serious threat as it requires already having admin access, I would like to know whether you plan on addressing it?

Thanks

• This reply was modified 2 years, 3 months ago by eturgetkulf.

Hi, yes, we are working on it. I expect a new release in a few days.

@renehermi any update on this security release?

Please download latest version 3.8.4

Hi,
I’m still getting warned that this version has known security vulnerabilities.
Please see: https://getshieldsecurity.com/tools/vulnerabilities-lookup/?type=plugin&slug=mashsharer&version=3.8.4

@jimmypbai

It’s definitely fixed. The report page says this flaw exists in MashShare version 3.8.2 and lower.

Where did you get the link https://getshieldsecurity.com/tools/vulnerabilities-lookup/?type=plugin&slug=mashsharer&version=3.8.4 ?

This site seems to have a problem!

You can use a link with a version number that does not even exist, and it will show you data:

https://getshieldsecurity.com/tools/vulnerabilities-lookup/?type=plugin&slug=mashsharer&version=3.9.0