cmarcc

Many thanks!

@joelby37 Thank you for sharing the code ??
To the plugin author – can we get an update about an official patched version please? I also emailed you yesterday morning through your website as I am using the Pro version. Thanks.

Hi,
Do you know when a patch will be released? I am using your plugin on quite a few clients websites (including the Pro version on some) so have deleted the plugin on these installs for now to stay on the safe side, but the pages look unsightly with just the shortcode, and clients will soon start noticing that their reviews are not showing anymore, so I basically would need to know what to do next (for example, looking for a temporary replacement?). Thanks.

Hi,
The CVE record is here but it is not very specific: https://www.cve.org/CVERecord?id=CVE-2023-45269
The contributor who discovered the vulnerability (if confirmed) is listed in the credits section, not sure if it’s possible to contact him directly, or Patchstack?
https://patchstack.com/database/vulnerability/cds-simple-seo/wordpress-simple-seo-plugin-2-0-23-cross-site-request-forgery-csrf-vulnerability

Hi,

Thank you, that’s great.

Hi, any thought about this? Is this plugin still maintained? Thank you.

It does remove the options in the editor definitely, but was also wondering about the CSS and js? Thank you.

Hi,
Thank you for your quick reply.
I have read the documentation but my issue is I am already using the reference shortcode to get the item reference and size. So I would need an additional field where the user could enter their email address and postal address. Is this possible?

Hi,
Nothing has changed in my template at all, it just stopped working after the latest WordPress update. No woocommerce either. I have enabled manual sorting. I use your plugin to reorder staff members – this was working beautifully until the last WP update. Thanks for your help.

Hi,
I’m having the same issue with WordPress 5.4 – the posts don’t reorder in the front-end, even after clicking on reset. Many thanks.

Hi,

Just received an email from 1and1 explaining it is a false alarm:

Please excuse this error and any inconvenience caused by this false alarm.

After review, we confirm that your file /wp-content/wflogs/attack-data.php does not contain any malicious code. The scanner made a mistake in the previous scan.

The database for the 1&1 Safety Scanner has now been corrected. Please give our systems 2 hours to implement and distribute the correction.

Important: After this 2 hour timeframe, you may upload your file, *** , to your WebSpace. Uploading your file before this could cause another false alarm. If the file still exists in your WebSpace, you can simply change the file permissions back after this timeframe.

We appreciate your cooperation and look forward to continuing to provide you safe and secure hosting.

In Expound > js > navigation.js try replacing the current code with:

/**
 * navigation.js
 *
 * Handles toggling the navigation menu for small screens.
 */
( function() {
	var container = document.getElementById( 'site-navigation' ),
	    button    = container.getElementsByTagName( 'h1' )[0],
	    menu      = container.getElementsByTagName( 'ul' )[0];

	if ( undefined == button || undefined == menu )
		return false;

	button.onclick = function() {
		if ( -1 == menu.className.indexOf( 'nav-menu' ) )
			menu.className = 'nav-menu';

		if ( -1 != button.className.indexOf( 'toggled-on' ) ) {
			button.className = button.className.replace( ' toggled-on', '' );
			menu.className = menu.className.replace( ' toggled-on', '' );
			container.className = container.className.replace( 'main-small-navigation', 'navigation-main' );
		} else {
			button.className += ' toggled-on';
			menu.className += ' toggled-on';
			container.className = container.className.replace( 'navigation-main', 'main-small-navigation' );
		}
	};

	// Hide menu toggle button if menu is empty.
	if ( ! menu.childNodes.length )
		button.style.display = 'none';
} )();

Hi,

Something like

.wpic_gallery li img {width:205px !important; height:178px !important;}

solved the problem on my site.