edavis711

Hi @nlpro,

I have already made the suggested changes to all of my sites, however, I put in a bug report with WP to see if they were working on this and got a great response, pretty much the same as what has been posted already, but it appears they are working on it:

Comment (by samiamnot):

The issue is rated as a medium severity issue. It seemingly requires a

vulnerability chain (unless there is another vulnerability to chain

together, it is not exploitable). I am sure that the WP developers are

actively working on a fix. See

https://nvd.nist.gov/vuln/detail/CVE-2022-3590. If you are nervous, the

vulnerability is in [https://codex.www.ads-software.com/XML-RPC_Support WordPress

XML-RPC] and you can turn it off via a number of

[https://www.ads-software.com/plugins/search/xml-rpc/ WordPress plugins].

-- 

Ticket URL: <https://core.trac.www.ads-software.com/ticket/57363#comment:3>

WordPress Trac <https://core.trac.www.ads-software.com/>

WordPress publishing platform

How is this resolved?

Does WordPress plan on fixing this

Hi WordPress,

Are you working on this? My customers are freaking out!

I have the same issue with both Slider Revolution and The Events Manager Pro (with Adminimize enabled you cannot scroll through upcoming months to see the next months events without refreshing the page again)

When I disable Adminimize, it resolves both issues.

WP 5.6.1, Adminimize 1.11.7, Slider Revolution 6.3.9, Events Manager Pro 5.2.2