hansgv

@cageehv Still reported as having a vulnerability in v 5.1

https://patchstack.com/database/vulnerability/rvg-optimize-database/wordpress-optimize-database-after-deleting-revisions-plugin-5-0-110-cross-site-request-forgery-csrf-vulnerability?_a_id=431

• This reply was modified 1 year, 2 months ago by hansgv.

Admittedly I don’t understand much about the internals of WordPress or PHP but it seems to me the theme expects 4 arguments from the plugin while /wp-content/plugins/wp-external-links/libs/fwp/filter-hooks/class-fwp-widget-output.php only provides 3.

$sidebar_id appears to be the missing argument. Why doesn’t WP External Links provide it? Would there be harm in doing so?

Sorry if I’m being pesky. I’m just trying to resolve my issue and feel lost when everyone says it’s the other guy’s fault. ??

• This reply was modified 4 years, 3 months ago by hansgv.
• This reply was modified 4 years, 3 months ago by hansgv.
• This reply was modified 4 years, 3 months ago by hansgv.
• This reply was modified 4 years, 3 months ago by hansgv.

Yes, it’s a commercial theme.

I think the probability of rm command failing silently is close to zero. ??

Maybe the notice was just a cached item or something.

I remain interested in your plugin and am happy to assist in debugging any way I can.

rm -R /var/www/vhosts/mysite.com/wp-content/plugins/wp-rest-cache/
and
rm /var/www/vhosts/mysite.com/wp-content/mu-plugins/wp-rest-cache.php

That’s right, it’s not an error message. It might not even be relevant in any way. Just wanted to report everything that comes by.

• This reply was modified 4 years, 12 months ago by hansgv.

You say: “After deleting wp-rest-cache again”, but you do get a notice from our plugin, so I don’t understand that part? What did you delete?

I just meant that I have to delete the plugin to be able to log in again. That error message is visible at the first admin page load after deleting.

Obviously I’m not able to check any settings boxes as the plugin has already had to be deleted. ??

• This reply was modified 4 years, 12 months ago by hansgv.

I disabled all w3-total-cache caches, disabled all plugins except w3-total-cache and classic-editor, and reinstalled the wp-rest-cache plugin. The issue still persists. Unable to log in afterward.

After deleting wp-rest-cache again, I’m able to log in and see this error message:

WP REST Cache: We have detected you are using external object caching. If you are using Memcache(d) as external object cache, please make sure you visit this plugin's settings page and check the "Using Memcache(d)" checkbox.

I do use memcached with w3-total-cache’s Page, Database and Object Caches.

• This reply was modified 4 years, 12 months ago by hansgv.

Yes, I have a bunch of plugins installed:

admin-menu-editor
artbees-captcha
bloom
broken-link-checker
classic-editor
custom-post-type-ui
duplicate-post
duracelltomi-google-tag-manager
enhanced-media-library
envato-market
fontpress
gravityforms
gravityformsmailchimp
gravityformsquiz
heartbeat-control
instagram-widget-by-wpzoom
ithemes-security-pro
js_composer_theme
jupiter-donut
just-tinymce-styles
last-modified-timestamp
loco-translate
monarch
our-own-custom-form
our-own-gravity-slider-fields
our-own-quiz-stats
recaptcha-in-wp-comments-form
redirection
rename-media-files
rvg-optimize-database
safe-svg
ultimate-category-excluder
w3tc-custom
w3-total-cache
wb-paytrail-maksutavat
widget-options
woocommerce
woocommerce-dynamic-pricing
wordpress-seo
wp-authorbox-posts
wp-author-box-pro
wp-category-permalink
wp-crontrol
wp-external-links
wp-user-avatar
yuzo

• This reply was modified 5 years ago by hansgv.
• This reply was modified 5 years ago by hansgv.
• This reply was modified 5 years ago by hansgv.
• This reply was modified 5 years ago by hansgv.

That’s exactly what I was wondering, but both /var/www/vhosts/mysite.com/wp-content/plugins/wp-rest-cache/ and /var/www/vhosts/mysite.com/wp-content/mu-plugins/wp-rest-cache.php exist.

I installed the plugin straight from WordPress’ plugin directory.

I first suspected this to be a caching conflict but neither disabling W3TC caches nor deleting the plugin and reinstalling it helped.

The first message after enabling the plugin and reloading any admin page is a WordPress error: “You do not have sufficient permissions to access this admin page.”

• This reply was modified 5 years ago by hansgv.

I’m trying, but I haven’t figured out how to reproduce it yet ??

Done: https://github.com/Yoast/wordpress-seo/issues/8559

I finally discovered my issue was with W3 Total Cache messing with the headers.