iNasser

Hi Emily,

Thanks so much for your help with the sync! The author data is now showing up perfectly. We really appreciate your quick assistance in getting this sorted out.

Best,
Nasser

Hello Emily,

Thank you for your support.

This is my Website link https://nuclearmed.org

This is a post where the author’s name is not showing on stats, but is visible under the post.

https://nuclearmed.org/90y-sir-spheres-therapy-and-imaging/

I appreciate your time and effort.

Best regards,

Nasser

Hello,

Just follow the troubleshooting steps, it’s straightforward.
https://www.wordfence.com/help/tools/two-factor-authentication/

• This reply was modified 3 months, 3 weeks ago by iNasser.

I found 403 errors related to this issue in my PHP log and I tried to reconnect my website to Wordfence Central, but I failed. Can the support team please clarify what’s going on?

Hello,

Thank you for your response.

I only requested verification via the plugin. I didn’t receive a ticket number.

Can you please help me fix my website classification to non-comercial.

Thank you.

Thank you for your reply

Are you sure the security vulnerability is fixed with the latest update?

WordPress WP Event Manager Plugin <= 3.1.42?is vulnerable to Cross Site Scripting (XSS)
https://patchstack.com/database/vulnerability/wp-event-manager/wordpress-wp-event-manager-plugin-3-1-39-cross-site-scripting-xss-vulnerability

Hello,

The security issue with this plugin started almost 4 months ago with version 3.1.39.

https://www.ads-software.com/support/topic/security-issue-154/

They claimed back then that the issue is fixed with version 3.1.41, but that’s not true, as we can see today.

It has been more than 3 weeks now and whenever someone ask about this issue they will say “The updated version will be released soon.”

https://www.ads-software.com/support/topic/security-problem-with-wp-event-manager/

Some people may say “soon” to mean “whenever they get a chance”, which could be very vague and unpredictable. Therefore, this update may never be released.

Thanks.

Hi @jarnovos

I didn’t know that the vulnerability still exists.

Thank you very much.

Best regards,

Nasser

WordPress WP Event Manager Plugin <= 3.1.39 is vulnerable to Cross Site Scripting (XSS). This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website due to insufficient input sanitization and output escaping which will be executed when guests visit your site. This vulnerability has not been known to be fixed yet. It may be best to uninstall the affected software and find a replacement.

https://patchstack.com/database/vulnerability/wp-event-manager/wordpress-wp-event-manager-plugin-3-1-39-cross-site-scripting-xss-vulnerability

https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/wp-event-manager/wp-event-manager-3139-cross-site-scripting

What is more important than fixing a critical security risk ?!

Hello @shuvarthibiswas ,

Thank you for your response.

I already raised a support ticket #13374 on March, 31 2023. The ticket is assigned to you “Shuvarthi Biswas” and you changed the status of my ticket to “On Hold” without any comments or response.

Can you please help me fix this issue ?

I have contacted the WPML support and they asked me to contact the WP Event Manager support team.

https://wpml.org/forums/topic/fatal-error-on-the-arabic-version-of-the-wp-event-manager/

Hi @expresstechsupport

Thank you for your support.

The issue has been fixed and the progress bar area issue was related to a conflict with the main quiz. I have created a custom sidebar without a quiz to avoid this issue.

Regards,
Nasser

Hi @expresstechsupport

Thank you for your support.

I managed to fix the issues except for the one showing in the browser console. The issues were related to having two quizzes, the main quiz and the one on the sidebar. I fixed the issue by creating a custom sidebar without the a quiz for the posts with quizzes.

I will contact the support to report the issue showing on the browser console.

Regards,
Nasser