jens2021

Hi @sterndata

many thanks for keeping this forum safe.
However, the picture did not include any login credentials.
It showed just the website-url and my public e-mail address.

You can check again: https://ibb.co/bNj4Lh5

Please let this visible, so @nsinelnikov can check my website regarding the issue i have with the UM_plugin and get in touch with me by e-mail to get access to my site if neccessary.

I just don′t want to write the url and mail-address here in plain because it will stay here forever. So i do it with this image which will be deleted automatically within one week.

Many thanks & kin regards
Jens

Hi @nsinelnikov

many thanks for coming back to me again!

Sadly all your suggestions doesn′t work.

I have noticed that, similar to the login-button from the confirmation-mail after registration, also the redirect by the logout-button doesn′t work. So i believe there is a basical redirect issue on my page since the security-update and it′s not about the settings within the user-role.

However, I believe it′s more productive if you can look at my site directly. So to respect the forum-rules i will message you on WP-Slack.

Regards.

Edit: I have no access to wp-slack and can not register because i am not a member of “making wordpress”.

To make it simple, here is the url to my website and my mail-adress:

[link removed by moderator]


This picture will be atomatically deleted in one week.

Regards
Jens

• This reply was modified 1 year, 8 months ago by jens2021.
• This reply was modified 1 year, 8 months ago by Steven Stern (sterndata).

Hi @nsinelnikov

thanks for coming back to me.

There is no redirect with a diffrent hostname on my site.

My website is https://www.12345.de with a registration form at https://www.12345.de/register and i would like to redirect after registration to https://www.12345.de/ABC – that worked before the security update with no issues. Now it doesn′t work anymore at all.

Can i send you the URL to my website in a private way, so you can check on my website directly?

Many thanks & kind regards

Hi @nsinelnikov

many thanks for your help here and on the support-page of hCaptcha.

Finally I could do some intensive testing and also did a conflict test.

I am facing still the follwing issues:
I put in some forwarding-settings within the user-role which worked great before the update.
See: https://ibb.co/7zsRHYQ

Now the follwing behavier occur:

– After Registration of a new user, the forwarding to the specific site does not work, Instead a forwording to the regular WP-Login happens.
See: https://ibb.co/jbm5jxb

– If Users Login via Login-Button ( {login url} ) from the E-Mail after admin-confirmation, the forwarding also doesn′t work. Users get redirected to the main-page instead. But if Users Login via the Login-Butten I have directly on my site, the forwarding to the correct page is working fine.

– If users Login after password-reset, the fowarding also doesn′t work. Users get redirected to the main page.

I did a conflict test with all installed plugins with one exeption: “restrict for elementor”. This plugin is neccesary to handle the visibilty for logged in and not logged in users. But there where no issues before and I don′t think this plugin creates the forwading issues. all other plugins having no influence on this forwarding issue. Tested them all one-by-one.

I noticed your hint for Version 2.6.8 on github, but I don′t no how do install that.

I hope you can help fast.

Many thanks & kind reagrds
Jens

Thanks @andrewshu – will do the conflict test.. But will take a bit of time, because i need to do a clone first.. I will come back to you asap.

Regards.

Sure, but not public. I can do it by email if you like.
The reason is I did a downgrade to UM 2.6.2, because with UM 2.6.7 my site is unuseable for clients. And because of the Vuln in 2.6.2. I would exploid myself if I write the url here in public.
But for the same reason i think it will not help you. You can only investigate if i do the update to UM 2.6.7. but then my webpage is not usable anymore. A bit of a dilemma right now.

Hi there,
I am using hCaptcha version 2.9.0. If it′s working fine on your side, the issue must be within the new update of UM. It′s a bit sketchy.. UM 2.6.7. seems to work fine for a lot of people, but there are also a lot of people having a lot of bugs with this version. So I believe hCaptcha does not work with UM 2.6.7. on my side, is just another UM-Bug then.

Thanks for your fast reply.

@stefanmeyer2

You can try the “hCaptcha for WordPress” plugin which is UM integrated.

https://www.ads-software.com/plugins/hcaptcha-for-forms-and-more/

Doesn′t work with the new updates of UM.

So, now I become really upset.

Automatic updates are disabled, but anyhow an automatic updated of ultmate member occured.

It′s unaccepable to force an update if the update has several bugs and makes my website unusable!

I have noticed that the password-confirmation field is now there, but all other issues i described with my first posting are still in place.

Please fix that ASAP!

Hi! I would not advise that you downgrade.
There has been a major attack and therefore quick fixes needed to be done.

I’m using latest version (2.6.7) and have none of those issues with Oxygen builder.
Only v 2.6.7 fixes the security problems.

I would recommend you to install latest version too and deactivate the forms, at least that way you won’t have the risk of an intrusion
https://blog.wpscan.com/hacking-campaign-actively-exploiting-ultimate-member-plugin/

Thank you for your reply and your advise.
It′s great that the update is working for you with Oxygen builder, but that doens′t help me one inch. I have massive issues like I described above.
However, I have no other choice than running 2.6.2, until the described isues are fixed. My website is completely unuseable without these functions, so also deactiving the forms is not an option.
I know about the vulnerable, but i must take the risk until there is a full working update.
I am a paying customer, so I expect full working update ASAP.

I just updated to 2.6.7 as well, and no one can login.

Thank you for confirming you having one of my described issues as well.

push

Hi @varunmatomo – that works! Many thanks!

But it′s still confusing because WP rocket was installed all the time and i had no problems with it.

However, it′s working now and thats important. Many thanks for your help!

Hi @varunmatomo ,

thanks for your reply:

here is the output of the system-check:

https://pastebin.com/vKR7bWBW

Note: There is a warning beacuse of WPRocket, but WPRocket was already installed before your PlugIn stopped working.

Regards

Can I get any help please? Do you need any further information?

I have already re-installed the plugin. does not help.

• This reply was modified 2 years, 1 month ago by jens2021.

20 total errors during this script execution, please investigate and try and fix these errors. => CronArchive.php:621; CronArchive.php:614; CronArchive.php:278; Access.php:670; CronArchive.php:282; ScheduledTasks.php:332; class-wp-hook.php:306; class-wp-hook.php:332; plugin.php:565; wp-cron.php:188;

PHP Version 8.1.14

• This reply was modified 2 years, 1 month ago by jens2021.