lillylark

The problem still exists with the latest update to 3.6.6. “Critical”

Plugin Name: WP Post Author – Bio and Rating Current Plugin Version: 3.6.6 Details: To protect your site from this vulnerability, the safest option is to deactivate and completely remove “WP Post Author – Bio and Rating” until a patched version is available. Get more information. (opens in new tab) Repository URL: https://www.ads-software.com/plugins/wp-post-author (opens in new tab) Vulnerability Information: https://www.wordfence.com/threat-intel/vulnerabilities/id/df681544-f64b-4590-a377-08b05693ff1f?source=plugin

It was working fine on three sites but suddenly, I am getting 403 Forbidden errors on two of them saying that I need keys and tokens from a Twitter developer App that is attached to a Project. Each site does have keys and tokens attached to a project plus the bearer token. Has something changed again in X to invalidate the existing keys and tokens? Here is an example of one of the error messages:

https://www.dropbox.com/scl/fi/ck5dvp1bwvb5bjdl3s529/403-i-am-using-keys-and-tokens.png?rlkey=nrxlxkuwvzvj3jusl83dk0cef&dl=0

Suddenly getting only Identicon-type of avatars instead of user images.

Wow!

I have the Visual Editor turned off because I use PHP for includes and the Visual editor destroys the PHP code and treats it as text, which shows up in the post. Needing Visual Editor turned on makes this plugin unacceptable.

What is really weird is that not only can I not add additional social media links, but the one that I do have in my profile for the Simple Author Box is Facebook, but what shows in the displayed author box in the posts is my LinkedIn account–not the Facebook account. Where it is getting the LinkedIn account from is a mystery since it isn’t included in my profile. Why it isn’t showing the Facebook link is a mystery.

Thank you. They work now. (I also had to allow popup windows for the site but didn’t see that message until the closing paren was added.)

Thanks for the suggestions. I tried them but they didn’t help. I did notice that before making these changes, only the UX list worked in Opera but not Firefox, Safari, Edge, or Google. With the changes, it no longer works in Opera.

How do I send you a copy of the Log file? Some of the 404s have referrers but the ones for the pdf file don’t have referrers.

I solved it. I looked more closely at the link. While there is no email address in the Image link, for some reason the image’s filename includes an asterisk in it. I changed that to &64; and now the image shows up. Odd that I didn’t need to do that when the same image link was used in the sidebar widget. I’m marking this as resolved.

• This reply was modified 1 year, 7 months ago by lillylark.

So why am I getting all these 404s for something that shouldn’t be there? Is something in WordPress trying to link to it?