freewilly12

Hello Ahmed,

It is not an error. When somebody do not want to reveal their website address publicly they write “WEBSITE . com/…”

Even if I write the correct URL’s, you might not open those because there are no such URL’S. The problem is about the PARAMETERS that I have made BOLD after the links. (?u… parts)

The problem is also pageination. I made them not to be indexed however Google sees those URL’s somehow.

Hello Ahmed,

Thabks for your reply, however it fails to answer my question.

I do not want to update Yoast & Premium now. I still want to use 13.5 version. With using the Yoast 13.5 version, if I update to AMPforWP 1.0.47 – would I have any problems?

@ampforwp, @ahmedkaludi

There is no need of me to visit your blog nor this forum to hear about this. Why would I visit “support” forum, if there is not a problem I am experiencing or your blog for that matter. You send a newsletter to my mail for every update, every discount, every new extension. You should have notified about this with an email – at least paying customers – who gives you a job.

I am not satisfied with your reply. I want to hear from Ahmed explaining in every single detail about what was the problem, how is it fixed, how can I trust the future updates and how come www.ads-software.com did not find these vulnerabilities before? Sorry but not renewing my licence and will search for another plugin until I am satisfied.

I was wondering why there were no updates for a long time for the plugin. When they released today without a proper changelog, I wondered. Came to here, found the vulnerability logs, the topics etc. As a paying Pro-Bundle customer I was not even aware of the situation for more than 3 weeks!!!

I can expect there can be vulnerabilities, we are human not AI after all, however I can not believe users who downloaded the plugin and even paying customers are kept in the dark and were NOT informed.

Also I did not like the fact that one developer clearly lies about the situation saying it is a “minor” problem in this topic, and then Ahmed – the lead developer admits that it is a huge vulnerability.

The raised issues in here are very alarming. I do not understand if there are this much security issue, how did WordPress team let 100k+ active installs upto this point.

I upgraded to the new version, assuming because it was released the bugs are corrected and checked by both the AmpforWP and WordPress teams but I am very skeptical and want an explanation!