this post was submitted on 07 Nov 2023
7 points (100.0% liked)

WordPress Security

14 readers
1 users here now

Discussion about WordPress security without all the falsehoods.

founded 1 year ago
MODERATORS
PluginVulnerabilities
7
Who could foresee that a plugin would get pulled from the WordPress plugin directory for a security issue when the developer has left in commented out security checks? (lemmy.world)
submitted 1 year ago by PluginVulnerabilities to c/wordpresssecurity
4 comments fedilink hide all child comments
 
you are viewing a single comment's thread
view the rest of the comments
[โ€“] PluginVulnerabilities 3 points 1 year ago (1 children)

This is the plugin: https://wordpress.org/plugins/sendpress/ These are security changes the developer made today, which presumably is in response to the plugin being closed for a security issue: https://plugins.trac.wordpress.org/changeset/2990357/ Here is the file from the screenshot: https://plugins.trac.wordpress.org/browser/sendpress/trunk/classes/views/class-sendpress-view-pro.php?rev=2990358 The code in that file is still missing needed security even after the security change made today.

[โ€“] mad_ratzinger 1 points 1 year ago

Thank you for the info