Conversation
supportWordfence shows me a critical vulnerability in your Ajax Load More plugin in version: 7.3.1.2 I’m also attaching the page from wordfence warning with more details: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/ajax-load-more/ajax-load-more-7312-authenticated-contributor-stored-cross-site-scripting And a screenshot of the displayed warning from wordfence: https://imgur.com/a/vquHIX3 PS.: I have disabled the plugin on the site for now. Thanks for solving the problem, best regards Dominik This topic was modified 1 year ago by Dominik Kozmáli .
@dominokozmali This is fixed in 7.3.1.2 but Patchstack is being very slow at reviewing the patch. Patchstack also powers Wordfence so that’s why you are seeing this error. I’ve reached out to them again this morning and hopefully they will close this issue ASAP. https://wordpress.org/support/topic/7-3-1-2-is-vulnerable-to-cross-site-scripting-xss/ TBH – It’s a real stretch to even call this issue a “critical” vulnerability.
Actually, looks like I may have missed one of the issues 🤦♂️ 7.3.1.3 should hopefully resolve any issues.
Super (thank you for quick answer! :)), I updated to version 7.3.1.3 and ran a new Wordfence scan and so far it looks promising, it doesn’t show it as an error 🙂 We’ll see when the scan is finished – I’ll write and close the ticket when it’s done 🙂 This reply was modified 1 year ago by Dominik Kozmáli . This reply was modified 1 year ago by Dominik Kozmáli . This reply was modified 1 year ago by Dominik Kozmáli .
Hi, the Wordfence scan has been completed and it’s OK now. So the problem is solved 🙂 Have a nice day
@dominokozmali This is fixed in 7.3.1.2 but Patchstack is being very slow at reviewing the patch. Patchstack also powers Wordfence so that’s why you are seeing this error. I’ve reached out to them again this morning and hopefully they will close this issue ASAP. https://wordpress.org/support/topic/7-3-1-2-is-vulnerable-to-cross-site-scripting-xss/ TBH – It’s a real stretch to even call this issue a “critical” vulnerability.
Actually, looks like I may have missed one of the issues 🤦♂️ 7.3.1.3 should hopefully resolve any issues.
Super (thank you for quick answer! :)), I updated to version 7.3.1.3 and ran a new Wordfence scan and so far it looks promising, it doesn’t show it as an error 🙂 We’ll see when the scan is finished – I’ll write and close the ticket when it’s done 🙂 This reply was modified 1 year ago by Dominik Kozmáli . This reply was modified 1 year ago by Dominik Kozmáli . This reply was modified 1 year ago by Dominik Kozmáli .
Hi, the Wordfence scan has been completed and it’s OK now. So the problem is solved 🙂 Have a nice day