Source evidence

False positive gsheetconnector-wpforms-pro

Jetpack Protect · support · 2025-05-01T17:51:00+00:00

Jetpack Protect plugin evidence original source source API

mixedsentiment

highseverity

0.82relevance

2replies

Evidence linked to opportunitycommercial context

Proof Health

Open evidence

Commercial opportunities need traceable source links before they are treated as build-worthy.

6 / 32 rows with source links

18.8% of this page's analysis has direct source links.

0 build-decision rows missing links

0 rows here require auditable proof before promotion.

26 rows with no attached evidence

0 rows have source counts but still need direct links.

Conversation

support

Kirsehn resolved

I am using the gsheetconnector pro plugin for WPForms https://www.gsheetconnector.com/wpforms-google-sheet-connector-pro Jetpack is showing a security vulnerability in this plugin. However, it says that the vulnerability was fixed in version 2.5.7. I am using version 2.5.22, so the vulnerability should already be fixed in the version I am running. This seems like a false positive? Hi there, @kirsehn , Thanks for reporting this. We have asked our dedicated team to check on this, and we’ll circle back as soon as we hear from them. In the meantime, is there anything we can do for you? If that’s so, please let us know, and post your site URL here so that we can have a look 🙂 (HE internal ref: ticket 9725792 with devs chat) Hi there, @kirsehn , Apologies for the delay in getting back to you – we have good news 🙂 We have corrected vulnerability report, and once your site gets scanned again, it should not show up anymore. Let me know how it goes and if you get stuck at any step, just let us know and we’ll be glad to help. Thanks!

Commercial Context

Opportunity

trust and abuse-prevention operations

Security abuse-prevention assurance for keeping sites trusted, protected, and recoverable

Buyer: site owners, agencies, and maintenance teams

Wedge: test security lockouts, bot/spam defenses, risky access changes, and incident alerts

Proof Blocked card complete market

Analysis

heuristic-v1

Summary: False positive gsheetconnector-wpforms-pro: users show security, support pain that may indicate a product gap.

Evidence quote: False positive gsheetconnector-wpforms-pro I am using the gsheetconnector pro plugin for WPForms https://www.gsheetconnector.com/wpforms-google-sheet-connector-pro Jetpack is showing a security vulnerability in this plugin.

Affected feature: form

security support value form

Plugin

API

Jetpack Protect

100.0K active installs · 2.4M downloads · rating 94.0

jetpack malware protect scan security

Comments

2 shown

Stef (a11n) 2025-05-02T06:28:00+00:00

Hi there, @kirsehn , Thanks for reporting this. We have asked our dedicated team to check on this, and we’ll circle back as soon as we hear from them. In the meantime, is there anything we can do for you? If that’s so, please let us know, and post your site URL here so that we can have a look 🙂 (HE internal ref: ticket 9725792 with devs chat)

Stef (a11n) 2025-05-12T05:24:00+00:00

Hi there, @kirsehn , Apologies for the delay in getting back to you – we have good news 🙂 We have corrected vulnerability report, and once your site gets scanned again, it should not show up anymore. Let me know how it goes and if you get stuck at any step, just let us know and we’ll be glad to help. Thanks!