Security alert on plugin | WordPress.org

Resolved Gareth D
(@garydee1977)

1 month, 3 weeks ago

Guys – getting a security alert on the plugin:

WordPress Shortcoder plugin <= 6.5.1 – Cross Site Scripting (XSS) vulnerability
Low
6.52026-01-09 17:40:51<= 6.5.1

Any plans for an update fix?

https://patchstack.com/database/wordpress/plugin/shortcoder/vulnerability/wordpress-shortcoder-plugin-6-5-1-cross-site-scripting-xss-vulnerability

Viewing 4 replies - 1 through 4 (of 4 total)

densewinter
(@densewinter)

1 month, 3 weeks ago

See https://wordpress.org/support/topic/cross-site-scripting-xss-16/

Thread Starter Gareth D
(@garydee1977)

1 month, 3 weeks ago

ah ok – so we still waiting the updated patch then?

Plugin Author vaakash
(@vaakash)

1 month, 2 weeks ago

Hi @garydee1977,

The fix will be released today. Thanks for your patience and understanding!

Thanks,

Aakash

Plugin Author vaakash
(@vaakash)

1 month, 2 weeks ago

Hi Everyone,

The security issue reported is relatively minor.

It is fixed in the latest version of the plugin v6.5.2

Please update the the plugin to this latest version.

Thanks,

Aakash

Viewing 4 replies - 1 through 4 (of 4 total)

You must be logged in to reply to this topic.

4 replies
3 participants
Last reply from: vaakash
Last activity: 1 month, 2 weeks ago
Status: resolved