tagDiv Cloud Library < 2.7 – Unauthenticated Arbitrary User Metadata Update to P

Posted in: Newspaper
Post count: 27744

Hello,

Please edit to the latest version of the theme, 12.4

Thank you!

Post count: 13

I am on .4 already.

Post count: 27744

Hi,

From what I can see, this plugin does not correctly detect the plugin version, so here it says that the problem is solved in version 2.7 -> https://wpscan.com/vulnerability/4eafe111-8874-4560-83ff-394abe7a803b, so you should not worry.

Thank you!

Post count: 20

Just an FYI, Really Simple SSL Plugin is showing the same thing and that the issue is still open with tagDiv and Cloud Library 2.7:
https://really-simple-ssl.com/vulnerability/6e44ba61-79db-456e-a4cf-e6a37129839a/

Post count: 20

Please dis-regard my previous post, since I can’t edit it. I missed reading “versions prior to 2.7” in the link, so as you stated it’s all good as long as you have the latest version. 🙂

The TagDiv Cloud Library plugin for WordPress was found to have a vulnerability in versions prior to 2.7

Post count: 27744

Hello,

Please let us know if you have other questions.

Have a great weekend!

Viewing 7 posts - 1 through 7 (of 7 total)
The forum ‘Newspaper’ is closed to new topics and replies.