VaultPress security issue – PHP.Include.Globals

Posted in: Newspaper
Post count: 5
encoreradio
#250363
Aug 26, 2018 at 8:19 pm

Hello

VaultPress has detected a security issue in PHP.Include.Globals

It says:

“Unsanitized PHP global variables are being used to include or require other files.”

Can you advise on what should be done here please?

Post count: 22421
Bogdan B.
#250511
Aug 27, 2018 at 2:25 pm

Hello,

This is a false positive. It was already mentioned on our forums multiple times. We already checked for this and there is no security threat.

Thank you!

Post count: 7
Sukola
#251548
Sep 3, 2018 at 1:43 pm

There are numerous WordPress themes that also call the file wp-load.php, yet they do not throw a security flag from VaultPress. What is the reason can’t TagDiv sanitize the code correctly as the WordPress Codex suggests so not to throw any other security issues.

You have a great WordPress theme in Newspaper, we depend on you to give us a good looking, properly coded theme. We also depend on VaultPress to help us keep our sites safe and secure.

Regards:

David Sukola

Post count: 20685
Simion C.
#251643
Sep 3, 2018 at 4:29 pm

Hi,

I will pass this topic along to the developer team and they will take a look. If there is a need there will be improvements made in this matter.

Thanks

Viewing 4 posts - 1 through 4 (of 4 total)
You must be logged in to reply to this topic.