WordPress tagDiv Cloud Library plugin < 2.7 – Unauthenticated Arbitrary User Met

Posted in: Newspaper
Post count: 1

My site has been labled ass Deceptive by Google due to this plugin ( WordPress tagDiv Cloud Library plugin < 2.7 – Unauthenticated Arbitrary User Metadata Update to Privilege Escalation vulnerability ). A hacker was able to gain access to the user directory, build a false web directory and use it for phising. Not cool. Since then I can not get Google to remove the deceptive warning because there is no update for the plugin. Anyone have any ideas as to how to update?

Post count: 27744

Hello,

If you have the latest version 12.4, then you can ignore this warning, because the issue was fixed in version 2.7 -> https://wpscan.com/vulnerability/4eafe111-8874-4560-83ff-394abe7a803b
If you don’t have the latest version, then please update the theme.
Also, you need to use aa plugion for security, I recommend to downgrade and update the wordpress.

Thank you,
Anamaria

Viewing 2 posts - 1 through 2 (of 2 total)
The forum ‘Newspaper’ is closed to new topics and replies.