backdoor identified in your plugin

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author Max K

    (@kaminskym)

    2 years, 5 months ago

    Hey,

    As you can see:

    1. This code has been commented for many years
    2. There is nothing related to the Backdoor, it’s only checking that the Admin notice hash is correct while dismissing the admin notice:

    // // Verify that data was not changed
    // if ( $_GET['hash'] !== md5($_GET['key'] . NONCE_SALT . $_GET['save_to']) ) {
    // wp_send_json_error();
    // }

    You can always upload it to the Virus Total, if you have any doubts.

    • This reply was modified 2 years, 5 months ago by Max K.
    Thread Starter horsee

    (@horsee)

    2 years, 5 months ago

    can you just remove it from the code if you commented it? Just to avoid the confusion a positive detections from the security plugins?

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘backdoor identified in your plugin’ is closed to new replies.