• mspreer

    (@mspreer)


    Hello there,

    not sure if you are aware of this, so I would like to mention and hopefully inspire you to update the current version of thsi plugin. A Wordfence scan brought back this result:

    “The MemberPress Discord Addon plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 1.1.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.”

    Are you planning on releasing an update soon?

    Thanks for your feedback and bvest regards …

You must be logged in to reply to this topic.