Security Bug Causing Problems with MEC Lite

Resolved abachechi3
(@abachechi3)

6 years, 3 months ago

I had MEC Lite installed on my company’s website, but Jetpack detected a security issue this morning. I tried uninstalling and reinstalling the plugin – hoping I had missed an update.

My coworker was adding a new event and was unable to save it or upload an image. When he tried to preview the event, he received a 403 error. Worried about the bug affecting other elements of our site, I have uninstalled it again. Is anyone else having security problems? Is there an expected patch being worked on to update the plugin?

Viewing 7 replies - 1 through 7 (of 7 total)

Thread Starter abachechi3
(@abachechi3)

6 years, 3 months ago

For reference, here is a link found detailing the problem. I would recommend anyone else experiencing this error roll back to the previous update until a fix is published.

https://wpvulndb.com/vulnerabilities/10100

hastibe
(@hastibe)

6 years, 3 months ago

@abachechi3 – I don’t think rolling back will help, because this vulnerability impacts all versions up to 5.1.6 (the current version, as of now).

Also would appreciate an update from Webnus on this.

Plugin Contributor webnus
(@webnus)

6 years, 3 months ago

Hello All,

Yesterday as soon as we learned of this security issue we jumped on and released an update to fix it. Please view the changelog here: https://ww.wp.xz.cn/plugins/modern-events-calendar-lite/#developers

5.1.7 – 29 FEBRUARY 2020
Fixed: Improve ajax access for causing XSS security issues

Note1: you can access the old versions of the MEC here: https://ww.wp.xz.cn/plugins/modern-events-calendar-lite/advanced/

Best Regards

hastibe
(@hastibe)

6 years, 3 months ago

Thank you for the quick fix, @webnus — very appreciated (and important)!

Plugin Contributor webnus
(@webnus)

6 years, 3 months ago

You’re welcome

Thread Starter abachechi3
(@abachechi3)

6 years, 3 months ago

Thanks for the quick fix and response time!

Plugin Contributor webnus
(@webnus)

6 years, 3 months ago

You’re welcome,

If you are happy with our product please don’t forget to leave a 5-Star rating for MEC Plugin: https://ww.wp.xz.cn/plugins/modern-events-calendar-lite/

Viewing 7 replies - 1 through 7 (of 7 total)

The topic ‘Security Bug Causing Problems with MEC Lite’ is closed to new replies.