Security issue with 2.6.3 | ww.wp.xz.cn

Resolved caordawebsol
(@caordawebsol)

1 month ago

StoreCustomizer plugin <= 2.6.3 – Broken Access Control vulnerability

https://patchstack.com/database/vulnerability/woocustomizer/wordpress-storecustomizer-plugin-2-6-3-broken-access-control-vulnerability?_a_id=431

Is there a plan to fix thissue?

Thanks!

Viewing 5 replies - 1 through 5 (of 5 total)

awack
(@awack)

4 weeks ago

BUMP!!!!! WTF is going on with this will you respond?

chromechris
(@chromechris)

3 weeks, 4 days ago

Bump, this is a risky vulnerability.

Plugin Author Kaira
(@kaira)

2 weeks, 4 days ago

Apologies for the delayed response on this.

I’ve posted the fix for this issue now.

Thanks

viejohender
(@viejohender)

2 weeks, 4 days ago

Hello, I have updated to the latest version 2.6.5, but the security problem persists.

Plugin Author Kaira
(@kaira)

2 weeks, 3 days ago

Hey @viejohender

Can you please contact me at zack [@] kairaweb [dot] com so I can work with you to get this sorted out and fixed.

Thanks
Zack

Viewing 5 replies - 1 through 5 (of 5 total)

You must be logged in to reply to this topic.

6 replies
5 participants
Last reply from: Kaira
Last activity: 2 weeks, 3 days ago
Status: resolved