Title: Security Issues
Last modified: August 30, 2016

---

# Security Issues

 *  [Panagiotis Vagenas](https://wordpress.org/support/users/panvagenas/)
 * (@panvagenas)
 * [10 years, 5 months ago](https://wordpress.org/support/topic/security-issues-16/)
 * This plugin suffers from serious security vulnerabilities such as privilege escalation,
   information disclosure and SQL injection.
 * If the plugin author is interested in details please contact respond with an 
   email I can use in order to provide them.
 * [https://wordpress.org/plugins/user-meta-manager/](https://wordpress.org/plugins/user-meta-manager/)

Viewing 5 replies - 1 through 5 (of 5 total)

 *  Plugin Author [Jason Lau](https://wordpress.org/support/users/jason-lau/)
 * (@jason-lau)
 * [10 years, 4 months ago](https://wordpress.org/support/topic/security-issues-16/#post-6890899)
 * This is resolved in version 3.4.7. Thanks for the report!
 *  Thread Starter [Panagiotis Vagenas](https://wordpress.org/support/users/panvagenas/)
 * (@panvagenas)
 * [10 years, 4 months ago](https://wordpress.org/support/topic/security-issues-16/#post-6890900)
 * The vulnerability about information disclosure still applies to latest version.
   Please check that.
 *  [girdy74](https://wordpress.org/support/users/girdy74/)
 * (@girdy74)
 * [10 years, 4 months ago](https://wordpress.org/support/topic/security-issues-16/#post-6890901)
 * Questions on the update from 3.4.6 –> 3.4.7:
 * 1) In the “view details” it reads, “Critical security update. All previous versions
   should be deleted.” Does this mean that if we simply use the “update now” that
   will be good or do we need to uninstall and download the 3.4.7 and go a different
   route of installing the plugin. I just want to make sure I’m doing this the correct
   way.
 * 2) We also have User Meta Manager Pro. Will there be an update to this or is 
   the base plugin the only one that needs the security update.
 * 3) According to Panagiotis Vagenas, there still needs to be some addressed security
   patches.
 * 4) Have you had any issues with the update from 3.4.6 –> 3.4.7? I’m of course
   going to back up but we have over 800 users using the User Meta Manager and I
   need to know if there will be an issue with those once I update.
 * Thanks so much for your help and a great plugin!
 *  Plugin Author [Jason Lau](https://wordpress.org/support/users/jason-lau/)
 * (@jason-lau)
 * [10 years, 4 months ago](https://wordpress.org/support/topic/security-issues-16/#post-6890902)
 * Hi, please update to version 3.4.8. This version should resolve this security
   issue.
 *  Plugin Author [Jason Lau](https://wordpress.org/support/users/jason-lau/)
 * (@jason-lau)
 * [10 years, 4 months ago](https://wordpress.org/support/topic/security-issues-16/#post-6890903)
 * This update would also cover User Meta Manager Pro. I will be releasing an update
   for the Pro plugin soon.

Viewing 5 replies - 1 through 5 (of 5 total)

The topic ‘Security Issues’ is closed to new replies.

 * ![](https://s.w.org/plugins/geopattern-icon/user-meta-manager.svg)
 * [User Meta Manager](https://wordpress.org/plugins/user-meta-manager/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/user-meta-manager/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/user-meta-manager/)
 * [Active Topics](https://wordpress.org/support/plugin/user-meta-manager/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/user-meta-manager/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/user-meta-manager/reviews/)

 * 5 replies
 * 3 participants
 * Last reply from: [Jason Lau](https://wordpress.org/support/users/jason-lau/)
 * Last activity: [10 years, 4 months ago](https://wordpress.org/support/topic/security-issues-16/#post-6890903)
 * Status: not resolved