Site vulnerabilities found

  • Resolved ma3ry

    (@ma3ry)


    2 years, 10 months ago

    I received from cPanel “Site vulnerabilities found”

    WordPress APIExperts Square for WooCommerce plugin <= 4.2.8 – Reflected Cross Site Scripting (XSS) vulnerability

    Will this be resolved soon or do I need to do something?

    Thank you!

    The page I need help with: [log in to see the link]

Viewing 15 replies - 1 through 15 (of 15 total)
  • Daniyal Raza

    (@daniyalraza01)

    2 years, 10 months ago

    Hello @ma3ry ,

    Hope you are doing well, Can you please share some detail screenshots? So it will be easy for us to assist you further.

    Thanks & Regards,
    WP Experts Support Team.

    Thread Starter ma3ry

    (@ma3ry)

    2 years, 10 months ago

    It was an email notification from cPanel.

    See screenshot at https://ibb.co/VVKvYV9

    Thread Starter ma3ry

    (@ma3ry)

    2 years, 10 months ago

    Update: I have now received an email from Wordfence with the following information – which is basically the same as the email from cPanel:

    This email was sent from your website “Spring Valley Maple” by the Wordfence plugin.

    Wordfence found the following new issues on “Spring Valley Maple” (1 existing issue was also found again).

    Alert generated at Thursday 20th of July 2023 at 07:21:12 PM

    See the details of these scan results on your site at: https://springvalleymaple.ca/wp-admin/admin.php?page=WordfenceScan

    Critical Problems:

    * The Plugin “APIExperts Square for WooCommerce” has a security vulnerability.

    Vulnerability Severity: 6.1/10.0 (Medium) Vulnerability Information
    https://ww.wp.xz.cn/plugins/woosquare/#developers

    Daniyal Raza

    (@daniyalraza01)

    2 years, 10 months ago

    Hey @ma3ry ,

    Currently, Our team is working on this Freemius SDK. We will update you once it’s done.

    Let me know if you have any other questions.

    Thanks

    Thread Starter ma3ry

    (@ma3ry)

    2 years, 10 months ago

    Many thanks!

    Daniyal Raza

    (@daniyalraza01)

    2 years, 10 months ago

    Hello @ma3ry ,

    Please download the updated plugin from below link and re-install into your website after deleting the previous plugin.

    Download Now

    Let us know if this works for you. We will help you further.

    Thanks & Regards,
    WP Experts Support Team

    • This reply was modified 2 years, 10 months ago by Daniyal Raza.
    Thread Starter ma3ry

    (@ma3ry)

    2 years, 10 months ago

    Thank you so much for such a quick fix.

    I tried to install it as usual but got an error, so instead I just uploaded the folder to plugins.

    Then I got an email saying that I needed to confirm my email but when I click on the button I get this message.

    Access to springvalleymaple.ca was denied

    You don’t have authorization to view this page.

    HTTP ERROR 403

    I wonder if it is because my wp-content folder is labelled differently for security reasons.

    Daniyal Raza

    (@daniyalraza01)

    2 years, 10 months ago

    Hey @ma3ry ,

    Yes. It’s a security issues but for confirmation, Please share the screenshot of the error.

    Also, I appreciate a kind and honest review regarding support team our this profile.

    Thanks

    • This reply was modified 2 years, 10 months ago by Daniyal Raza.
    Thread Starter ma3ry

    (@ma3ry)

    2 years, 10 months ago

    Image of email on left and screenshot of page when I click to confirm on the right.

    https://ibb.co/L1bnB0c

    Thread Starter ma3ry

    (@ma3ry)

    2 years, 10 months ago

    Update: I just tried to activate it and got this fatal error.

    Plugin could not be activated because it triggered a fatal error.

    Fatal error: Cannot redeclare activate_woosquare_plus() (previously declared in /home/amy/public_html/amy-content/plugins/woosquare/woocommerce-square-integration.php:86) in /home/amy/public_html/amy-content/plugins/objects_ws-woosquare-plus-freemius-588a582a0849/woocommerce-square-integration.php on line 85

    Daniyal Raza

    (@daniyalraza01)

    2 years, 10 months ago

    Hello @ma3ry ,

    This error seems like you haven’t delete the previous plugin yet.

    Please re-install this plugin into your website after deleting the previous WooSquare plugin.

    Thanks

    Thread Starter ma3ry

    (@ma3ry)

    2 years, 10 months ago

    I deleted the plugin AGAIN, cleared my WP-rocket cache, re-downloaded the plugin from your above link, and installed.

    Plugin could not be activated because it triggered a fatal error.

    Fatal error: Cannot redeclare activate_woosquare_plus() (previously declared in /home/amy/public_html/amy-content/plugins/woosquare/woocommerce-square-integration.php:86) in /home/amy/public_html/amy-content/plugins/objects_ws-woosquare-plus-freemius-588a582a0849/woocommerce-square-integration.php on line 85

    Daniyal Raza

    (@daniyalraza01)

    2 years, 10 months ago

    Hello @ma3ry ,

    Sorry for the inconvenience.

    Please download the plugin from below link and re-install into your website after deleting the previous plugin.

    Download Now

    Let us know if the issues still persist. We will help you out.

    Thanks

    Thread Starter ma3ry

    (@ma3ry)

    2 years, 10 months ago

    That works! Many thanks! Happy to leave you a 5 star review. Much appreciated!

    Daniyal Raza

    (@daniyalraza01)

    2 years, 10 months ago

    Thanks alot @ma3ry .

Viewing 15 replies - 1 through 15 (of 15 total)

The topic ‘Site vulnerabilities found’ is closed to new replies.