Hi @redkite,
I think this is a false positive by WP Scan due to the fact that we never changed the version number of the TitanFramework.
We modified during the last years and will remove any reference to TitanFramework till the end of the year.
The file that they identified has the arguments properly sanitized and I’m waiting for the proof of concept they will release next week to see what exactly they identified.
Not sure what method they use to identify the vulnerabilities.
For now if you don’t feel safe better to deactivate the plugin.
Hi @redkite,
I got in touch with WPScan and they were very helpful and manage to release and update that fix the reported situation in the report.
Just update to the latest 2.8.2.3
Thanks
No problem. I’m glad this is sorted.