Were did you get it? I mean plugin. I searched but I can’t found it. Can you give me a link?
Thread Starter
Serge
(@wordpressorg21)
Interesting observations with this plugin:
http://www.exploit-db.com/exploits/18390/
The plugin was closed and should not be used.
Thread Starter
Serge
(@wordpressorg21)
Is there a way to find out why it was closed and why it should not be used? Thanks
neononcon,
Some vulnerable, probably xss-vulnerable I guess..
But I use it, lol
Yes, Ipstenu is right. The plugin was one of my first ventures into the PHP world and contains some serious security holes — especially if you’re allowing users to edit their own posts.
Rather than attempt to fix something that was a bad idea from the start 😀 — I’ve decided to pull uCan Post off the shelf permanently.
I’ve learned a lot since and will be releasing a new Blog Post submission plugin in the future which will be far more secure and feature rich. It’s about 75% completed at this time. I don’t have a name for it yet.
