Benjamin Pick

Yes indeed I changed the admin page slugs and did not test it thouroughly enough, sorry. It is fixed now in 5.6.4 (also the issue with the automatic download).

Was released in 5.6.1

I have received the details now. As it is a low priority vulnerability, patchstack recommends fixing it within 30 days – that should be feasible. It is rated low priority because it requires a backend user with Contributor rights in order to be exploited.

thank you for the almost-pull-request. i have added it to the recent beta version, can you test it please?
https://github.com/yellowtree/geoip-detect/wiki/Beta-Testing

Where did you see the error message, is it a HTML error or JSON error, which kind of bracket is missing?

add_filter('geoip_detect2_client_ip', function($ip) {
    if (isset($_REQUEST['X-Real-IP']) && geoip_detect_is_ip($_REQUEST['X-Real-IP']) ) {
        return geoip_detect_normalize_ip($_REQUEST['X-Real-IP']);
    }
    return $ip;
});

Add this code to your theme’s function.php or similar. Does this work for you?

Caveat: other clients will be able to easily forge this header. That’s why there is a whitelist for reverse proxies – do you know the IP range of the GTranslate servers?

Good question, probably there is, but they don’t communicate such a limit so it should be high enough that normally you won’t be able to tell. You could ask the service provider: https://hostip.info/

About you second question, incompatibilities with other plugins that use the Maxmind data – yes sometimes that poses problems, that’s true … your best bet is to test it if it works or not. If it works for your IP it will work for other IPs, too, and will continue to work at least until one of the plugins decides to upgrade the Maxmind libraries …

Yes this is possible. Please contact me at [email protected] as I am not allowed to give paid support on the ww.wp.xz.cn Forums.