Josiah
Forum Replies Created
-
Forum: Plugins
In reply to: [Firelight Lightbox] notification of security issueI received one as well from WPEngine, however I’ve been running the latest version for over a week.
Just found another install on WPEngine with 14,858 directories dated back to 11/9/2018. About 30 are created each day. It would be good to have this issue resolved with the plugin itself, as opposed to “fixing” each install by running the integrity/malware scan.
FYI I would try running the malware scan at least once. I found that it will sometimes stop the runaway directory creation.
I deactivated, and deleted the NextGen Gallery plugin. Then reinstalled and activated and see the same error.
Deactivated and delete? Won’t that remove my galleries?
I did this, I’ll let you know if it (the error) occurs again.
Cerber 8.3
WP 5.2.1Site seems to be behaving/working fine, but I thought you should know as this notification system is a new WP feature.
Looks like that’s the case. The site in question had 3 directories left, the newest contained the htaccess file, while the older two did not.
WPEngine has a “reset permissions” feature, I wonder if that would solve it: https://wpengine.com/support/file-permissions/
Not really, I just haven’t had time to inspect more installs. I did notice that on the one site that had 7000+ directories, once I was done inspecting and updating and then actually running a scan, the directory creation stopped. I can’t nail it down to a specific action, but if I had to guess it was running the scan.
I can report back if I find more installs with this issue and maybe isolate the steps to stop the runaway dir creation.
I was able to get it to appear, but now I see this:
This meta box, from the Subscribe2 plugin, isn’t compatible with the block editor.
I see this using the classic editor. The override does appear though. I also see this error in the sidebar for the “Preview” widget.
Yes?
Both websites are hosted at WPEngine. Do not use Jetpack. Do not use a CDN plugin.
I just checked another site we host at WPEngine at random, and found 7536 directories!
Clearly there’s something going on with WPE and this plugin/permissions.
- This reply was modified 7 years, 2 months ago by Josiah.
I found another WordPress site with 3400 of these directories. The date ranges on these stretched back to Jan 18th 2019, and there were a handful with today’s day (4/1/2019). Is there a setting I should check to prevent this? I’m worried about my other WordPress instances.
Thanks for the quick reply! Looking forward to those features so I won’t have to rely on custom code.
Same error here.