Robin Roelofsen

Forwarding is a bit difficult since it’s a Dutch language mail. This is the report Solid Security created on my site. Hope this helps:

Known Vulnerabilities

• WordPress Amelia plugin <= 1.0.96 – Broken Access Control vulnerability

Blocklist

• Domain clean by Google Safe Browsing

Raw Details

id               => 1013
module           => site-scanner
type             => critical-issue
code             => vulnerable-software
timestamp        => 2024-01-31 22:01:24
init_timestamp   => 2024-01-31 22:01:23
remote_ip        => 185.104.29.24
user_id          => [empty string]
url              => wp-cron
memory_current   => 104806728
memory_peak      => 104828736
data             => Array
    results   => Array
        url       => https://robinroelofsen.nl
        version   => 1.1
        entries   => Array
            blacklist         => Array
                0   => Array
                    report_details   => https://transparencyreport.google.com/safe-browsing/search?url=robinroelofsen.nl
                    status           => clean
                    vendor           => Array
                        slug    => google
                        label   => Google Safe Browsing
            vulnerabilities   => Array
                0   => Array
                    type       => plugin
                    software   => Array
                        slug             => ameliabooking
                        label            => Amelia
                        latest_version   => null
                    issues     => Array
                        0   => Array
                            title               => WordPress Amelia plugin <= 1.0.96 - Broken Access Control vulnerability
                            description         => Broken Access Control vulnerability discovered by Abdi Pranata (Patchstack Alliance) in WordPress Plugin Amelia (versions <= 1.0.96)
                            affected_in         => <= 1.0.96
                            fixed_in            => [empty string]
                            references          => Array
                                0   => Array
                                    slug    => patchstack
                                    label   => PatchStack
                                    refs    => Array( 1 )
                                1   => Array
                                    slug    => cve
                                    label   => CVE
                                    refs    => Array( 1 )
                            type                => Array
                                label   => Broken Access Control
                                slug    => [empty string]
                            id                  => ps-16021
                            created_at          => 2024-01-17T15:09:06+00:00
                            updated_at          => 2024-01-17T15:09:06+00:00
                            published_at        => 2024-01-17T15:08:55+00:00
                            score               => [double] 5.3
                            score_group         => [empty string]
                            score_vector        => [empty string]
                            is_exploited        => [boolean] false
                            patched_in_ranges   => Array()
                    link       => https://itsec-site-scanner.ithemes.com/vulnerability-details/djIubG9jYWwuV0J0WGNqd3h2cFNDbE9GanFsNmpWY0RsbFcwdF9KdjFpZ3lVYlRmSENMNjlHSFJERjJSVEJDbkE3SHNaUTVucjRweDhwaDFCT3E4Z3Y2WU5OeEplcmFwOFNQd3ZEMG9KTEN5S2paQnJXQ3hmZkFrVEhQS1pYbGpFcHloUmF4SWFSSFVxYzZEWFlSUUc5aHVGdmxzT2JGcGJxaU9rQURsRnFQb0FKb0lkbUEzX2oxV3k3WDJCcmkyYXFFazNLbi1GWkE1c0tRTFhNbGdCTmNFSEp6VG5TbUpGRHdXWU95T2ptekdPSmtMNTI2RnZwMXpJSkxNQnZhMlVndzJ0Q2FJNGNLLUl3bXVlcGFoWHl4VzUtQlJkd3BaQ2hPNWtpUnNMYjVfV09aV1FobTFaQ21nQXhReno3LUNaMWpoeGtYYnBDUkQ4cENzOGVkLTk2b0xsVm9fVHN3SWctc2RDNHZ4NHNyeDF5MkNnT24zVVo2RmRJd2tuaVR6UW5tZE1pRWRld2c%253D
        errors    => Array()
    cached    => [boolean] false

@myublishinghub definitely keep CleanTalk. It’s the best for keeping spam away from your site and mailbox.

What I did was remove the console widget from Site Kit, but you can also remove the CleanTalk widget. Apparently they clash when creating thr graphs in the widgets. The plugins just work.

No problem.

I did a roll-back to 6.0.1 and the same error message came up in console.

I did not try using the feature before, by the way. I received CleanTalk’s mail describing the feature and decided to try it out.

Graag gedaan, Jeroen!

Thanks in advance!

I wouldn’t be surprised. It’s a client with limited technical knowledge.

Thanks for picking this up!

Now I need to reauthenticate my Dropbox connection, also on sites without a Dropbox connection:

You have one or more BackWPup jobs that need to reauthenticate with Dropbox.

The Dropbox API is discontinuing long-lived access tokens. To conform to these new changes, we must implement the use of refresh tokens, which can only be fetched when you reauthenticate.

Please visit each job below and reauthenticate your Dropbox connection.