MyCryptoCheckout / wordpress

MyCryptoCheckout Wordpress plugin
https://wordpress.org/plugins/mycryptocheckout/
28 stars 23 forks source link

Jetpack Scan complaining about security issue #4

Closed dobacco closed 3 years ago

dobacco commented 3 years ago

Great plugin, but Jetpack seems to think there is a security issue with the plugin.

Here is the info

The file input.php contains a malicious code pattern
Threat found (PHP_Generic_BadPattern_4)AUTO FIX
What was the problem?

This code pattern is often used to run a very dangerous shell programs on your server. The code in these files needs to be reviewed, and possibly cleaned.

The technical details

Threat found in file:

/var/www/removed.com/data/wp-content/plugins/mycryptocheckout/vendor/plainview/sdk/form2/inputs/input.php
            $function = 'display_' . $type;
            $r = str_replace( $placeholder, $this->$function(), $r );
        }
MyCryptoCheckout commented 3 years ago

There's nothing wrong with that function - it's "Jetpack" being generically hypervigilant.

Either ignore the message or make "Jetpack" ignore it.