pluginever / wc-serial-numbers

The best WordPress Plugin to sell license keys, redeem cards and other secret numbers!
11 stars 12 forks source link

Vulnerability issue (CVE-2023-46078) #396

Closed owadud closed 12 months ago

owadud commented 1 year ago

Describe the bug

We have received two user messages regarding this vulnerability issue.

I'd like to know if there is a status update for when this vulnerability will be patched (CVE-2023-46078). I have it running on a site and I'm fairly confident that it resulted in malicious code on our site last week that required a revert. Please provide an update on when we can expect this security issue to be resolved.WP Engine also flagged it so I'm guessing they'll automatically remove the plugin in a few days.

owadud commented 12 months ago

solved