Skip Navigation

[Resolved] Vulnerability Issue

This thread is resolved. Here is a description of the problem and solution.

Problem:

There was a Vulnerability report.

Solution:

Update Toolset plugins to the latest version.

This support ticket is created 2 years, 1 month ago. There's a good chance that you are reading advice that it now obsolete.

This is the technical support forum for Toolset - a suite of plugins for developing WordPress sites without writing PHP.

Everyone can read this forum, but only Toolset clients can post in it. Toolset support works 6 days per week, 19 hours per day.

This topic contains 8 replies, has 3 voices.

Last updated by justinl-5 2 years, 1 month ago.

Assisted by: Christopher Amirian.

Author
Posts
#2565657
1.png

Hello, actually it's not a bug but a security vulnerability. Please see attached. Our iThemes Security Pro plugin detected a vulnerability issue. Are you aware of this? When will the next update be available to fix it? Thank you.

#2566285

Christopher Amirian
Supporter

Languages: English (English )

Hi there,
Thank you very much for informing that. Is there any additional information on which file might have be the issue originating the warning?

#2566525

Hi Christopher, there is no additional information in the email, but when I clicked the link, it goes to hidden link

I hope it can provide additional information you need.

#2566659

Christopher Amirian
Supporter

Languages: English (English )

Hi there,

Thank you for the information. I reported this to the second tier support and will update you as soon as I have an update.

Thanks.

#2566817

Christopher Amirian
Supporter

Languages: English (English )

Hi there,

We have a new release with the fix implemented.

Please either go to https://toolset.com/account/downloads/ to download Toolset types version 3.4.18.
Or go to WordPress Dashboard > Plugins > Add New and click the "Check for Updates" button to see ethe new version to install.

Thank you.

#2567209

Here is the word fence link:
hidden link

I updated to 3.4.18 and am still getting

Critical Problems:

* The Plugin "Toolset Types" has a security vulnerability.

#2567365

Hi Christopher, thanks for the update. I have updated the plugin to 3.4.18. Hopefully it fixes the issue. I'll let you know if I still get the alert.

#2567369

Christopher Amirian
Supporter

Languages: English (English )

Hi there,

Most probably you will still get the alert for about a week or so as it takes time for the re-evaluations of the plugins in the listing of vulnerable plugins.

So I'd suggest that you give it a week or so.

Thanks.

#2569843

My issue is resolved now. Thank you!