[Résolu] Toolset blocks plugin 1 6 26 cross site scripting xss vulnerability

[Auteur]

Publications

[sebastienD-8]

Security Alert Regarding Toolset Blocks Plugin

Hello,

I have received a security alert from my web hosting provider, WPEngine, regarding a security vulnerability.

The affected plugin is Toolset Blocks Plugin 1.6.26. At the moment, I cannot find any available patch or update.

Could you please confirm whether you are currently working on a fix? If so, do you have an estimated deployment or release date?

Thank you in advance for your response.

Kind regards,

More info :

lien caché

[Minesh]

Hello. Thank you for contacting the Toolset support.

This is a known issue to us and the issue is already fixed. We suppose to releae the hotfix version by today. Please hold on for further updates.

[Minesh]

I've good news for you. The security issue you reported with this ticket is been fixed and you can download the latest Toolset Blocks/Views plugins from your account's Downloads page:
=> https://toolset.com/account/downloads/

The new hotfix version for:
(you can visit the changelog to know other fix included with this release):
- Toolset Blocks v1.6.27
=> https://toolset.com/download/toolset-blocks/#changelog

- Toolset Views v3.6.27
=> https://toolset.com/download/toolset-views/#changelog

You can download the latest version and manually replace with your existing Blocks/Views plugin after login to admin using the plugins page.

Please note that:
- if you are using Blocks then Download and install the Blocks plugin.
- If you are using Views then Download and install the Views plugin.

[sebastienD-8]

Thank you for the responsiveness and follow-up.