Broken Access Control vulnerability | WordPress.org

Resolved 2mooses
(@2mooses)

5 months ago

Do you have an update coming out soon to address the vulnerability? While it’s not a serious one, an update would be welcome.

https://patchstack.com/database/wordpress/plugin/hurrytimer/vulnerability/wordpress-hurrytimer-plugin-2-13-1-broken-access-control-vulnerability?_a_id=431

Thank you.

Viewing 4 replies - 1 through 4 (of 4 total)

Web-Pepper
(@pctevree)

5 months ago

Same here, indeed an update would be pretty

https://patchstack.com/database/wordpress/plugin/hurrytimer/vulnerability/wordpress-hurrytimer-plugin-2-13-1-broken-access-control-vulnerability?_a_id=431

Plugin Author Nabil Lemsieh
(@nlemsieh)

5 months ago

Hi,

The issue has been resolved in the latest update. As a precaution, we’ve temporarily disabled the “Change stock status” expiry action to avoid any unintended stock changes for the specified products.

It wasn’t a serious problem and very unlikely to be exploited. We’ll work on improving the feature and may bring it back soon in a safer way.

Web-Pepper
(@pctevree)

5 months ago

Thank you!

Thread Starter 2mooses
(@2mooses)

5 months ago

Thank you!

Viewing 4 replies - 1 through 4 (of 4 total)

You must be logged in to reply to this topic.

5 replies
3 participants
Last reply from: 2mooses
Last activity: 5 months ago
Status: resolved