Viewing 1 replies (of 1 total)
  • Plugin Author Marcus

    (@msykes)

    Hello everyone, sorry for the late reply. We’ve just released 3.2 which fixes the vulnerability. This was a minor vulnerability which allowed authenticated users to view media attachment URLS according to ID.

    If you store only images in your media, then there’s not much of implication here, it’d mainly be of concern for sites that may store sensitive files in the media library.

Viewing 1 replies (of 1 total)
  • You must be logged in to reply to this topic.