Tim Thumb update

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Author Ajay

    (@ajay)

    Hi,

    I’ll be removing support for Tim Thumb in the next version of the plugin because the author (Ben) is no longer supporting this. As a result, it will no longer be bundled within the plugin.

    Argh. Now I’ve learned you’re still using Tim Thumb, after serious vulnerabilities were found in it a long time ago, I am deleting this plugin in a hurry.

    I stand corrected, timthumb has been deprecated so is no longer included (though why it’s taken this long I have no idea)

    Plugin Author Ajay

    (@ajay)

    Dan,

    As far as I am aware, timthumb isn’t vulnerable. It’s had previous security issues which were fixed.

    I’ve deprecated this from the plugin from v2.1.0 that you have noticed.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Tim Thumb update’ is closed to new replies.