• Resolved Alok Mishra

    (@alokchetaru)


    We are getting below message from our host service provider and had to deactivate this plugin. Please fix below issue with your next release.

    ————————————-

    The plugin has a vulnerability that allows unauthenticated visitors to view sensitive information (first name, last name, email address, and other personally identifiable information) when an administrator has imported subscribers from a CSV file.

    No fix is available.

Viewing 9 replies - 1 through 9 (of 9 total)
Viewing 9 replies - 1 through 9 (of 9 total)
  • You must be logged in to reply to this topic.