Wordfence Alert

Same here. Following.

Confirmed here.

Does anyone know what happened to this? The site throws error 404, is there any information?

I am seeing the same WordFence alert here.

Wordfence updated the url to https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/better-font-awesome/better-font-awesome-203-authenticated-contributor-stored-cross-site-scripting-via-shortcodes

So this applies to 2.03 and earlier, but still shows as a vulnerability. So NOT for current version 2.04.

Same alert as everyone else. We’ve deactivated the plug-in in anticipation of a fix – but frankly, no idea if this is a false alarm.

Hi all, plugin author here. As you can see from the alert, the issue was remedied in version 2.0.4, which shipped recently. If you update to the latest version that should be resolved.

Perfect! Thanks for confirming, regarding the issue prior to 2.0.4 did it just mean that people could (rather elaborately) be tricked into having their better fontawesome settings being updated?

I have 2.0.4 installed, and Wordfence is warning that it still has the vulnerability. But now that they’ve fixed the info link, I can see the warning SHOULD only apply to 2.0.3 and below.

• This reply was modified 1 year, 10 months ago by Yui.
• This reply was modified 1 year, 10 months ago by fssbob.