Your plugin has known vulnerabilities.

It’s not obvious from the description but actually a may also refer to the same as b and c, it’s just less specific.

I meant to both links of b, not “b and c”. There’s no c :B

A workaround to this problem is to change the 2 following files:

In WsdUtil.php add the following line in 238:

wp_die(); // workaround to https://xforce.iss.net/xforce/xfdb/91202

In box-database-backup.php change 44 to:

<input disabled type="submit" class="button-primary" name="backupDatabaseButton" value="<?php echo __('Backup now!');?>"/>

That will disable the functionality from the back and front ends.

So I guess you’re not very concerned with security vulnerabilities in your security plugin. That’s not a great sign…

Hi,

We have just updated the plugin to address this issue. Apologies for the delay.

Great! I will update right away.