agbruce

Any word on this? We’re using this plugin on several sites, and we need to patch this vulnerability ASAP. Perhaps you can provide us with a download link so we may update manually?

Sorry for nagging, but could you drop a line confirming that you’re looking at this issue?

??

Note: I’ve disabled ‘Group FAQs by Category’ for now, while I try to implement a workaround by modifying your plugin. Let me know if you need to look at the site and I’ll enable it again.

The main issue is with ‘Group FAQs by Category’, not ‘FAQ Category Toggle’. The latter just magnifies the problem.

However, both settings are indeed global. The fact that ‘Group FAQs by Category’ is global makes the aforementioned shortcodes practically useless when this is enabled.

Found the culprit. Line 13 in lib/inc/inc.filters.php:

$excluded = preg_match('/\d{2,}[Xx]\d{2,}\./', $file) ? true : false;

I simply commented it out, as it didn’t work as intended either*.

*This is due to me using customdata, which produces thumbnail filenames like _thumb_lrg_wd_TESTIMG_300x300 [TEST,4 okt 2016].jpg.

Note that this applies to permanent PDF thumbnails. Other file types seem to use fileaway_utility::createthumb() instead, which is probably not affected.