jmnewrise

Same problem here.

Please let us know how to fix the vulnerabilities caused by this plugin. We’ve deactivated and deleted it completely after the breach but can’t install the fixed version because it’s closed by WordPress.

We’ve got some Google Ads which are blocked because the vulnerabilities are still somewhere in the site / database.

Hi George, thanks for the quick reply.

Any thoughts on what this upload endpoint can be? Uploaded files are placed in /wp-content/uploads/gravity_forms/ but adding variations of this to the exclude-list didn’t solve the problem. Besides, I can’t find clues regarding this online…