mauicomp

It is listed in the “WordPress Vulnerability Report – July 27, 2022” as Having “Admin+Stored Cross-Site Scripting” of ‘low severity’

https://ithemes.com/blog/wordpress-vulnerability-report-july-27-2022/

The recommendation there is “The vulnerability has not been patched and the plugin is closed. You should uninstall and delete the plugin.”

—replying to get followups–

I have same exact 3 errors with zero plugins and using twenty-twenty theme.
It was due to a recent update and is causing all kinds of havoc for a client site.

When I installed updraft backup it gave me an additional warning I have never seen before
“Warning: Your WordPress installation has a problem with outputting extra whitespace. This can corrupt backups that you download from here. Follow this link for more information”

I sure hope this gets solved, there are all sorts of hits on google for this in the last few days.

• This reply was modified 4 years, 11 months ago by mauicomp.

I just noticed this external links problem and it effects the google ranking of pages with external links, many of which cause errors. It also looks bad to users who follow links of interest to see that some other external site has privacy and security issues, simply because this plugin forces the https on the links.

I see it has been an issue for some years according to the support pages and no one has ever gotten a reply from support. I am saddened. This is miserable. I am worried about turning it off too as many posts say that that also causes issues.

A bit late to the conversation but I fixed this issue today.
After using a shabby delete all comments plugin, I could still see 1200 pending comments (that did not actually exist anymore) and still had the red bubble alerting me to them.

I looked at this post and thought, why not add a comment?

So I posted a temporary comment on a blog post and that cleared the issue.

Way better solution than using phpmyadmin or heidisql!

I just checked and the issue seems to have been solved, perhaps by an update or perhaps even due to an extension being turned off or updating. I have no idea for sure as to why but it’s working at present. Thanks.

Actually that did not work.
I just went and updated the plugin.
Then I went back to Popup Maker- Settings\Assets and unchecked the three boxes.
I clicked save and they all came right back.
Can you tell me where these checks are in the database tables so I can manually fix this please?

All three checkboxes on the Settings link, Assets tab.
None of them will uncheck.
I tried every possible combination of un-checking and saving.
Used both save buttons.

Thanks,
Jes

This may be a similar issue.
I checked all three boxes.
Now When I uncheck them and save them, they are always checked.
I started looking in the database to find the entries controlling that but so far have not found them.

I got it today from a bunch of my sites. Same thing?
I’ve had this happen with some other plugins and I can’t tell if it is a Wordfence issue or a plugin issue. I think Wordfence reads the wrong ‘updated’ plugin file from a cache somewhere, thinking it has not updated even though we have already updated whatever plugin is in question. Interesting.

* Modified plugin file: wp-content/plugins/wp-fastest-cache/inc/css-utilities.php
* Modified plugin file: wp-content/plugins/wp-fastest-cache/inc/js-utilities.php

With version .2.1 installed I tried
[is_not_mobile][new_royalslider id=”1″][/new_royalslider][/is_not_mobile]
and
[is_not_mobile][new_royalslider id=”1″][/is_not_mobile]

It corretcly does not show anything on mobile but on the desktop browser it only shows as
[new_royalslider id=”1″]
instead of showing the slider associated with the shortcode.

Any news on this?
Thanks,
Jes