missvlikes

Is there any update on this?

Hi – are you guys working to patch this? Are you aware of it? Wordfence, Patchstack, and other security plugins have flagged OnePress as a security risk. Here are the details:

“The OnePress theme for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.3.8 due to insufficient input sanitization and output escaping. “

“Improper Neutralization of Input During Web Page Generation (XSS or ‘Cross-site Scripting’) vulnerability in FameThemes OnePress allows Stored XSS.This issue affects OnePress: from n/a through 2.3.8.”

Wordfence currently recommends uninstalling and finding a replacement. I don’t intend on doing that, but are you able to provide an eta on this?

As a temporary measure, rollback to previous version (8.9.3)

Use the rollback plugin by WP Rollback.

As a temporary measure, rollback to the previous version. Then you can either wait for Woo to release the next update or reinstall 9.0 from the download file on the Woo site.