paulshultz

I can confirm all our hosting servers that use cPGuard flag the file “html5-named-character-references.php” as malware on WordPress 6.6. This breaks the whole site and error 500.

Since this file is auto generated, is there any way we can confirm this file is not malware?
Can we confirm that this is a cPGuard “false positive”

BR

Thanks Darian,

Its something i overlooked to checking before posting. Many thhanks.

• This reply was modified 1 year, 6 months ago by paulshultz.

Sure, will do

Thanks

Unfortunately WordFence is now reporting this as a Critical issue

https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/simple-history/simple-history-331-authenticated-subscriber-csv-injection

Hello,

The recent update to?2.2.6?did not address this issue. Is anyone looking into this?

Hi @shresthauzwal

The recent update to 2.2.6 did not address this issue.

How is this issue progressing?

Hi @tahmidulkarim

I will missing the fact that I had to use the hidden field. Thanks for your help, much appreciated.

Kind Regards
Paul

Hello @shresthauzwal

Thanks for the update much appreciated

I also just tried 6.0.3. The problem is still there as per 6.0.2. 6.0.1 is fine

The changelog does not show that this issue has been addressed.

Hi Geoff,

I am getting these errors on PHP 7.4

[07-Sep-2022 06:52:11 UTC] PHP Fatal error: Uncaught Error: Call to a member function is_main_query() on null in /home/xxxxx/public_html/wp-content/plugins/event-tickets/common/src/Tribe/Context/locations.php:50

I can confirm I have a lots of errors with the same file

the-events-calendar/common/src/Tribe/Context/locations.php on line 50

Thank you guys, I have updated to latest version and can confirm issue is now resolved.

Hi Abz,

Thanks for the update, I am glad you could re-produce it.

Kind Regards
Paul

Hi Deblyn,

Thanks for the update. Its a custom plugin that I developed. It pulls WooCommerce Subscription Data and display the data in jQuery DataTables. So although I can send you the plugin, its needs data to see the problem.

I can provide you Admin login to a staging site where you can see the issue.

Hi Amrit,

Of course sorry about that