Wayne Parker

Yes, it appears to be resolved now.

The issue was the long length of time between when the patch was released and yesterday when the Wordfence scan no longer showed the plugin “critical” warning. While we feel the access to the csv download information should not have required security checks as it was simply public information available on sites, we went ahead and tightened up the security to require at least editor authorization. Patchstack was understandably a little slow in verifying after the patch release and then there was a less understandable lag before Wordfence scans finally picked up the current state of the issue. Hence the post on your forum.

We’re glad to have this Wordfence issue behind us, although we are now dealing with end user complaints no longer having public access to the csv downloads.

The life of those doing software support will always have its’ challenges eh!

I see @wlewis1055 has resolved this already. For future reference, @julien_e discussion with Code For Recovery can be viewed here: https://github.com/code4recovery/12-step-meeting-list/discussions/676

PS… the Meeting Id for any request will always display on about the 3rd line down in the html table in the generated email.

Hi niaawebmaster,
All of the Additional Group Information fields are optional, so removing them from the \wp-content\plugins\12-step-meeting-list-feedback-enhancement\templates\single-meetings.php file should not cause any problems. You can comment out lines 694 to 745 and lines 992 to 1051 which should do the trick. Just remember to repeat that process if you update the plugin in the future.
PS… don’t forget to clear your page cache after updating that file, so you can see your changes.

Hi Nicky,

The feedback feature in both the legacy ’12 Step Meeting List’ and the ‘Feedback Enhancement’ plugins are simply tools for end users to convey changes to a WordPress website administrator when 12 Step Meeting List modifications are needed. Either tool can be used to generate an email which the site admin uses as the source for the changes they will implement in the normal fashion. For the feedback feature to work, the ‘User Feedback Emails’ field on the ‘Import & Settings’ page must contain the email address of the website administrator. As shown in the screenshots, each meeting detail page will display the ‘Request a change to this listing’ button which activates the feedback feature when pressed.

Hope this answers your question!
Wayne