Viewing 1 replies (of 1 total)
  • Plugin Support Ken Young

    (@uncannyken)

    Hi @danielvos,

    Thanks for bringing this to our attention. This vulnerability was patched in version 6.5.0, released May 9. I traced our communication with Patchstack and while we told them a patch was imminent, unfortunately we didn’t confirm with them after the patch had been released. We’ve updated our changelog with the CVE number and notified Patchstack to update the vulnerability report, which will hopefully happen soon. We’ve updated our internal processes to make sure the communication loop gets closed on any vulnerability reports. Sorry for the inconvenience!

    Ken

Viewing 1 replies (of 1 total)

The topic ‘Security vulnerability: ETA for fix?’ is closed to new replies.