Access control vulnerability | WordPress.org

Resolved robdxw
(@robdxw)

3 years, 4 months ago

Hi, is there any news on a fix for the access control vulnerability disclosed today? https://patchstack.com/database/vulnerability/googleanalytics/wordpress-sharethis-dashboard-for-google-analytics-plugin-3-1-2-broken-access-control-vulnerability?_a_id=329

Thanks.

Viewing 3 replies - 1 through 3 (of 3 total)

Plugin Author ShareThis
(@sharethis)

3 years, 4 months ago

Hi @robdxw,

Thank you for reporting this. Our engineering team is aware of this and we hope to release a fix soon!

Best.

Thread Starter robdxw
(@robdxw)

3 years, 4 months ago

Hi, is there any update on this? Patchstack is reporting that it’s still an issue in v3.1.4: https://patchstack.com/database/vulnerability/googleanalytics/wordpress-sharethis-dashboard-for-google-analytics-plugin-3-1-2-broken-access-control-vulnerability

Thanks!

Plugin Author ShareThis
(@sharethis)

3 years, 3 months ago

Hi @robdxw,

We deeply apologize for the wait here.

Nonetheless, I’m happy to tell you that this bug has been fixed on the latest version of the plugin (3.1.5), please update the plugin so the changes take effect.

Best regards and thank you again for the notice,

The ShareThis Technical Support team.

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Access control vulnerability’ is closed to new replies.

4 replies
2 participants
Last reply from: ShareThis
Last activity: 3 years, 3 months ago
Status: resolved