As you may know, WordPress upkeep support plans 6 has arrived at End-of-Life (EOL) which implies the WordPress support plans Security Team is done doing Security Advisories or dealing with security patches for WordPress upkeep support plans 6 center or contrib modules – yet the WordPress upkeep support plans 6 LTS vendors are and we’re one of them!Today, there is a Moderately Critical security discharges for the Flag plugin for various Access Bypass vulnerabilities.The module incorporates a view that rundowns every client’s bookmarked content as a tab on their client profile. The consents on this view are arrangement inaccurately, permitting any client who has authorization to utilize the ‘bookmarks’ banner to see the rundown of content that any client has bookmarked.See the security warning for WordPress upkeep support plans 7 for more information.Here you can download the fix for 6.x-1.x or 6.x-2.x!If you have a WordPress support plans 6 webpage utilizing the Flag module, we suggest you update immediately! We have effectively conveyed the fix for the entirety of our WordPress upkeep support plans 6 Long-Term Support customers. :- )If you’d like all your WordPress upkeep support plans 6 modules to get security refreshes and have the fixes sent that very day they’re delivered, please check out our D6LTS plans.Note: in the event that you use the myDropWizard plugin (thoroughly free!), you’ll be made aware of these and any future security refreshes, and will actually want to utilize drush to introduce them (despite the fact that they will not really have a delivery on WordPress support plans.org).
Source: New feed