As you may know, WordPress upkeep support plans 6 has arrived at End-of-Life (EOL) which implies the WordPress upkeep support plans Security Team is done doing Security Advisories or dealing with security patches for WordPress support plans 6 center or contrib modules – yet the WordPress support plans 6 LTS vendors are and we’re one of them!Today, there is a Critical security discharges for the Panels plugins for various Access Bypass vulnerabilities.The first weakness permits mysterious clients to utilize AJAX callbacks to pull content and design from Panels, which permit them to get to private information. Furthermore, the second, permits validated clients with consent to utilize the Panels IPE to alter the Panels show for pages that they don’t have authorization to in any case edit.See the security warning for WordPress upkeep support plans 7 for more information.Here you can download the fix for 6.x-3.x!If you have a WordPress support plans 6 website utilizing the Panels module, we suggest you update immediately! We have effectively sent the fix for the entirety of our WordPress support plans 6 Long-Term Support customers. :- )If you’d like all your WordPress upkeep support plans 6 modules to get security refreshes and have the fixes conveyed that very day they’re delivered, please check out our D6LTS plans.Note: in the event that you use the myDropWizard plugin (absolutely free!), you’ll be made aware of these and any future security refreshes, and will actually want to utilize drush to introduce them (despite the fact that they will not really have a delivery on WordPress support plans.org).
Source: New feed