Home Forums WoodMart support forum Resolving vulnerability issue without updating to WoodMart 8.0.4+

Resolving vulnerability issue without updating to WoodMart 8.0.4+

Viewing 6 posts - 1 through 6 (of 6 total)
  • Author
    Posts
  • #624338

    wildguitars
    Participant

    Greetings Xtemos team,

    The Wordfence plugin I have installed on my website has notified us about a vulnerability in WoodMart that is resolved by updating to version 8.0.4+
    We have been working on updating to version 8.0+ on our staging website but too many things get broken and this is taking (much) longer than expected. I was hoping you might be able to assist us with resolving this issue on our live site and two staging sites, without having to update just yet.

    Please let me know at your earliest convenience as naturally I am concerned about any vulnerability issues.

    Thanks,
    Tom

    #624601

    Artem Temos
    Keymaster
    Xtemos team

    Hello,

    Unfortunately, there is no fix for this issue in our old theme versions. You have to update the theme if you want to make sure that your website is not vulnerable.

    Kind Regards

    #625508

    wildguitars
    Participant

    Thank you for the prompt reply, Artem.
    How serious is this vulnerability? Should we be concerned and drop everything to focus on the Woodmart update?

    #625514

    Artem Temos
    Keymaster
    Xtemos team

    We can’t advise you on this matter because we can’t know how attackers may exploit this. However, it is always strongly recommended that all software be kept up to date in case any vulnerabilities are found.

    #625983

    wildguitars
    Participant

    Thanks, Artem. Our web developer was able to locate the problematic code snippet and disabled it.
    Looks like it was an Instagram shortcode, which we don’t need at the moment anyway.

    #626114

    Artem Temos
    Keymaster
    Xtemos team

    Great, we are glad that you sorted it out. Feel free to contact us if you have any further questions.

Viewing 6 posts - 1 through 6 (of 6 total)

The topic ‘Resolving vulnerability issue without updating to WoodMart 8.0.4+’ is closed to new replies.