Resolving vulnerability issue without updating to WoodMart 8.0.4+

Greetings Xtemos team,

The Wordfence plugin I have installed on my website has notified us about a vulnerability in WoodMart that is resolved by updating to version 8.0.4+
We have been working on updating to version 8.0+ on our staging website but too many things get broken and this is taking (much) longer than expected. I was hoping you might be able to assist us with resolving this issue on our live site and two staging sites, without having to update just yet.

Please let me know at your earliest convenience as naturally I am concerned about any vulnerability issues.

Thanks,
Tom

Hello,

Unfortunately, there is no fix for this issue in our old theme versions. You have to update the theme if you want to make sure that your website is not vulnerable.

Kind Regards

Thank you for the prompt reply, Artem.
How serious is this vulnerability? Should we be concerned and drop everything to focus on the Woodmart update?

We can’t advise you on this matter because we can’t know how attackers may exploit this. However, it is always strongly recommended that all software be kept up to date in case any vulnerabilities are found.

Thanks, Artem. Our web developer was able to locate the problematic code snippet and disabled it.
Looks like it was an Instagram shortcode, which we don’t need at the moment anyway.

Great, we are glad that you sorted it out. Feel free to contact us if you have any further questions.

[Author]

Posts