Home › Forums › WoodMart support forum › Woodmart core security vulnerbility
Woodmart core security vulnerbility
- This topic has 7 replies, 2 voices, and was last updated 6 days, 20 hours ago by Artem Temos.
May 23, 2023 at 11:15 am #469108
Hi, I’ve just purchased a woodmart licence for a clients site so I can update woodmart to the latest version, as wordfence is flagging that the Woodmart Core plugin has a security vulnerability. I’ve updated the theme to version 7.2.4 and woodmart core is on Version 1.0.30, however wordfence is still flagging the security vulnerability. I’ve checked in Appearance –> Install plugins and I can’t see an update for Woodmart Core here.. Please can you advise the latest version of Woodmart Core, and how I can update it?May 23, 2023 at 11:38 am #469113
Thank you so much for purchasing our theme and contacting our support center.
You can update the WoodMart core plugin via WordPress dashboard -> WoodMart -> Plugins. It should be 1.0.39.
XTemos StudioMay 24, 2023 at 12:28 pm #469539
Hi, thanks for your reply
I’ve gone into Woodmart, and I can’t see an option for Plugins here. See attached screenshots. I also can’t see an update available when I go into Dashboard –> Updates
Is there anywhere I can download a copy of the latest version of Woodmart Core and update it manually?
Attachments:You must be logged in to view attached files.May 24, 2023 at 2:15 pm #469566
You need to update the theme to the latest version first. https://xtemos.com/docs-topic/update-the-theme/
Kind RegardsMay 25, 2023 at 10:52 am #469845
Hi, I’ve updated the theme to the latest version in Appearance –> Themes, it says it’s updated, but then when I refresh the page it’s asking me to update it again…
Please can you confirm the latest theme version? I’m on 7.2.4 and I initially uploaded it manually after downloading it from themeforest a few days ago
Attachments:You must be logged in to view attached files.May 25, 2023 at 11:23 am #469857
Go to WordPress -> Update and click on the “Check again” button. The update notice will be removed.
Yes, you have the latest version installed on your website now.
Kind RegardsMay 25, 2023 at 12:47 pm #469878
Hi, I’ve managed to update the woodmart core plugin to the latest version, now on vs 1.0.35. Wordfence is still flagging a vulnerability, do you have any advice on this and when a patch will be released?
Here’s the link from wordfence
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/woodmart-core/woodmart-core-1036-missing-authorization-to-privilege-escalationMay 25, 2023 at 3:13 pm #469929
If you have 1.0.39 version of the plugin then this issue no longer exists on your website. You can check the plugin version in WoodMart -> Plugins.
- You must be logged in to create new topics. Login / Register