WordPress.org

Resolved BackuPs
(@neo2k23)

6 months ago

Today the plugin was reported as having a vulnerability issue. It says it was patched in version 2.2.6. But that version is from august this year. Although in here it says the plugin updated 6 days ago.

https://solidwp.com/blog/wordpress-vulnerability-report-november-13-2024/#h-safe-svg

What was updated 6 days ago? I downloaded todays zip and compared it to the download from august. But it is the same.

Am I missing something? Can you please advice? Thank you

Viewing 2 replies - 1 through 2 (of 2 total)

Plugin Support Darin Kotter
(@dkotter)

6 months ago

@neo2k23 Thanks for the question! Version 2.2.6 is the latest released version and that does include the security fix mentioned. The update from 6 days ago was just bumping the WordPress tested up to version in preparation for the WordPress 6.7 release (can see that change here: https://plugins.trac.wordpress.org/changeset?new=3184097%40safe-svg%2Ftrunk%2Freadme.txt&old=3143072%40safe-svg%2Ftrunk%2Fread). These sorts of bumps don’t require an actual release, which is why the version number hasn’t changed since 2.2.6 in August

Thread Starter BackuPs
(@neo2k23)

6 months ago

Thank you for the explainationand the quick reply. Understood. 🙂

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Plugin update 2.2.6 / vulnerability issue.’ is closed to new replies.

In: Plugins
2 replies
2 participants
Last reply from: BackuPs
Last activity: 6 months ago
Status: resolved