Hello thank you for the resource
Today while installing this plugin I got warning on my modsecurity, I do have other plugins installed from babiato but didn't get any of these errors.
Note: I changed the domain name here with "example.com"
ModSecurity: Warning. Matched "Operator `EndsWith' with parameter `wp-admin/admin-ajax.php' against variable `REQUEST_FILENAME' (Value: `/wp-admin/admin-ajax.php' ) [file "/usr/local/lsws/conf/modsec/comodo/25_Apps_WPPlugin.conf"] [line "434"] [id "0"] [rev "1"] [msg "COMODO WAF: SQL injection vulnerability in the Gallery Objects plugin 0.4 for WordPress (CVE-2014-5201)||example.com|F|2"] [data ""] [severity "2"] [ver ""] [maturity "0"] [accuracy "0"] [hostname "example.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "160014986082.253936"] [ref "o1,23v5,24"]
ModSecurity: Warning. Matched "Operator `PmFromFile' with parameter `bl_os_files' against variable `TX:matched_var' (Value: `-----------------------------40026705798004264692410776934\x0d\x0acontent-disposition: form-data; na (7145133 characters omitted)' ) [file "/usr/local/lsws/conf/modsec/comodo/02_Global_Generic.conf"] [line "117"] [id "210590"] [rev "1"] [msg "COMODO WAF: Blocking directory traversal attempt||example.com|F|2"] [data ""] [severity "2"] [ver ""] [maturity "0"] [accuracy "0"] [hostname "example.com"] [uri "/wp-admin/update.php"] [unique_id "160014987716.125856"] [ref "o66369,2v1701,2568418t:urlDecodeUni,t:lowercaset:lengtht:normalizePath,t:lengtho225364,11"]
ModSecurity: Warning. Matched "Operator `PmFromFile' with parameter `bl_os_files' against variable `TX:matched_var' (Value: `-----------------------------40026705798004264692410776934\x0d\x0acontent-disposition: form-data; na (7145133 characters omitted)' ) [file "/usr/local/lsws/conf/modsec/comodo/02_Global_Generic.conf"] [line "117"] [id "210590"] [rev "1"] [msg "COMODO WAF: Blocking directory traversal attempt||example.com|F|2"] [data ""] [severity "2"] [ver ""] [maturity "0"] [accuracy "0"] [hostname "example.com"] [uri "/wp-admin/update.php"] [unique_id "160014987716.125856"] [ref "o66369,2v1701,2568418t:urlDecodeUni,t:lowercaset:lengtht:normalizePath,t:lengtho225364,11"]
ModSecurity: Warning. Matched "Operator `PmFromFile' with parameter `bl_os_files' against variable `TX:matched_var' (Value: `-----------------------------40026705798004264692410776934\x0d\x0acontent-disposition: form-data; na (7145133 characters omitted)' ) [file "/usr/local/lsws/conf/modsec/comodo/02_Global_Generic.conf"] [line "117"] [id "210590"] [rev "1"] [msg "COMODO WAF: Blocking directory traversal attempt||example.com|F|2"] [data ""] [severity "2"] [ver ""] [maturity "0"] [accuracy "0"] [hostname "example.com"] [uri "/wp-admin/update.php"] [unique_id "160014987716.125856"] [ref "o66369,2v1701,2568418t:urlDecodeUni,t:lowercaset:lengtht:normalizePath,t:lengtho225364,11"]
ModSecurity: Warning. Matched "Operator `PmFromFile' with parameter `bl_os_files' against variable `TX:matched_var' (Value: `-----------------------------40026705798004264692410776934\x0d\x0acontent-disposition: form-data; na (7145133 characters omitted)' ) [file "/usr/local/lsws/conf/modsec/comodo/02_Global_Generic.conf"] [line "117"] [id "210590"] [rev "1"] [msg "COMODO WAF: Blocking directory traversal attempt||example.com|F|2"] [data ""] [severity "2"] [ver ""] [maturity "0"] [accuracy "0"] [hostname "example.com"] [uri "/wp-admin/update.php"] [unique_id "160014987716.125856"] [ref "o66369,2v1701,2568418t:urlDecodeUni,t:lowercaset:lengtht:normalizePath,t:lengtho225364,11"]
ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `PmFromFile' with parameter `bl_os_files' against variable `TX:matched_var' (Value: `-----------------------------40026705798004264692410776934\x0d\x0acontent-disposition: form-data; na (7145133 characters omitted)' ) [file "/usr/local/lsws/conf/modsec/comodo/02_Global_Generic.conf"] [line "117"] [id "210590"] [rev "1"] [msg "COMODO WAF: Blocking directory traversal attempt||example.com|F|2"] [data ""] [severity "2"] [ver ""] [maturity "0"] [accuracy "0"] [tag "CWAF"] [tag "Generic"] [hostname "example.com"] [uri "/wp-admin/update.php"] [unique_id "160014987716.125856"] [ref "o66369,2v1701,2568418t:urlDecodeUni,t:lowercaset:lengtht:normalizePath,t:lengtho225364,11"]
although virustotal shows this plugin clean
If possible can you please share the untouched version
Thank you