YITH WooCommerce Gift Cards v4.10.0

webg said:

Be careful with this plugin I'm not sure if one of the above releases is infected or if it's an officials plugin vulnerability, but a few days ago I got malware across all my websites in the hosting account, thankfully the reaction of the hosting company was very fast and we've managed to identify the vulnerable plugin. The vulnerability itself allows the creation of an admin users, so check your admin section for new admins.

Click to expand...

webg said:

Be careful with this plugin I'm not sure if one of the above releases is infected or if it's an officials plugin vulnerability, but a few days ago I got malware across all my websites in the hosting account, thankfully the reaction of the hosting company was very fast and we've managed to identify the vulnerable plugin. The vulnerability itself allows the creation of an admin users, so check your admin section for new admins.

Click to expand...

GayBlackJew said:

yes, impacted version up to 3.19.0. it allows attackers to upload executable files and place a back door.
@Tomz

Click to expand...

PSA: YITH WooCommerce Gift Cards Premium Plugin Exploited in the Wild

The Wordfence Threat Intelligence team has been tracking exploits targeting a Critical Severity Arbitrary File Upload vulnerability in YITH WooCommerce Gift Cards Premium, a plugin with over 50,000 installations according to the vendor. The vulnerability, reported by security researcher Dave...

www.wordfence.com

Hekcis said:

Hey. So for the decryption key it says that I need to have 1 resource. What does that mean?

I need to upload something back to get it? I'm wondering what's needed though.

Click to expand...

Minion01 said:

Need to protect from leechers. Yes, submit 1 resource that you purchased or an alternate option donation.

Click to expand...

Hekcis said:

If all the resources I have legitimately purchased are already being posted by other users means that my only option is to Donate?

Click to expand...