NewStatPress 1.2.5

New version is ready to download:

  • Fix Stored cross-site scripting vulnerabilities, find by Han Sahin of www.SumOfPwn.nl @sumofpwn
  • Avoid direct access to pages
  • Changing path detections (not support anymore WordPress 2.x or lower)
  • Fix widget variable list
  • Use javascript+ajax for variables API
  • Remove the usage of wp_load
  • Complete name conversion
  • External API via WP Ajax
  • Fix missing 2 spider images
  • Use NONCE for ajax call in variables API

Download from newstatpress-1.2.5

This is a critical Update that you must install if you did not insert the version on GitHub with the same number (1.2.5).

It contains even a rewrite of the plugin for improve the security thanks to the help of WordPress Team.

Lascia un commento

Il tuo indirizzo email non sarà pubblicato. I campi obbligatori sono contrassegnati *

Questo sito usa Akismet per ridurre lo spam. Scopri come i tuoi dati vengono elaborati.