• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Resolved Contradictory Plugin Listings - BackupBuddy 8.7.5

Peter Downes

Basic Pleskian
Server operating system version
CloudLinux 7.9 (Boris Yegorov)
Plesk version and microupdate number
Plesk Obsidian v18.0.46_build1800220905.16 os_CentOS 7
Hi Community

Plesk WordPress Toolkit is showing my sites are using BackupBuddy 8.7.5 under Plugins
https://~/modules/wp-toolkit/index.php/index/plugins

And has a Vulnerable tooltip warning which reads 'WordPress Backup Buddy plugin 8.5.8.0 - 8.7.4.1 - Unauthenticated Path Traversal / Arbitrary File Download vulnerability '

Why show a Vulnerable tooltip warning for a version of the plugin that is not vulnerable according to Patchstack?

Just confused.
 
Hello! The bug in WordPress Toolkit is confirmed: EXTWPTOOLK-9721. This is because "fixed in" version of the vulnerability contains build number 0 and comparison doesn`t work correctly. In the other words this means that plugin version 8.7.5 and vulnerability "fixed in" version 8.7.5.0 is not he same :(
 
Hello! The bug in WordPress Toolkit is confirmed: EXTWPTOOLK-9721. This is because "fixed in" version of the vulnerability contains build number 0 and comparison doesn`t work correctly. In the other words this means that plugin version 8.7.5 and vulnerability "fixed in" version 8.7.5.0 is not he same :(
Thank you - that makes sense (tho' I couldn't load the link).
 
Back
Top