Dear WP Geo Controller Users,
We regret to inform you that a security vulnerability has been identified in the Geo Controller plugin, specifically related to unauthorized shortcode execution due to missing authorization and capability checks in the ajax__shortcode_cache function. This issue affected all versions up to and including 8.6.9, and it may allowed unauthorized attackers to potentially execute arbitrary shortcodes on the site.
As a result of this discovery, the Geo Controller plugin was temporarily closed on September 3, 2024, to address the security concern. We deeply apologize for any inconvenience this may have caused and take this situation very seriously.
Update on the Status:
We are pleased to announce that we have taken immediate steps to rectify this issue and have submitted an updated version of the plugin to the WordPress repository. This updated version includes all necessary security patches and additional safeguards to prevent similar vulnerabilities from occurring in the future. While we are awaiting official approval from the WordPress community, we strongly encourage users to update their plugins as soon as the release is available.
For Immediate Action:
For those who wish to update immediately, we have made the updated version of the plugin available on our official GitHub repository. You can download and manually install the latest secure version of the Geo Controller plugin from the following link: https://github.com/InfinitumForm/cf-geoplugin/releases. This version contains all security fixes and can be applied to your site without waiting for the WordPress repository update.
Next Steps:
All Geo Controller API services remain fully operational, and we appreciate your understanding and patience during this review process. The security and performance of our plugin are of utmost importance to us, and we are committed to ensuring that such issues do not arise in the future.
If you have any concerns or questions, please feel free to reach out to our support team at wpgeocontroller@gmail.com.
Thank you for your continued trust in Geo Controller.
Sincerely,
The Geo Controller Development Team
