Wordfence alert

Loops & Logic
1

I understand that the Plugin “Tangible: Loops & Logic” has been removed from WordPress.org. Is there a problem? Thanks

2

Asking same! I’m ok with waiting for things as long as I know something is in the works. If this has been abandoned, I need to start looking for a replacement.

3

Hi everyone! Sorry for the late response here.

We’re looking into this and will resolve it ASAP. The plugin can still be used, and we are still supporting/maintaining it as needed.

Hope that helps to clarify :slight_smile:

1 Like
4

In the meantime, where can we check L&L’s updates and download the latest version of the plugin?

5

Will you post here once it is resolved?

6

Hi all,

We’ve already started the review process to get the plugin brought back live in the wp.org repo. I’ll update here again once we get an update from them.

Thank you all for your patience while we get this resolved :slight_smile:

7

Hi @henry But L&L has to be updated to 4.3.0 quickly due to a securiity issue in < 4.3.0, right?

And 4.3.0 is out, right (auto updated in some of my sites before the repo closure)? So is there an alternative official download link to 4.3.0?

8

Hi @avanti!

Yes, exactly right. The security issue affected versions before 4.3.0, and 4.3.0 (and now 4.3.1, released Sept 11) has the fix. So if you’re on 4.3.0+ already, you’re covered.

While we’re going through the wp.org re-review process, here’s a direct link to the latest official release (4.3.1) so anyone who needs to update manually can do so without waiting on the dashboard auto-update:

https://github.com/TangibleInc/loops-and-logic/releases/tag/4.3.1

For anyone else following this thread: the plugin has not been abandoned; it’s actively maintained, and this was a standard security-report removal rather than anything permanent. I’ll keep posting updates here as we hear back from the wp.org review team.

Thanks again for your patience, everyone :folded_hands:

1 Like
9

Thanks for the link @emma

10

New issue with L&L <= 4.3.1: Cross Site Scripting (XSS) in WordPress Loops & Logic Plugin - Patchstack

11

Thanks for bringing that up @avanti !

New version to address that is at https://github.com/TangibleInc/loops-and-logic/releases/download/4.3.2/tangible-loops-and-logic-4.3.2.zip

We’re still waiting for wp.org to review again for the new version.

1 Like
12

I’m still on 4.3.0, am I safe for now, or should I update to the latest github version?

13

Hi @jodi.stammer , while 4.3.0 is still usable, we would recommend updating since the issues that were found are resolved with the updates.

1 Like
14

Good to see L&L back on the WP repo and 4.3.2 available:

15

it is indeed! thanks for checking in on it so often @avanti !