Freemius SDK has been updated make sure to update any plugins which use it

A number of security plugins have already released updates due to the change.

  • Security fix
    • Upgraded the Freemius SDK to version 2.4.3.
1 Like

https://freemius.com/blog/category/release-notes/
Version 2.4.3 is not included in any release notes posts.

934 plugins use the Freemius SDK.

https://wpscan.com/vulnerability/6dae6dca-7474-4008-9fe5-4c62b9f12d0a

Last week, it was discovered that many plugins and themes are using an insecure version of the Freemius Framework, which is used to power their upsell paths from free to Pro.

As of this report, over 400 plugins and 25 themes are impacted. Because the list is so large, we’re linking directly to the WPScan vulnerability disclosure for the latest information about patches .

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.