WordPress.com Forums » Tag: automattic security link - Recent Posts http://en.forums.wordpress.com/tags/automattic-security-link WordPress.com Forums » Tag: automattic security link - Recent Posts en Tue, 21 May 2013 13:29:30 +0000 http://bbpress.org/?v=1.1-alpha-2539 stephdau on "Contributors can publish directly while not supposed to!" http://en.forums.wordpress.com/topic/contributors-can-publish-directly-while-not-supposed-to#post-1078529 Mon, 26 Nov 2012 18:57:42 +0000 stephdau 1078529@http://en.forums.wordpress.com/ Thanks for the cross-link @timethief. Good catch, as per your usual. :)

@jhroy: bienvenue, et merci encore pour le rapport. :)

]]> timethief on "Contributors can publish directly while not supposed to!" http://en.forums.wordpress.com/topic/contributors-can-publish-directly-while-not-supposed-to#post-1074281 Wed, 21 Nov 2012 23:04:33 +0000 timethief 1074281@http://en.forums.wordpress.com/ @jhroy
You're welcome from me and I'm happy to know Staff fixed this so quickly. WordPress.com Staff rock!

]]> jhroy on "Contributors can publish directly while not supposed to!" http://en.forums.wordpress.com/topic/contributors-can-publish-directly-while-not-supposed-to#post-1074278 Wed, 21 Nov 2012 23:03:01 +0000 jhroy 1074278@http://en.forums.wordpress.com/ Thanks for fixing the issue! I was not alone. You're fast! :-)

JHRoy
Montreal

]]> kathrynwp on "Contributors can publish directly while not supposed to!" http://en.forums.wordpress.com/topic/contributors-can-publish-directly-while-not-supposed-to#post-1074079 Wed, 21 Nov 2012 20:16:45 +0000 kathrynwp 1074079@http://en.forums.wordpress.com/ Yes, that sounds like the same issue - thanks a lot, I'll reply there.

]]> timethief on "Contributors can publish directly while not supposed to!" http://en.forums.wordpress.com/topic/contributors-can-publish-directly-while-not-supposed-to#post-1074073 Wed, 21 Nov 2012 20:12:50 +0000 timethief 1074073@http://en.forums.wordpress.com/ @stephdau
Is this a related issue here > http://en.forums.wordpress.com/topic/user-roles-error?replies=3

]]> stephdau on "Contributors can publish directly while not supposed to!" http://en.forums.wordpress.com/topic/contributors-can-publish-directly-while-not-supposed-to#post-1074067 Wed, 21 Nov 2012 20:08:21 +0000 stephdau 1074067@http://en.forums.wordpress.com/ We were able to reproduce the problem and it has now been fixed. You should no longer have such issues. Thanks for the detailed report, but please indeed contact us via our security page, should you ever find another such issue, as it's by far the fastest way for us to be made aware and deploy a fix.

Best regards.

]]> jhroy on "Contributors can publish directly while not supposed to!" http://en.forums.wordpress.com/topic/contributors-can-publish-directly-while-not-supposed-to#post-1073951 Wed, 21 Nov 2012 18:40:35 +0000 jhroy 1073951@http://en.forums.wordpress.com/ Thanks timethief and Kathryn!

Sorry to do so publicly. The issue was unknown to peers.

JHR

]]> timethief on "Contributors can publish directly while not supposed to!" http://en.forums.wordpress.com/topic/contributors-can-publish-directly-while-not-supposed-to#post-1073890 Wed, 21 Nov 2012 18:07:22 +0000 timethief 1073890@http://en.forums.wordpress.com/ Thanks for that link Kathryn. I fired off an email.

]]> kathrynwp on "Contributors can publish directly while not supposed to!" http://en.forums.wordpress.com/topic/contributors-can-publish-directly-while-not-supposed-to#post-1073889 Wed, 21 Nov 2012 18:06:24 +0000 kathrynwp 1073889@http://en.forums.wordpress.com/ Thank you for letting us know - we are investigating and appreciate your thorough report.

In future, it's safer for everyone if you don't post potential security issues publicly before a fix is in place. You can either use this form - http://automattic.com/security/ - or email security AT wordpress.com.

Thanks very much.

]]> timethief on "Contributors can publish directly while not supposed to!" http://en.forums.wordpress.com/topic/contributors-can-publish-directly-while-not-supposed-to#post-1073836 Wed, 21 Nov 2012 17:26:31 +0000 timethief 1073836@http://en.forums.wordpress.com/ I've flagged this thread for Staff attention.

]]> jhroy on "Contributors can publish directly while not supposed to!" http://en.forums.wordpress.com/topic/contributors-can-publish-directly-while-not-supposed-to#post-1073807 Wed, 21 Nov 2012 16:59:14 +0000 jhroy 1073807@http://en.forums.wordpress.com/ Discovered the following security issue on WP.com.

Anyone else has experienced it?

[security issue redacted]

Jean-Hugues Roy
prof. UQAM, Montréal, QC, Canada

]]>