security issue

#59238
  • Resolved Osman Evgin
    Rank Math free

    Hello, Our Server company regarding your plugin has reported the following critical security issues. Can I get information about these errors?

    ‘/public_html/wp-content/plugins/fast-indexing-api/vendor/phpseclib/phpseclib/phpseclib/Net/SFTP.php’
    Regular expression match = [symlink\s*(]
    ‘/public_html/wp-content/plugins/seo-by-rank-math/includes/admin/class-serp-preview.php’
    Universal decode regex match = [universal decoder]

Viewing 2 replies - 1 through 2 (of 2 total)
  • Hello,

    Thank you for contacting Rank Math and sorry for any inconvenience that might have been caused due to that.

    Allow me to consult on this and get back to you. Your patience will be appreciated.

    Looking forward to helping you. Thank you.

    ​​​​​​​

    Hello,

    The errors you see are false positives and are not related to any kind of security issue in the plugin. The security software you use is simply looking for words in the code that may indicate security issues. This results in many false positives because there are plenty of safe and legitimate uses of said words in the code.

    Further technical details:

    1. The word symlink is used in the phpseclib library, required by the official Google PHP API Client library that we have included in the plugin. This code is written and approved by Google.

    2. The second issue you mentioned doesn’t give us any information about the actual problem. I checked the file in question, and I presume it’s the word base64 that triggers the error. This function is sometimes used to obfuscate malicious code, but of course it has many legitimate uses, for example with its help we can embed image data inside the HTML code, which is what happens in Rank Math.

    Hope that helps.

    Hello,

    Since we did not hear back from you for 15 days, we are assuming that you found the solution. We are closing this support ticket.

    If you still need assistance or any other help, please feel free to open a new support ticket, and we will be more than happy to assist.

    Thank you.

Viewing 2 replies - 1 through 2 (of 2 total)

The ticket ‘security issue’ is closed to new replies.