I was looking at theÃ‚Â WP Security Scan plugin (byÃ‚Â Michael Torbert)Ã‚Â that was recently updated to versionÃ‚Â 2.3.8. When I was looking in the security section, I noticed the usual coming soon features but below that I also noticed some big errors like these,
Warning: ABSPATH.”wp-content/plugins/wp-security-scan//b939749eebb2ae71d663ab35c79d1381.spc is not writeable in /homepages/26/d199854844/htdocs/rrsad/wp-content/plugins/wp-security-scan/simplepie.inc on line 759
Warning: ./cache/bc3d4fa0be92dcdcbab71158e44da674.spc is not writeable in /homepages/26/d199854844/htdocs/rrsad/wp-content/plugins/wp-security-scan/simplepie.inc on line 759
These two error messages in no way prevent the plugin from working but it certainly does raise the question of weather the plugin actually could be a security issue. I doubt it, but anytime there are errors like this, there is always a security vulnerability.
I updated WP Security Scan 2.3.9 today and the first error listed above was fixed but the second wasn’t. I wish they would update the changelog more often.
Actually, this was just fixed in an update to 2.4. Don’t worry about it, just update.