Multiple security advisories from Drupal Security team released today

drupal security

Projects: Multiple
Date: 2019-November-13
Security risk: Critical 
Vulnerability: Unsupported

Drupal Security team released multiple security advisories earlier today, notifying the following contributed modules and themes have been marked as unsupported and therefore should be either fixed or uninstalled:

  1. Administration Views - Critical - Unsupported - SA-CONTRIB-2019-076
  2. Frequently Asked Questions - Critical - Unsupported - SA-CONTRIB-2019-077
  3. Nexus Theme - Critical - Unsupported - SA-CONTRIB-2019-078
  4. Bypass Form Validations - Critical - Unsupported - SA-CONTRIB-2019-079
  5. Noggin - Critical - Unsupported - SA-CONTRIB-2019-080
  6. Bugsnag - Critical - Unsupported - SA-CONTRIB-2019-081
  7. Field Slideshow - Critical - Unsupported - SA-CONTRIB-2019-082
  8. Feeds JSONPath Parser - Critical - Unsupported - SA-CONTRIB-2019-083
  9. Taxonomy CSV import/export - Critical - Unsupported - SA-CONTRIB-2019-084
  10. Nodequeue - Critical - Unsupported - SA-CONTRIB-2019-085
  11. Webform Report - Critical - Unsupported - SA-CONTRIB-2019-086
  12. Make Meeting Scheduler - Critical - Unsupported - SA-CONTRIB-2019-087
  13. SendinBlue - Critical - Unsupported - SA-CONTRIB-2019-088
  14. Commerce Ingenico - Critical - Unsupported - SA-CONTRIB-2019-089
  15. Webform Multiple File Upload - Critical - Unsupported - SA-CONTRIB-2019-090
  16. Floating Button Menu - Critical - Unsupported - SA-CONTRIB-2019-091

Description

The security team have marked all the projects listed above as unsupported. There are known security issues with the projects which have not been fixed by their respective maintainers.

Solution

If you are using any of the listed projects on your Drupal websites, then you should uninstall it.

We value your opinion. Please add your feedback.