Multiple security advisories from Drupal Security team released today
Projects: Multiple
Date: 2019-November-13
Security risk: Critical
Vulnerability: Unsupported
Drupal Security team released multiple security advisories earlier today, notifying the following contributed modules and themes have been marked as unsupported and therefore should be either fixed or uninstalled:
- Administration Views - Critical - Unsupported - SA-CONTRIB-2019-076
- Frequently Asked Questions - Critical - Unsupported - SA-CONTRIB-2019-077
- Nexus Theme - Critical - Unsupported - SA-CONTRIB-2019-078
- Bypass Form Validations - Critical - Unsupported - SA-CONTRIB-2019-079
- Noggin - Critical - Unsupported - SA-CONTRIB-2019-080
- Bugsnag - Critical - Unsupported - SA-CONTRIB-2019-081
- Field Slideshow - Critical - Unsupported - SA-CONTRIB-2019-082
- Feeds JSONPath Parser - Critical - Unsupported - SA-CONTRIB-2019-083
- Taxonomy CSV import/export - Critical - Unsupported - SA-CONTRIB-2019-084
- Nodequeue - Critical - Unsupported - SA-CONTRIB-2019-085
- Webform Report - Critical - Unsupported - SA-CONTRIB-2019-086
- Make Meeting Scheduler - Critical - Unsupported - SA-CONTRIB-2019-087
- SendinBlue - Critical - Unsupported - SA-CONTRIB-2019-088
- Commerce Ingenico - Critical - Unsupported - SA-CONTRIB-2019-089
- Webform Multiple File Upload - Critical - Unsupported - SA-CONTRIB-2019-090
- Floating Button Menu - Critical - Unsupported - SA-CONTRIB-2019-091
Description
The security team have marked all the projects listed above as unsupported. There are known security issues with the projects which have not been fixed by their respective maintainers.
Solution
If you are using any of the listed projects on your Drupal websites, then you should uninstall it.
We value your opinion. Please add your feedback.