In reply to Plugin Vulnerabilities.

Well the main issue is three fold:

The time they took to address this issue, cause it was mentioned to them way before it went public.
The reaction to the criticism, they are still unaware of how big of an issue this is and what kind of impact they make.
The comments about “you need admin privilege” shows how few they know about real security while they do deliver a “security” plugin?

I agree that the initial “mistake” can be forgiven and if it was solved right away (like WP Umbrella did btw) its more than forgiven. This response isn’t…