Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

Replies

  • Participant
    Level: Initiated
    Posts: 19
    Rudolf Wagner on December 22, 2023 at 1:51 am #51197

    Well done!
    It works now 🙂

  • Participant
    Level: Initiated
    Posts: 19
    Rudolf Wagner on December 11, 2023 at 5:15 pm #51078

    How to replicate the error:

    1. Install WordPress, WooCommerce, BuddyCommerce and BuddyBoss or BuddyPress latest versions.

    2. Configure BuddyCommerce in a way to have the “Addresses” tab in your profile.

    3. Visit your Profile and click on the “Addresses” tab (or subtab-depending on how you have it configured).

    4. Click on “Edit” for changing the billing address.

    5. Fill in something but leave at least one “required” field empty.

    6. Click “Save address”. Now you should see an error message “XXX is a required field” but there is none.

    7. Look at the form after submitting your input. It looks like it has taken the input and the empty “required” field is indeed empty. So you might think that everything works fine when it is in fact not.

    8. Because when you click to any other tab and then back to the “Addresses” tab you will see that in fact no input has been taken from the form and the address kept unchanged.

  • Participant
    Level: Initiated
    Posts: 19
    Rudolf Wagner on December 10, 2023 at 7:46 pm #51067

    I now tried an install from scratch.
    New WordPress install and plugins also from scratch.

    Only one user (me)

    Same problem and this time even worse.
    It did not take any input from the form in the profile even when it was correct and like before no error message was shown.

    When I switched to the standard WooCommerce My-Account page I could input an address and when I left field blank or put in an invalid ZIP code error message appeared.

    Therefore it is pretty clear to me that the address part of the BuddyCommerce plugin doesn’t work.

  • Participant
    Level: Initiated
    Posts: 19
    Rudolf Wagner on December 10, 2023 at 5:06 pm #51063

    In my test setup (like the attached screen recording) I don’t use the Tab plugin or a shortcode.

    These plugins are activated:

    BuddyBoss Platform
    Version 2.4.80

    BuddyBoss Platform Pro
    Version 2.4.30

    BuddyCommerce
    Version 1.0.6

    Elementor
    Version 3.18.2

    Elementor Pro
    Version 3.18.1

    Woo Subscriptions
    Version 5.7.0

    WooCommerce
    Version 8.3.1

    With this setting it doesn’t show error messages.

    I even tried switching to other themes and turned off Elementor. It still didn’t show error messages.
    I even tried deactivating BuddyBoss and installed BuddyPress instead but same result.
    No error messages.

    So this is the latest setup I tried:

    BuddyPress
    Version 11.4.0

    WooCommerce
    Version 8.3.1

    BuddyCommerce
    Version 1.0.6

    These are the only plugins activated – nothing else.

    I tested it with the 2023 theme and the Storefront theme. Same result – no error messages.
    With these 2 themes it is even worse because after refreshing the page it looks like it has accepted the empty input but when changing to another tab and back again it shows that it didn’t. Maybe that gives a hint of what’s going on.

    And yes, there is no server side cashing turned on.

  • Participant
    Level: Initiated
    Posts: 19
    Rudolf Wagner on December 10, 2023 at 2:05 am #51061

    I could not edit my post therefore I have to add a reply here:
    The second screenrecording shows the missing error message with the BuddyCommerce plugin not with a tab-plugin like I have written above.

  • Participant
    Level: Initiated
    Posts: 19
    Rudolf Wagner on November 5, 2018 at 10:47 pm #18582

    It works so far but I still struggle to achieve what I originally wanted to achieve. I wanted to be in control how the members page looks like. I thought i will place some shortcodes there to show the members type that I want to show the way I want to show it. My theme (Kleo) would provide some clever shortcode to achieve that goal.

    My main problem however is that I have found no way to prevent Buddypress from showing ALL members on that page per default. Do you know how I could make that happen?

  • Participant
    Level: Initiated
    Posts: 19
    Rudolf Wagner on October 30, 2018 at 3:13 am #18404

    Thanks for checking in. Glad that it works. Don’t know what I did that it didn’t work before.

    I know the procedure how to do it with CSS, it’s described in the theme documentation. I just thought the plugin could maybe provide an easier way to choose the icon. But I am also happy with CSSing. I let you know when I need help with that.

  • Participant
    Level: Initiated
    Posts: 19
    Rudolf Wagner on October 24, 2018 at 11:54 pm #18242
    This reply has been marked as private.
  • Participant
    Level: Initiated
    Posts: 19
    Rudolf Wagner on October 24, 2018 at 11:58 am #18231

    > I am sorry, can you please tell me the issue? Is it that you are unable to associate group with member types? If that is the case, can you please type a few letters and see it is suggesting?

    When I set the cursor in the group name field and type a few letters I can see it spinning but no suggestions are coming up.

    > What happened? After refresh, did you see the member type column having the member type or not?

    I did not see the column because of a plugin (admin columns). Sorry, my fault. Now I see them and they show the correct member type. So that works.

    > Are you on multisite or normal WordPress?
    normal

    So it looks as if the only thing not working is selecting a group. I am not using any filter I am aware of. In fact I have a website with Bbpress and not yet implemented Buddypress. I am still testing it all on my staging site to find out if and how it all works together.

    Maybe I might not even need groups in Buddypress because that makes other things quite complicated like the connection to forums. All I want is showing members that subscribed to a Membership plan (with Woocommerce Memberships) all of the members. I think I can do that with Member-types better than with groups because I found out that even my theme has all kinds of short-codes for showing members of specific member-types on a page.

    I tried to find information about the use of Buddypress member-types versus groups but was not very successful.
    As you seem to be very familiar with Buddypress could you give me some short advice of when to use member-types and when to use groups?

  • Participant
    Level: Initiated
    Posts: 19
    Rudolf Wagner on October 23, 2018 at 2:25 am #18204

    I wanted to test all the steps just to find out that the first step doesn’t work.
    I tried to assign users to a member type on the all users page.
    It looked as if it was working but did not.
    The shortcode of the member type shows no result.
    (by the way, is there any other way to list users that belong to a member type than a shortcode?)

    I tried the other option with creating a x-tra field for member type in the profile.
    I can choose the member type from the drop down menu and it remembers the setting after saving and refreshing the page but the shortcode still shows no result.

    And as I said before it also doesn’t find any BP Groups in the settings of the member type.

    Something very basic doesn’t work here I think.