IMPORTANT --- Security Flaw in TapaTalk

[OldSchoolDSL]

If you're site is using TapaTalk, update now! There was a security flaw found in TapaTalk and they decided NOT to inform anyone or advise anyone to update their files.

I did not find out until today, when I just happen to scroll over and found a post about it.

They even publicly admit to patching it silently, but NOT issuing a release or any notice telling people they should replace their files (because they did not even bother changing the version number either).

So I can only imagine how many sites are using the other copy without knowing they have a problem. This is completely irresponsible.

Originally Posted by TapaTalk

Hi,

This issue has been addressed in April 26th, 9 days before this site published the issue. However, since this is a low risk item - we have simply replaced all the plugins that are affected. If this is concerning you and If you have updated the plugin after April 26th, you are not affected.

Source: https://support.tapatalk.com/threads...9/#post-131407

attached screenshot to confirm

[blind-eddie]

Nice....

[CharlieDelta]

Just another reason I am glad I do not use their plugin.

[RichieBoy67]

There are updates for that plug in every couple weeks. It is very simple to update normally but it gets irritating especially when most of the updates offer no features or anything.

[CAG CheechDogg]

I use tapatalk and I haven't had any problems with it ... I actually check quite frequently to see if the file versions have changed...I did notice the version of the file change when this happened and I updated ..I didn't know why it changed but I updated right away ....

It's not just the responsibility of tapatalk to let us know when something like this happens ...they deemed it was not necessary to put out a notice about this but I noticed it so I updated ...

We have to be careful ourselves and also make sure that we monitor what plugins we use and not always rely on these 3rd parties to notify us of threats ...sometimes "we" have to do our part ....

[RichieBoy67]

Originally Posted by CAG CheechDogg

I use tapatalk and I haven't had any problems with it ... I actually check quite frequently to see if the file versions have changed...I did notice the version of the file change when this happened and I updated ..I didn't know why it changed but I updated right away ....

It's not just the responsibility of tapatalk to let us know when something like this happens ...they deemed it was not necessary to put out a notice about this but I noticed it so I updated ...

We have to be careful ourselves and also make sure that we monitor what plugins we use and not always rely on these 3rd parties to notify us of threats ...sometimes "we" have to do our part ....

Very true. I have not had any issues with it either and have had it on sites for years. I see so many emails though from Tapatalk I often ignore them and just check the site every so often for an update.

I would love to use the paid version but I just cannot see spending another monthly fee on it right now.

One thing I have never figured out though is how to get sites listed higher up with in their search engine. One of my sites has had Tapatalk since it came out and it is still not very high up. I think maybe the premium users get listed higher.

Good warning though..I would not have updated this quickly had I not read this thread.

[CAG CheechDogg]

Originally Posted by RichieBoy67

Very true. I have not had any issues with it either and have had it on sites for years. I see so many emails though from Tapatalk I often ignore them and just check the site every so often for an update.

I would love to use the paid version but I just cannot see spending another monthly fee on it right now.

One thing I have never figured out though is how to get sites listed higher up with in their search engine. One of my sites has had Tapatalk since it came out and it is still not very high up. I think maybe the premium users get listed higher.

Good warning though..I would not have updated this quickly had I not read this thread.

And Richie that is also a problem, a lot of people don't actually check their emails like you just said, you ignore them and some even use emails that they don't even have active anymore and these important updates go unnoticed quite often.

I don't use the paid version and I don't see a need to either. I didn't even know there was a list within their search of the sites ! lol ...Most of the traffic now that comes to my forums is through tapatalk and I easily have over 200-300 posts per day on my forums. They just love tapatalk because they can stay updated and post where ever they go.

And yes good warning, I actually checked to see if the file version had changed and it was still the same so im good to go.....