Some request to vivethemes for better wplms

[w3dzign]

Hi after a ethical hacking of  wplms hope this we can do it please hope you can help us to make this or give us a clue where are the files to make a quick fix as the first point

1. Is remove the autocomplete in the login at the top for user and password they send us something like this <""input autocomplete="off" type="password" /"">

2.the assignment cant upload a file but we think we have a clue a permisions of server because ask for the ftp when we upload plugins and just to send error http when we upload files via media manager in wordpress any clue can help us to solve this? 3Any idea how to add and where to addcsrf protections to forms? clues to where in witch files 4 remove the change password in the  user settings because we add a plugin who add a password policy maybe hide this form? Sorry to be such an ..... but as you see this guys are a mayor company and i think this help us to do what we do better hope you can  help us  thanks    

[w3dzign]

Hi How can protect the login form with nonces? is the only thing i miss in the list for vulnerabilities thanks

[Author]

Posts