If you’ve tried to find Tangible: Loops & Logic on WordPress.org recently and came up empty, here’s what happened and what we’ve done about it.
A researcher reported a high-severity vulnerability affecting versions before 4.3.0: an unauthenticated user could disclose certain user data and site options. We took this seriously and shipped a fix immediately in v4.3.0, followed by a cleanup release, v4.3.1, on September 11.
As part of the standard process for security reports like this, the plugin’s listing was temporarily removed from the WordPress.org repository pending review. This does not mean the plugin was abandoned! It’s still fully supported, actively maintained, and safe to run once you’re on 4.3.0 or later. We’ve started the review process to get the listing restored and will post an update here as soon as it’s back.
What you should do:
- If you’re running any version below 4.3.0, update immediately. Since the plugin is currently off wp.org, automatic updates through your dashboard may not trigger; download the latest release directly from GitHub and install it manually in the meantime: https://github.com/TangibleInc/loops-and-logic/releases/tag/4.3.1
- If you’re already on 4.3.0+, you’re good; no further action needed.
- Questions or issues? Drop them in the community forum and we’ll get to them.
Thanks for your patience while we sort this out with WordPress.org; we’ll keep this post updated as the listing review progresses.