Digital experiences for all disciplines
New Landing › How can we help? › Themeforest Theme Support › Dante › IMPORTANT!! REVSLIDER UPDATE.
New Landing › How can we help? › Themeforest Theme Support › Dante › IMPORTANT!! REVSLIDER UPDATE.
Tagged: neighborhood, RevSlider
- This topic has 106 replies, 32 voices, and was last updated 9 years by Mohammad – SUPPORT.
-
Posted in: Dante
-
September 3, 2014 at 7:32 pm #106825
Hey all,
We’ve just been made aware of a security issue with the Revolution Slider plugin, see below the email we received from Sucuri Security:
Weβre emailing you to alert you to a serious vulnerability in the WordPress Slider Revolution premium plugin. The developer behind the popular plugin patched the vulnerability silently, meaning that, if you are running WordPress Slider Revolution, you have probably not yet heard that you must update as soon as possible.
This is a very serious vulnerability known as a Local File Inclusion (LFI) attack. It allows a user to retrieve data from files on your server. An example of such an attack would be pulling your WordPress wp-config.php file and using the credentials in that file to exploit your database and gain access to your website. If you use this plugin, please update immediately. If youβd like to learn more about the vulnerability, you can read about it on our blog.
Clients using our Website Firewall product are already being protected against this vulnerability.
Please update to the latest version of the plugin here: http://d.pr/f/gBzJ/1CyRstcw
Sucuri blog post link: http://blog.sucuri.net/2014/09/slider-revolution-plugin-critical-vulnerability-being-exploited.html
– Ed
September 3, 2014 at 11:03 pm #106862How can I update the slider from within wordpress – the update doesn’t appear there?
September 4, 2014 at 1:10 am #106889Go to the Revolution Slider panel in your WordPress admin, and then click the “Manual Update Plugin” button in the bottom right corner: https://www.dropbox.com/s/o43lqlhdy3yu36i/Screenshot%202014-09-04%2002.10.01.png?dl=0
– Ed
September 4, 2014 at 8:17 am #106968Sigh. This explains a lot.
Bought a theme from themeforest over a year ago (not a Swift Ideas one obviously) that had Revolution Slider bundled in. Just checked and it has never been updated in theme upgrades – Version 4.02 is installed.
For the past few months I have been getting all kinds of intrusion attempts, failed logins etc on the site and I could never figure out why. This would explain it.
September 4, 2014 at 8:26 am #106971Yeah likely to be the issue, make sure you update. Also look for updates every now and then on here: http://support.swiftideas.net/forums/topic/revolution-slider-latest-version-2/page/2/
– Kyle
September 4, 2014 at 8:27 am #106973Yea, just updated it there to the latest version.
Hopefully that resolves the security issues I was having with that site.
September 4, 2014 at 8:43 am #106978great π
September 4, 2014 at 3:02 pm #107119I’ll get an error when manual updating,
404 page not found (from my own site http://www.wijzijncvn.nl )Does somebody know how to manual update using ftp without losing any settings and slider?
Greetzzz
September 5, 2014 at 1:19 pm #107424This reply has been marked as private.September 5, 2014 at 2:35 pm #107455somebody?
September 5, 2014 at 2:47 pm #107459Hi replied you in private reply but since you are not the topic author you can’t see it.
Do ever used FileZilla to transfer files via ftp?
If not please open a new ticket and provide us ftp access so we can do it for you.
Please use the private reply option.-Rui
September 5, 2014 at 2:50 pm #107460Thank you Rui
I understand now the private marking π
But yes I do know how to work with Filezilla.
Can i just overwrite the files?
I am a little insecure because i don’t want to lose all settings etc.Thank you!
September 5, 2014 at 4:08 pm #107495This reply has been marked as private.September 6, 2014 at 6:26 am #107598Please update to the latest version of the plugin here: http://d.pr/f/gBzJ/1CyRstcw
that link does not work.
September 6, 2014 at 7:10 am #107602Bad … π
I haven’t update buttom … I upload by ftp and now all my site is blank πEdit after π :
Now it’s ok :). You must desactivate the plugin and after you can reactivate . The site rework
-
Posted in: Dante
You must be logged in and have valid license to reply to this topic.