This a very popular plugin, and appears to be one of the most downloaded slider plugins from Envato’s Marketplace – Code Canyon. ThemePunch’s approach to disclosing the issue was based on guidance they received. The real issue lies in the way the plugin is wrapped into theme packages. ThemePunch confirms that their plugin was patched in version 4.2 for those that purchase the plugin directly from them, and they include an auto-updater which would address the problem. It turns out that the vulnerability was disclosed via some underground forums. Mika Epstein, Ipstenu, of Dreamhost, notified us today of a serious vulnerability in the WordPress Slider Revolution Premium plugin which was patched silently.
If you need help cleaning a hacked WordPress website, we released a new guide in 2016 that may help: : See more information on the SoakSoak massive malware outbreak resulting from this vulnerability: RevSlider Vulnerability Leads To Massive WordPress SoakSoak Compromise by Daniel Cid
0 kommentar(er)
