Slide Revolution Plugin Security Risk

Hi

I’ve received a notification that the Slider Revolution Plugin has a high security risk which is patched in the latest version.

However, the plugin version that the Newspaper Theme uses is very old and contains the security risk. Only the theme developers can update the plugin as it’s integral to the theme.

Can you please advise as I’m concerned that the plugin is so old and insecure. Thanks

Here is the info on the plugin:

The Slider Revolution plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in versions up to, and including, 6.6.12. This makes it possible for authenticated attackers with administrator-level attackers to upload arbitrary files on the affected site’s server which may make remote code execution possible.

• This topic was modified 3 years by Jude.

The plugin version included in Newspaper 12.4 is 6.6.13, and according to Wordfence it seems to be ok (https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/revslider/slider-revolution-6612-authenticated-administrator-arbitrary-file-upload), but, after updating the plugin, a new Wordfence scan still reports an High Level vulnerability.
Could you please tell me when a Newspaper release including Slider Revolution 6.6.14 will be available, or suggest me something to solve that issue?
Thanks in advance, Luca

Hi
I’ve just installed the update and everything is ok also for Wordfence.
Thank you very much!