Security Alert: Slider Revolution

What is Slider Revolution?

It is one of the most common sliders (rotating slideshows) used in premium WordPress themes. Chances are,  your site uses this plugin if your theme was purchased through ThemeForest.

What is the Problem?

Old versions of Slider Revolution (Pre 4.5) can allow access to your wp-config.php file. This means a hacker has the ability to completely take over your website and do what they wish with it. This is a major security flaw that the developers of the plugin did not disclose to the public until after they released a fix.  Revolution Slider is a premium plugin, which eliminates the ability to alert your site of an update through the “Plugins” page of WordPress.

What Should You Do About It?

First, check to see if your site is using Slider Revolution. You will see this menu at the bottom left side of your WordPress Dashboard:

If you do see this, your site currently uses Slider Revolution. You may not see it in your Plugins list if it was bundled with a premium theme.

You have two options:

1. Update the Plugin
   • Download the new version of Slider Revolution here.
   • Go to your file manager (or FTP) and upload the new version in your “Plugins” folder.
2. Update Your Theme
   • See what theme you are using by clicking “Appearance” then “Themes”. This page will show you the active theme on your site.
   • Search for that theme at ThemeForest, download the new version, find Slider Revolution files and replace in your theme.

If you need help doing this, let us know!