Okay
  Public Ticket #284999
Security Update for Fineliner Plugin?
Closed

Comments

  • Natascha started the conversation

    Hi Paul, I've just received an email from Envato suggesting to update a plugin delivered within the Fineliner package. The mentioned plugin is called 'Slider Revolution'. I do not see such a plugin installed with Fineliner. The one that has been installed with the theme is called 'LayerSlider WP'.

    As far as I can judge, these are not the same plugins so I guess no action is required in this case.

    Could you please let me know, if I should do something nonetheless?

    You might also be interested in Sucuris annoucement:

    http://blog.sucuri.net/2014/09/slider-revolution-plugin-critical-vulnerability-being-exploited.html

  •  295
    Paul replied

    Hi Natascha,

    Actually Fineliner theme does not have Revolution Slider or Showbiz plugins included. So you do not have to worry about that. :)

    Envato just created that list based on only the description on the Item Details page of Fineliner theme. You will see that there is a word "Revolution Slider" in the changelog at the bottom of this theme page: http://themeforest.net/item/fineliner-responsive-p...

    They did a quick scan on themes and if any themes have the word, they will put it into the watch list.

    I used to ask them on the forum once. Here is the link: http://themeforest.net/forums/thread/important-ser...

    But there was no official response except from a fellow author "ImanGM" as you can see.

    It is funny that the theme is still in the list despite the fact that it does not even have those plugins in question...

    I already contacted them via their support site to revise the list. Still waiting for their response.

    So in summary, Fineliner theme has nothing to do with that security risk list from Envato. Fineliner theme does not use either Rev Slider or Showbiz plugins. :)

    Regards,
    Paul

  • Natascha replied

    Thank you Paul. As I didn't find the mentioned plugins, I had assumed that it might have been a mass-information by poor research. I think that generates more confusion than necessary.

    Have a great weekend