Crelly Slider – security issue?
-
Installed Version 1.1.2, everything looked OK; However, today (1/30/17) as I logged in I’ve noticed something was not right. All of a sudden the header image was replaced and the favicon disappeared. Somehow the uploaded images were gone. Then the slider vanished; I did not think much of that. Logged in to my website using FTP and noticed that all the uploaded Slider images were gone also. I went back to WP back-end; as I was finishing editing the Slider I noticed that Firefox was not displaying the security lock any-longer. At that point I was logged in the admin area via unsecured connection. Tried to re-login via secure connection and could not, so I decided to immediately reset my password. After resetting a new password I logged in via a secure connection. Went back to the slider while watching the security lock. As soon as I clicked to edit the slider the Lock turned black to unsecured. Immediately canceled the Slider edit, uninstalled the slider. Did anyone else noticed anything like this?
Thanks,
CAS
-
Hello, what you are saying is really serious. Recently my plugin was updated to improve security and was also inspected directly by one of the WordPress “guru” inspectors, that’s why I wouldn’t blame Crelly Slider for your issue (the plugin follows all the security practices listed here https://codex.wordpress.org/Class_Reference/wpdb#Protect_Queries_Against_SQL_Injection_Attacks and here https://codex.wordpress.org/Data_Validation#Database).
The topic ‘Crelly Slider – security issue?’ is closed to new replies.
