Patch of Vulnerability in LayerSlider Plugin?

Please provide an update on the LayerSlider SQL injection vulnerability.
From the CVE, “This vulnerability allows unauthenticated threat actors to inject malicious SQL queries to steal sensitive information from the database.”

Additional information.
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/layerslider/layerslider-7911-7100-unauthenticated-sql-injection

According to the Enfold changelog, the latest bundled version is 7.9.11. This vulnerability affects versions 7.9.11 and 7.10.0.
Changelog: https://themeforest.net/item/enfold-responsive-multipurpose-theme/4519990#item-description__changelog

Hello Ismael,

it getting somehow a little bit urging ..

The first pages went down to this unpached plugin. We are not able to update this plugin unless we buy it on top of enfold.
How many days will we have to live with a security leak like this in our systems?

Is it possible to deactivate this plugin somehow ??? It is not listed …

Ok Found it — Enfold — Layout Architekt — Bundled Plugins —

Site looks awfull now, but at least its save.

Thanx

• This reply was modified 8 months, 2 weeks ago by Sushipro.