November 22, 2018 at 1:45 pm #1036506
When using the file scanning function in the plugin Defender by WPMU Dev, I’m getting the following message:
“Suspicious function found”, for the file phpQuery.php in the following folder: /enfold/config-layerslider/LayerSlider/helpers/.
I’m running version 4.5 of Enfold.
If this is a default file for Enfold, this problem should be fixed.November 22, 2018 at 7:41 pm #1036753
That is coming from the layerslider plugin which is bundled with the theme, it is part of the theme but we just bundle it with the theme but do not make changes to the plugin.
You can remove it if you’re not using layerslider: https://kriesi.at/documentation/enfold/advanced-layerslider/#deactivate-layerslider
NikkoNovember 23, 2018 at 10:10 am #1036891
Shouldn’t I be able to update Layerslider to a newer version through your theme, in which this problem has been solved?November 26, 2018 at 6:26 am #1037526
Sorry for the late response.
Honestly, I think that isn’t a good idea since it’s not just putting in the new layerslider files there and replace older files, since some integration codes are also added there.
If you have the latest stand-alone version of layerslider plugin, I would suggest going to WP Dashboard then go to Enfold > Layout Builder > Integrated (Bundled) LayerSlider Plugin and set it to one of the Remove theme plugin files option, so it is safely removed, then in Plugins you add the stand-alone version.
NikkoNovember 27, 2018 at 6:13 pm #1038105
I don’t own the LayerSlider plugin and got it through Enfold, so I can’t update it myself.
I think it’s weird that you’re bundling a plugin, but not maintaining it (or do I not get you right?).
What if a real vulnerability is found in the plugin?
According to wpvulndb.com LayerSlider had some vulnerabilities in the past, although it’s only sporadically.November 27, 2018 at 10:28 pm #1038247
You can disable and delete the Layer Slider, if you’re not sure about it. It will be updated with one of the next updates.
VictoriaNovember 28, 2018 at 10:34 am #1038400
OK, so the plugin is actually being updated through the theme. This was actually my question. ;)November 28, 2018 at 12:34 pm #1038461
You must be logged in to reply to this topic.