WordPress - RevSlider Local File Inclusion (LFI)

Description

Cytrix has detected that you’re using an outdated version of Slider Revolution Premium WordPress Plugin, that allows a remote attacker to download any file from the server.

By exploiting this vulnerability, attackers can download any file they please, even your wp-config.php file.
By doing so, he can steal the database’s credentials, which then allows him to initiate attacks against the website via the database.

Severity/Score

Average Score – 5.0 Medium

Models – CIA and AAA

The field of information security is based on a number of basic principles that are important for us. Each principle is part of two main

Your SQL got the I(njection)

We’ve talked about it before right? or am i the only one having a Deja-Vu? Or an SQL Injection? No on likes doctors, or needles,

Active Directory Hacking

What does Active Directory mean? The Active Directory infrastructure is a critical infrastructure in most organizations, and it forms the backbone of the organization’s computing

Assets – Not just for Realtors

Throughout our lives we have learned that almost everything has a value. Whether it’s your car, phone and even a piece of paper lying down

Cybersecurity – The thinnest security guards you will ever know

I can sit here all day long talking about vulnerabilities, attackers and other scary ways that puts our money and personal data at risk and

WAF – Web Application Firewall

WAF, which stands for Web Application Firewall, helps protect web-based applications by blocking and preventing many common types of attacks which would otherwise have been

WordPress – RevSlider Local File Inclusion (LFI)

Description

Severity/Score

Recommendation

References

Models – CIA and AAA

Your SQL got the I(njection)

Active Directory Hacking

Assets – Not just for Realtors

Cybersecurity – The thinnest security guards you will ever know

WAF – Web Application Firewall

Company

Resources

Docs

Latest posts

Possible Credit Card Number Disclosure

Backdoors – A Dangerous Back Entrance

Internal IP Disclosure