In reply to mark k..

I did not say the leak is Sucuri's fault. I said bringing it into the open and tell everybody how to hack a website using this leak caused all website being at risk of being hacked from that moment on instantly. That was Sucuri's fault for which they are to blame !

They should have contacted Envato and the RevSlider-Team first.

Envato would have forced all developers to update their themes at risk of being taken offline. Also Envato would have send all people who bought such theme and the plugin a email telling them to update because of a security risk. But no one at Envato would have told the world how the hack worked.

It's the most stupid thing one can do for being a company who claims to make your website secure.