Update to Newspaper 12.2 and infected with td composer plugin

Posted in: Newspaper
Post count: 6

Dear Support,

when I updated to the Newspaper 12.2 , I found my website was infected with virus where the website was completed dead and my hosting company told me it was sourced from one of your auto installed plugin – td composer. Please see the below for details.

202.64.71.194 – – [10/Jan/2023:09:23:56 +0800] “POST /wp-admin/themes.php?page=td_plugins HTTP/2.0” 200 36962 “https://www.parkbin.hk/wp-admin/update.php?action=update-selected-themes&themes=Newspaper&_wpnonce=0e8fa17365” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36″

https://share.getcloudapp.com/2Nu6mOLw

May I have any suggestion that I can avoid the virus again if i wanted to update the Newspaper 12.2?

Best regards,

Joe

Post count: 27744

Hello,

Please check this topic about analyzer https://forum.tagdiv.com/topic/tagdiv-composer-critical-error-2/
If your website is redirected to other websites, then please downgrade wordpress to version 6.0 using this plugin https://wordpress.org/plugins/wp-downgrade/ after the update, the wordpress to 6.1.1 There are more files infected with malware.
Also, please check this topic https://forum.tagdiv.com/topic/update-required-newspaper-12-1-1-brings-extra-security/

Thank you!

Viewing 2 posts - 1 through 2 (of 2 total)
The forum ‘Newspaper’ is closed to new topics and replies.