Hi, I got a website from a client. The website is using a very old version of Newspaper theme (9.2.2) The tagDiv Composer has a very bad security vulnerability that causes the site to be hacked all the time.
The agency that made them the site didn’t provide them any updates or licences, and they weren’t aware of any problems untill years later when they were hacked and asked for my help.
I purchased the license but it looks like the latest version is no longer compatible with the old one or at least not with the child theme. The frontend completely colapses if I upgrade to the new theme.
The site will also be refreshed in the future, but for now, at least removing the vulnerability is the priority.
How could I upgrade at least the tagdiv composer to a non vulerable version without having to rebuild the whole site?
Thanks for your answer and best regards, GRegor
Hello Gregor!
If you will use in the future cloud templates (that we recommend), then you have in the TagDiv Composer a lot of options for customization. We wanted to create the easiest platform, so you can build your website without knowing any code and have the possibility to customize every field from any demo. That’s why you do not need a child theme with cloud templates. But you can use the child theme you have with the default templates.
The child theme is not overwritten by the update. An issue with that could be the compatibility of your child theme with the new version of our theme.
If you have some custom modifications directly in the theme files, then better save the code and replace it after every update. You can use a staging plugin, so you won’t ruin your website.
For every update, we always recommend the following:
-> First of all, please make sure you have a backup.
-> Please deactivate all the non-tested plugins with our theme before updating.
-> Update WordPress, PHP, the theme, and plugins to the latest version: https://forum.tagdiv.com/how-to-update-the-theme-2/.
-> Check all these requirements for the theme: https://forum.tagdiv.com/requirements-for-newspaper/
Thank you!
Thanks, Bettina, but you did not answer my question. I know how to code and I have a serious security issue so please transfer me to someone more technical?
>> The tagDiv Composer has a very bad security vulnerability
Can you explain?
Hi,
If the version is that old, it is possible that the structure of the child theme also needs to be updated https://forum.tagdiv.com/the-child-theme-support-tutorial/. Additionally, it depends on what issues arise when you perform the update. If major changes have been made to the files in the child theme, then you will need to contact the custom work team who can help you with this, as it might be beyond our knowledge https://tagdiv.com/submit-a-request/
Thank you!
Thanks for your prompt response.
As far as I can see, all the changes have been made to the child theme.
After inspection of the console, it looks like no css files have been loaded.
@DocDigit it is an old version, this version https://wpscan.com/vulnerability/993a95d2-6fce-48de-ae17-06ce2db829ef/
Since it is a production website, I would like – if possible – to first update to a safe version of tagdiv composer or at least patch this, while maintaining compatibility.
Hi,
I recommend doing the update and changes on a staging website and fixing it there and after updating the live website and doing the changes.
Thank you!
