No search results were found in Documentation!
Yes, I use both WordFence and the antivirus provided by SiteGround. But these tools are not reliable. Both say everything is OK, unfortunately, however, every now and then some users get hijacked to pornographic sites or sites containing malware. Perhaps the new version of tagDIV Composer also contains vulnerabilities.
Hello @Kcmweekly!
Follow this guide to clean your WordPress and theme of malware: https://askwpgirl.com/10-steps-remove-malware-wordpress-site/
After that, you can update the theme to the latest update.
For every update, we always recommend the following:
-> First of all, please make sure you have a backup.
-> Please deactivate all the non-tested plugins with our theme before updating.
-> Update WordPress, PHP, the theme, and plugins to the latest version: https://forum.tagdiv.com/how-to-update-the-theme-2/.
-> Check all these requirements for the theme: https://forum.tagdiv.com/requirements-for-newspaper/
Thank you!
Hello,
Please let me know what theme version you have.
Please update the theme to the latest version 12.6.2.
This malware infects not only theme files but also WordPress files or other plugin files. This malware was not detected only in our theme but also in many other themes and plugins https://www.bleepingcomputer.com/news/security/massive-balada-injector-campaign-attacking-wordpress-sites-since-2017 / -> https://cybernews.com/security/wordpress-malware-epidemic-balada-injector/ -> https://www.geoedge.com/balda-injectors-2-0-evading-detection-gaining-persistence /
You could consider reinstalling the WordPress version, reinstalling the theme, and checking for this plugin wp-zexit.php. It might be wise to inspect via FTP if it doesn’t appear in the WordPress -> Plugins. Additionally, using Wordfence to scan the website and remove unknown users would be prudent.
Thank you!
Hello,
Please let me know what theme version you have.
Please update the theme to the latest version 12.6.2.
This malware infects not only theme files but also WordPress files or other plugin files. This malware was not detected only in our theme but also in many other themes and plugins https://www.bleepingcomputer.com/news/security/massive-balada-injector-campaign-attacking-wordpress-sites-since-2017 / -> https://cybernews.com/security/wordpress-malware-epidemic-balada-injector/ -> https://www.geoedge.com/balda-injectors-2-0-evading-detection-gaining-persistence /
You could consider reinstalling the WordPress version, reinstalling the theme, and checking for this plugin wp-zexit.php. It might be wise to inspect via FTP if it doesn’t appear in the WordPress -> Plugins. Additionally, using Wordfence to scan the website and remove unknown users would be prudent.
Thank you!
I have noticed that on some of our Internet sites that use “tagDiv Composer” you are being diverted to other Internet sites that contain malware.
I have reported the problem to our provider (SiteGround) and they have noticed that the problem no longer occurs if the “tagDiv Composer” plugin is disabled.
Please check the code of “tagDiv Composer”.
Best regards.
No Malware Found
WP version 6.4.1
Theme version 12.6.2
PHP Version 7.4.13
Server software LiteSpeed
max_execution_time 300
max_input_vars 10000
Cache Plugin: LiteSpeed Cache
Redis: Enabled
Also, I just Paid for Cloudflare Cache to reduce load
Email to support send title: Too many requests to the database problem
My site was recently infected by the admin user name greeceman issue (Balada Injector—see this article for more on that malware issue: Balada Injector targeting .)
After cleaning up the site and reinstalling WordPress core files, my host (WPX) recommends I deauthorize, delete, and then reinstall the following:
td-cloud-library
td-composer
td-mobile-plugin
td-standard-pack
What are the steps to follow to do that? Can I do this from inside WordPress or do I need to download a fresh copy of Newspaper theme?
If I need to install a fresh version, is there a way to retain my customizations to the theme or at least somehow take not of them so I can easily replicate them?
Any advice on next steps is very much appreciated.
Thank you
Hi,
Please let me know what php and theme version you have.
Also, please scan your website for malware.
Thank you!
Hi,
I have a concern about the outdated tagdiv composer.
My website has been hacked and infected by malware and my hosting provider said that it’s related outdated plugin “tagdiv composer. so I tried to update it but it failed.
what version is the latest one?
Hello,
The “wp-json/tdw/save_css” I think it can be related to the bots that want to inject malwares in the theme live css, what I recommend is to install the Wordfence plugin and restrict that link and block the ip-s that attempt to inject those links.
I hope this will help you!
Thank you!
Yes, this happened to me as well.
There used to be ‘header styles’ and ‘footer templates’ that were built in and accessed in the theme panel. I bought 8 licenses of Newspaper and built all of my sites using these styles and templates, but now that I had had to upgrade to v12.x.x because of a malware infection, I find that they are simply not there and the sites look broken. I do not understand why they didn’t simply re-create the original templates in tagdiv-composer when they got rid of WPBakery builder and build them into the theme panel. Instead, I had to scour their cloud templates for similar looking templates and then customize them with tagdiv-composer.
While in the past everything was set and controlled from the theme panel, now with the latest versions you have to set some settings at theme panel and some from tagdiv-composer itself, making things even more confusing and harder to troubleshoot. Also, tagdiv-composer and WPBakery don’t play well together, so I have to switch the WPBakery plugin off when I need to work with tagdiv-composer, which is often because now it is central to everything. 80% of the content of the websites I work with was created with WPBakery, so its not an option to recreate all the content with tagdiv-composer. I did this for a handful of pages and it was too clunky and time consuming, so I gave up.
I hope this is helpful to you in some way.
Here from System Status in Theme Option:
php.ini configuration
Server software i Apache
PHP Version i 7.4.33
post_max_size i 256M – You cannot upload images, themes and plugins that have a size bigger than this value. To see how you can change this please check our guide here.
max_execution_time 120
max_input_vars 3000
SUHOSIN installed false
PHP extensions
mbstring available
GD library available
WP version i 6.3.2
WP multisite enabled i No
WP Language i en_US
WP Memory Limit 256 MB/request
WP_DEBUG False
Caching plugin WP Rocket – we recommend WP super cache
Here are the plugins:
Ad Inserter
Settings | Deactivate
Ad management with many advanced advertising features to insert ads at optimal positions
Version 2.7.31 | By Igor Funa | View details | Safe mode
Disable auto-updates
Automatic update overdue by 1 week. There may be a problem with WP-Cron.
There is a new version of Ad Inserter available. View version 2.7.32 details or update now.
Select All In One WP Security
All In One WP Security
Settings | Deactivate
All round best WordPress security plugin!
Version 5.2.5 | By All In One WP Security & Firewall Team | View details
Disable auto-updates
Select Asset CleanUp: Page Speed Booster
Asset CleanUp: Page Speed Booster
Deactivate | Getting Started | Settings | Go Pro
Unload Chosen Scripts & Styles from Posts/Pages to reduce HTTP Requests, Combine/Minify CSS/JS files
Version 1.3.9.3 | By Gabe Livan | View details
Disable auto-updates
Select Better Search Replace
Better Search Replace
Deactivate
A small plugin for running a search/replace on your WordPress database.
Version 1.4.3 | By WP Engine | View details | Upgrade to Pro
Disable auto-updates
Select Broken Link Checker
Broken Link Checker
Cloud | Local | Docs | Deactivate
Checks your blog for broken links and notifies you on the dashboard if any are found.
Version 2.2.3 | By WPMU DEV | View details
Disable auto-updates
Select Classic Editor
Classic Editor
Deactivate | Settings
Enables the WordPress classic editor and the old-style Edit Post screen with TinyMCE, Meta Boxes, etc. Supports the older plugins that extend this screen.
Version 1.6.3 | By WordPress Contributors | View details
Disable auto-updates
Select CookieYes | GDPR Cookie Consent
CookieYes | GDPR Cookie Consent
Deactivate | Settings | Support | Premium Upgrade
A simple way to show your website complies with the EU Cookie Law / GDPR.
Version 3.1.6 | By CookieYes | View details
Disable auto-updates
Select Easy Custom Sidebars
Easy Custom Sidebars
Deactivate
Replace any sidebar/widget area in any WordPress theme (no coding required).
Version 2.0.1 | By Titanium Themes | View details
Disable auto-updates
Select Easy Table of Contents
Easy Table of Contents
Deactivate | Settings | Support | Upgrade | Website
Adds a user friendly and fully automatic way to create and display a table of contents generated from the page content.
Version 2.0.57.1 | By Magazine3 | View details
Disable auto-updates
Select Elementor
Elementor
Activate | Delete
The Elementor Website Builder has it all: drag and drop page builder, pixel perfect design, mobile responsive editing, and more. Get started now!
Version 3.17.1 | By Elementor.com | View details
Disable auto-updates
Automatic update overdue by 1 week. There may be a problem with WP-Cron.
There is a new version of Elementor available. View version 3.17.2 details or update now.
Select Essential Addons for Elementor
Essential Addons for Elementor
Activate | Delete
The Essential plugin you install after Elementor! Packed with 40+ stunning free elements including Advanced Data Table, Event Calendar, Filterable Gallery, WooCommerce, and many more.
Version 5.8.13 | By WPDeveloper | View details
Disable auto-updates
Automatic update overdue by 1 week. There may be a problem with WP-Cron.
There is a new version of Essential Addons for Elementor available. View version 5.8.14 details or update now.
Select Fixed Widget
Fixed Widget
Settings | Deactivate
Use the fixed widget plugin to create sticky widgets that stay in the visible screen area when the page is scrolled up or down and boost your conversions.
Version 6.2.3 | By Thomas Maier, Max Bond | View details
Disable auto-updates
Select Genesis Simple Edits
Genesis Simple Edits
Deactivate
Genesis Simple Edits lets you edit the three most commonly modified areas in any Genesis theme: the post-info, the post-meta, and the footer area.
Version 2.3.1 | By StudioPress | Visit plugin site
Select Header Footer Code Manager
Header Footer Code Manager
Settings | Deactivate
Header Footer Code Manager by 99 Robots is a quick and simple way for you to add tracking code snippets, conversion pixels, or other scripts required by third party services for analytics, tracking, marketing, or chat functions. For detailed documentation, please visit the plugin’s official page.
Version 1.1.36 | By 99robots | View details
Disable auto-updates
Select Hotjar
Hotjar
Deactivate
The fast & visual way to understand your users.
Version 1.0.16 | By Hotjar | View details
Disable auto-updates
Select HTTP2 push content
HTTP2 push content
Settings | SEND SUGGESTIONS TO IMPROVE | Deactivate
Push all CSS and JS file throuhg http2 server, plugin add extra files that you want to push like images font files and other
Version 1.9.71 | By Pi websolution | View details
Disable auto-updates
Automatic update overdue by 1 week. There may be a problem with WP-Cron.
There is a new version of HTTP2 push content available. View version 1.9.72 details or update now.
Select Imagify
Imagify
Settings | Bulk Optimization | Documentation | Deactivate
Dramatically reduce image file sizes without losing quality, make your website load faster, boost your SEO and save money on your bandwidth using Imagify, the new most advanced image optimization tool.
Version 2.1.2 | By Imagify – Optimize Images & Convert WebP | View details
Disable auto-updates
Select Inline Related Posts
Inline Related Posts
Settings | PREMIUM | Deactivate
Inline Related Posts AUTOMATICALLY inserts related posts INSIDE your content, capturing immediately the reader’s attention
Version 3.3.1 | By Data443 | View details
Disable auto-updates
Select Lightweight Social Icons
Lightweight Social Icons
Deactivate
Add simple icon font social media buttons. Choose the order, colors, size and more for 42 different icons!
Version 1.1 | By Thomas Usborne | View details
Disable auto-updates
Select myStickymenu
myStickymenu
Activate | Delete
Simple sticky (fixed on top) menu implementation for navigation menu and Welcome bar for announcements and promotion. After install go to Settings / myStickymenu and change Sticky Class to .your_navbar_class or #your_navbar_id.
Version 2.6.5 | By Premio | View details
Disable auto-updates
Select Post Duplicator
Post Duplicator
Deactivate
Creates functionality to duplicate any and all post types, including taxonomies & custom fields
Version 2.31 | By Metaphor Creations | View details
Disable auto-updates
Select Post Tags and Categories for Pages
Post Tags and Categories for Pages
Deactivate
Simply adds the stock Categories and Post Tags to your Pages.
Version 1.4.1 | By curtismchale | View details
Disable auto-updates
Select Post Type Switcher
Post Type Switcher
Deactivate | Sponsor
A simple way to change a post’s type in WordPress
Version 3.2.1 | By Triple J Software, Inc. | View details
Disable auto-updates
Select Post/Page specific custom CSS
Post/Page specific custom CSS
Deactivate | Settings
Post/Page specific custom CSS will allow you to add cascade stylesheet to specific posts/pages. It will give you special area in the post/page edit field to attach your CSS. It will also let you decide if this CSS has to be added in multi-page/post view (like archive posts) or only in a single view.
Version 0.2.4 | By Łukasz Nowicki | View details
Disable auto-updates
Select Redirection
Redirection
Settings | Deactivate
Manage all your 301 redirects and monitor 404 errors
Version 5.3.10 | By John Godley | View details
Disable auto-updates
Select Sensei LMS
Sensei LMS
Activate | Delete
Share your knowledge, grow your network, and strengthen your brand by launching an online course.
Version 4.18.0 | By Automattic | View details
Disable auto-updates
Automatic update overdue by 1 week. There may be a problem with WP-Cron.
There is a new version of Sensei LMS available. View version 4.19.1 details or update now.
Select Sercanto
Sercanto
Deactivate
Sercanto Widget Plugin
Version 1.0 | By Sercanto | Visit plugin site
Select Shortcodes Ultimate
Shortcodes Ultimate
Deactivate
A comprehensive collection of visual components for WordPress
Version 5.13.2 | By Vova Anokhin | View details
Disable auto-updates
Select Simple Author Box
Simple Author Box
Configure Author Box | Deactivate
Adds a responsive author box with social icons on any post.
Version 2.52 | By WebFactory Ltd | View details
Disable auto-updates
Select Site Kit by Google
Site Kit by Google
Settings | Deactivate
Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.
Version 1.111.1 | By Google | View details | Rate Site Kit | Support
Disable auto-updates
Automatic update overdue by 1 week. There may be a problem with WP-Cron.
There is a new version of Site Kit by Google available. View version 1.113.0 details or update now.
Select Sucuri Security – Auditing, Malware Scanner and Hardening
Sucuri Security – Auditing, Malware Scanner and Hardening
Deactivate
The Sucuri plugin provides the website owner the best Activity Auditing, SiteCheck Remote Malware Scanning, Effective Security Hardening and Post-Hack features. SiteCheck will check for malware, spam, blocklisting and other security issues like .htaccess redirects, hidden eval code, etc. The best thing about it is it’s completely free.
Version 1.8.39 | By Sucuri Inc. | View details
Disable auto-updates
Select tagDiv Cloud Library
tagDiv Cloud Library
Deactivate
Access a huge collection of pre-made templates you can import on your website and customize on the frontend using the tagDiv Composer plugin.
Version 3.0 | built on 05.10.2023 12:50 | By tagDiv | Visit plugin site
Select tagDiv Composer
tagDiv Composer
Deactivate
Create everything on your website right on the frontend with this drag and drop builder. Perfect for articles, pages, headers, and footers. No coding skills required.
Version 4.4 | built on 05.10.2023 12:50 | By tagDiv | Visit plugin site
Select tagDiv Opt-In Builder
tagDiv Opt-In Builder
Deactivate
Generate leads and increase conversion rates with opt-in content lockers and subscription lists. tagDiv Opt-In Builder helps you easily create content lockers, subscribing lists (membership) and gives your visitors a compelling reason to enter their email address (opt-in) to unlock your content.
Version 1.5 | built on 06.10.2023 12:11 | By tagDiv | Visit plugin site
Select tagDiv Social Counter
tagDiv Social Counter
Deactivate
Displays your activity on social networks with style. Use it as a cool widget or shortcode.
Version 5.4 | built on 06.10.2023 12:11 | By tagDiv | Visit plugin site
Select tagDiv Standard Pack
tagDiv Standard Pack
Deactivate
Standard Pack Support
Version 2.1 | built on 06.10.2023 12:11 | By tagDiv | Visit plugin site
Select Tawk.to Live Chat
Tawk.to Live Chat
Settings | Deactivate
Embeds Tawk.to live chat widget to your site
Version 0.8.1 | By Tawkto | View details
Disable auto-updates
Select The Moneytizer
The Moneytizer
Settings | Deactivate
Plugin of the ad network The Moneytizer that facilitates the integration of your ad tags
Version 9.5.20 | By The Moneytizer | View details
Disable auto-updates
Select To Top
To Top
Settings | Deactivate
To Top plugin allows the visitor as well as admin to easily scroll back to the top of the page, with fully customizable options and ability to use image.
Version 2.5.2 | By Catch Plugins | View details | Support Forum |
Disable auto-updates
Select UpdraftPlus – Backup/Restore
UpdraftPlus – Backup/Restore
Premium / Pro Support | Settings | Deactivate | Take Tour
Backup and restore: take backups locally, or backup to Amazon S3, Dropbox, Google Drive, Rackspace, (S)FTP, WebDAV & email, on automatic schedules.
Version 1.23.10 | By UpdraftPlus.Com, DavidAnderson | View details
Disable auto-updates
Automatic update overdue by 1 week. There may be a problem with WP-Cron.
There is a new version of UpdraftPlus – Backup/Restore available. View version 1.23.11 details or update now.
Select WP Reset
WP Reset
Open WP Reset Tools | Deactivate
Reset the entire site or just selected parts while reserving the option to undo by using snapshots.
Version 1.98 | By WebFactory Ltd | View details | Support | Plugin Homepage | Rate the plugin ★★★★★
Disable auto-updates
Select WP Rocket
WP Rocket
Settings | FAQ | Docs | Support | Deactivate
The best WordPress performance plugin.
Version 3.9.3 | By WP Media | Visit plugin site
Auto-updates disabled
Select WPForms Lite
WPForms Lite
Get WPForms Pro | Settings | Docs | Deactivate
Beginner friendly WordPress contact form plugin. Use our Drag & Drop form builder to create your WordPress forms.
Version 1.8.4.1 | By WPForms | View details
Disable auto-updates
Select Yoast SEO
Yoast SEO
Get Premium | FAQ | Settings | Deactivate
The first true all-in-one SEO solution for WordPress, including on-page content analysis, XML sitemaps and much more.
Version 21.5 | By Team Yoast | View details
Disable auto-updates
I’m not going to scan it again there is no malware on this site or anywhere on this server. Let’s move on to something else.
Hello,
Please scan your website from Malware using Worfence. Maybe you have malware which is why there are so many requests.
For malware, please check this topic https://forum.tagdiv.com/topic/security-vulnerability-reported-in-composer-again/
Thank you!
I have installed “Newspaper 12.6.1” into my brand new refreshed website. My hosting provider is “hostinger.in”, but whenever td-composer is installed, my hosting security provider (powered by Patchstack) itself tells me that the plugin has a virus. Deactivate and delete the plugin.
There is no point in using this theme if you cannot remove this malware. We would prefer to choose other alternative themes.
So please let us know how we can get our refund.
We are also providing you the screen shot of our hosting dashboard, so please take it seriously. This is a question of security of our website
https://photos.app.goo.gl/HJbPieW8gPCjzRpF7
td-composer screenshort
Hi,
The latest version of the theme 12.6.1 is safe -> https://patchstack.com/database/vulnerability/td-composer/wordpress-tagdiv-composer-plugin-4-1-csrf-to-xss-vulnerability.
This malware infects not only theme files but also WordPress files or other plugin files. This malware was not detected only in our theme but also in many other themes and plugins https://www.bleepingcomputer.com/news/security/massive-balada-injector-campaign-attacking-wordpress-sites-since-2017 / -> https://cybernews.com/security/wordpress-malware-epidemic-balada-injector/ -> https://www.geoedge.com/balda-injectors-2-0-evading-detection-gaining-persistence /
I can offer an alternative recommendation if you prefer that we don’t inspect your theme files. You could consider downgrading the WordPress version using the WP Downgrade plugin, reinstalling the theme, and checking for this plugin wp-zexit.php. It might be wise to inspect via FTP if it doesn’t appear in the WordPress -> Plugins. Additionally, using Wordfence to scan the website and remove unknown users would be prudent.
Thank you!
Hello!
Follow this guide to clean your WordPress and theme of malware: https://askwpgirl.com/10-steps-remove-malware-wordpress-site/
After that, you can update the theme to the latest update.
For every update, we always recommend the following:
-> First of all, please make sure you have a backup.
-> Please deactivate all the non-tested plugins with our theme before updating.
-> Update WordPress, PHP, the theme, and plugins to the latest version: https://forum.tagdiv.com/how-to-update-the-theme-2/.
-> Check all these requirements for the theme: https://forum.tagdiv.com/requirements-for-newspaper/
Thank you!
Hello Andreea!
Follow this guide to clean your WordPress and theme of malware: https://askwpgirl.com/10-steps-remove-malware-wordpress-site/
For every update, we always recommend the following:
-> First of all, please make sure you have a backup.
-> Please deactivate all the non-tested plugins with our theme before updating.
-> Update WordPress, PHP, the theme, and plugins to the latest version: https://forum.tagdiv.com/how-to-update-the-theme-2/.
-> Check all these requirements for the theme: https://forum.tagdiv.com/requirements-for-newspaper/
Thank you!
Good evening, I’m fixing the site after suffering a malware attack that I had a technician fix. I notice that Tag DIV at the top appears on the home page and allows me to manage everything. But this doesn’t come out in the individual articles and so I don’t know how to organize Google’s ADVs. Now I have set them automatically because the Theme Panel sections are limited. How can I insert Div Tags also into individual pages and therefore manage them? Thank you.
Hi,
The latest version of the theme 12.6.1 is safe -> https://patchstack.com/database/vulnerability/td-composer/wordpress-tagdiv-composer-plugin-4-1-csrf-to-xss-vulnerability.
This malware infects not only theme files but also WordPress files or other plugin files. This malware was not detected only in our theme but also in many other themes and plugins https://www.bleepingcomputer.com/news/security/massive-balada-injector-campaign-attacking-wordpress-sites-since-2017 / -> https://cybernews.com/security/wordpress-malware-epidemic-balada-injector/ -> https://www.geoedge.com/balda-injectors-2-0-evading-detection-gaining-persistence /
I can offer an alternative recommendation if you prefer that we don’t inspect your theme files. You could consider downgrading the WordPress version using the WP Downgrade plugin, reinstalling the theme, and checking for this plugin wp-zexit.php. It might be wise to inspect via FTP if it doesn’t appear in the WordPress -> Plugins. Additionally, using Wordfence to scan the website and remove unknown users would be prudent.
Thank you!
Hi,
The latest version of the theme 12.6.1 is safe -> https://patchstack.com/database/vulnerability/td-composer/wordpress-tagdiv-composer-plugin-4-1-csrf-to-xss-vulnerability.
This malware infects not only theme files but also WordPress files or other plugin files. This malware was not detected only in our theme but also in many other themes and plugins https://www.bleepingcomputer.com/news/security/massive-balada-injector-campaign-attacking-wordpress-sites-since-2017 / -> https://cybernews.com/security/wordpress-malware-epidemic-balada-injector/ -> https://www.geoedge.com/balda-injectors-2-0-evading-detection-gaining-persistence /
I can offer an alternative recommendation if you prefer that we don’t inspect your theme files. You could consider downgrading the WordPress version using the WP Downgrade plugin, reinstalling the theme, and checking for this plugin wp-zexit.php. It might be wise to inspect via FTP if it doesn’t appear in the WordPress -> Plugins. Additionally, using Wordfence to scan the website and remove unknown users would be prudent.
Thank you!
I am told by my admin that my version of TagDiv is too old and causing a security risk.
I have tried to update it manually, because whenever I update automatically, it is going to an old version.
Its causing malware injections because I can’t update.
The is not on only the website, the malware is on my 10+ websites. all websites have paid theme and still registered
I have done it by myself.
You need to fix the malware in the plugin, which appears on the all websites td composer
I have done the issues about the feature images/thumbs by myself.
You need to fix the malware from plugin td-composer
