Search Results for 'cloud library'

Hi Support,

I’m using the tagDiv Cloud Library plugin on my WordPress site and noticed there is a Cross-Site Scripting (XSS) vulnerability in versions before 3.9.2.

Could you confirm if updating to version 3.9.2 fully fixes this issue? Any advice to secure my site would be appreciated.

Thank you,

Hello
I recently noticed a security warning in my hosting panel related to the tagDiv Cloud Library plugin.

Here are the details:

Plugin: tagDiv Cloud Library

Version: 3.9.2

Build Date: 22.10.2025 10:59

Issue Type: Cross-Site Scripting (XSS) Vulnerability

Reference: Patchstack Advisory Link

My hosting provider is flagging this as a potential security issue.
Can you please confirm:

Whether this vulnerability has already been patched in the latest release or upcoming update?
https://prnt.sc/QomoE4P-SpO3

Hello tagDiv Support Team,

I am building a generic Taxonomy Archive Template using the tagDiv Cloud Library/Composer. This template is assigned to a Custom Taxonomy (e.g., prompts) and needs to load correctly for all terms within that taxonomy (e.g., /prompts/term-A, /prompts/term-B, etc.).

My goal is to display content in two separate Flex Blocks, each filtered by the current taxonomy term AND a specific Category ID.

1. Goal (Desired Query Logic):
I need to enforce the following AND logic within each Flex Block, dynamically, without hardcoding the current Taxonomy Term ID:

Section 1 (Text Posts): Posts must belong to (Current Taxonomy Term) AND (Category ID 87).

Section 2 (Image Posts): Posts must belong to (Current Taxonomy Term) AND (Category ID 88).

2. Current Setup (Flex Block Filter Settings):
I am using a Flex Block and configuring the Filter tab as follows (for Section 1, Category ID 87):

Category filter: Taxonomy – Current (Used to inherit the current term)

Multiple terms filter: 87 (Hardcoded ID of the specific category)

Posts(cpts) must belong to all terms: Checked (Intended to force the AND logic)

3. Issue/Failure Point:
Despite setting the Posts(cpts) must belong to all terms checkbox, the Flex Block query is incorrectly executed.

Observed Result: The block is showing posts that belong to Category ID 87 but are associated with OTHER, unrelated taxonomies or terms outside of the current archive page.

Example: When viewing /prompts/term-A, the block is showing posts tagged with Category ID 87, but whose main taxonomy term is from a different, unrelated taxonomy (e.g., from the guides taxonomy or another custom taxonomy).

4. Request:
Could you please advise on the correct combination of settings within the tagDiv Flex Block or provide a precise workaround to generate a strict, generic WP_Query that enforces the dynamic (Current Taxonomy Term) AND (Specific Category ID) relationship?

If this combination is not possible via the standard UI, please provide a filter or shortcode parameter that achieves this specific tax_query requirement.

Thank you for your time and assistance!

Hi there,
we came across this issue:
Installing wpml:
– in the template overview as written in your tutorial it works fine BUT
– the cloud template overview does not load correctly with the languages
– the cloud templates wont load correctly in theme panel when you try to give the translated categories the correct translated cloud template.

We made a fix and now it works.
If you guys are interested write an e-mail and I’ll share the code (not sure if you want code in the forum).
Maybe you can then look for a lasting solution.

Here a summary what it does:

Summary: What the Plugin Does
Problem it solves:
When you switch languages in WPML, tagDiv’s Cloud Templates Library and Theme Panel don’t update – they keep showing templates from the wrong language because they use their own cached language setting.
How it fixes it:
1. Client-Side (JavaScript):

Intercepts all HTTP requests (AJAX, Fetch API, XMLHttpRequest) made by tagDiv
Automatically adds the current WPML language parameter (lang=en or lang=de) to every request
Sets language cookies that tagDiv reads (wpml_lang, _icl_current_language)
This ensures tagDiv’s JavaScript always requests templates in the correct language

2. Server-Side (PHP):

Forces WPML to use the language from the URL parameter (?lang=en)
Switches WPML context during AJAX requests so WordPress queries return content in the right language
Filters template metadata to ensure the correct translated templates are loaded

In simple terms:
The plugin acts as a “translator” between WPML and tagDiv, making sure they both agree on which language is currently active. It catches every request tagDiv makes and stamps it with the correct language code before it reaches the server.
Result:
✅ Cloud Templates Library shows correct language templates
✅ Theme Panel dropdowns show correct language templates
✅ Language switching works immediately without page refresh issues

Cheers.

Hi, hope you can check this.

Vulnerability issue.

Cross Site Scripting (XSS)
vulnerability discovered by
João Pedro S Alcântara
(Kinorth) in WordPress Plugin
tagDiv Cloud Library
(versions < 3.9.2)

tagDiv Cloud Library vulnerability issue

tagDiv Cloud Library vulnerability issue

Any update?
Thanks in advance.

On my category pages, this error appears at the top of the browser window:
Warning: Undefined array key “tdb_templates” in /home3/macropho/public_html/blog/wp-content/plugins/td-cloud-library/includes/tdb_functions.php on line 659
The error was resolved after deactivating the WPML plugin. Is the Newspaper incompatible with the plugin? I really need the WPML plugin to make the site multilingual.

WordPress Plugin Vulnerabilities
tagDiv Cloud Library < 4.0 – Authenticated (Contributor+) Stored Cross-Site Scripting
Description
The tagDiv Cloud Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Affects Plugins
Plugin icon
td-cloud-library
Fixed in 4.0

https://wpscan.com/vulnerability/0ecaeb97-4f67-4e79-bea8-9c9a6ab7add3/

When I go to the search page gives me this error

Fatal error: Uncaught TypeError: Cannot access offset of type array on string in /usr/www/users/hurawa/wp-content/plugins/td-composer/legacy/common/wp_booster/td_util.php:1196 Stack trace: #0 /usr/www/users/hurawa/wp-content/plugins/td-composer/legacy/common/wp_booster/td_util.php(340): td_util::get_template_id() #1 /usr/www/users/hurawa/wp-content/plugins/td-composer/legacy/common/wp_booster/td_wp_booster_functions.php(513): td_util::check_header() #2 /usr/www/users/hurawa/wp-includes/class-wp-hook.php(324): td_load_css_fonts() #3 /usr/www/users/hurawa/wp-includes/class-wp-hook.php(348): WP_Hook->apply_filters() #4 /usr/www/users/hurawa/wp-includes/plugin.php(517): WP_Hook->do_action() #5 /usr/www/users/hurawa/wp-includes/script-loader.php(2299): do_action() #6 /usr/www/users/hurawa/wp-includes/class-wp-hook.php(324): wp_enqueue_scripts() #7 /usr/www/users/hurawa/wp-includes/class-wp-hook.php(348): WP_Hook->apply_filters() #8 /usr/www/users/hurawa/wp-includes/plugin.php(517): WP_Hook->do_action() #9 /usr/www/users/hurawa/wp-includes/general-template.php(3192): do_action() #10 /usr/www/users/hurawa/wp-content/plugins/td-composer/legacy/Newspaper/header.php(8): wp_head() #11 /usr/www/users/hurawa/wp-content/plugins/td-composer/td-composer.php(254): require_once(‘/usr/www/users/…’) #12 /usr/www/users/hurawa/wp-includes/class-wp-hook.php(324): {closure}() #13 /usr/www/users/hurawa/wp-includes/class-wp-hook.php(348): WP_Hook->apply_filters() #14 /usr/www/users/hurawa/wp-includes/plugin.php(517): WP_Hook->do_action() #15 /usr/www/users/hurawa/wp-content/themes/Newspaper/header.php(2): do_action() #16 /usr/www/users/hurawa/wp-includes/template.php(810): require_once(‘/usr/www/users/…’) #17 /usr/www/users/hurawa/wp-includes/template.php(745): load_template() #18 /usr/www/users/hurawa/wp-includes/general-template.php(48): locate_template() #19 /usr/www/users/hurawa/wp-content/plugins/td-cloud-library/wp_templates/tdb_view_search.php(8): get_header() #20 /usr/www/users/hurawa/wp-includes/template-loader.php(106): include(‘/usr/www/users/…’) #21 /usr/www/users/hurawa/wp-blog-header.php(19): require_once(‘/usr/www/users/…’) #22 /usr/www/users/hurawa/index.php(17): require(‘/usr/www/users/…’) #23 {main} thrown in /usr/www/users/hurawa/wp-content/plugins/td-composer/legacy/common/wp_booster/td_util.php on line 1196

Hello! When I enter a search term, the live ajax is working but if I press enter it returns a fatal error.
How can I reset this function on the theme?

The site is nordsip.com and here is the error returned by Query Monitor:

Uncaught Error: Illegal offset type
in /home/nordsipc/public_html/wp-content/plugins/td-composer/legacy/common/wp_booster/td_util.php on line 1196

Call stack:

td_util::get_template_id(WP_Post)
wp-content/plugins/td-composer/legacy/common/wp_booster/td_util.php:340
td_util::check_header()
wp-content/plugins/td-composer/legacy/common/wp_booster/td_wp_booster_functions.php:513
td_load_css_fonts(”)
wp-includes/class-wp-hook.php:324
WP_Hook::apply_filters(NULL, array)
wp-includes/class-wp-hook.php:348
WP_Hook::do_action(array)
wp-includes/plugin.php:517
do_action(‘wp_enqueue_scripts’)
wp-includes/script-loader.php:2299
wp_enqueue_scripts(”)
wp-includes/class-wp-hook.php:324
WP_Hook::apply_filters(NULL, array)
wp-includes/class-wp-hook.php:348
WP_Hook::do_action(array)
wp-includes/plugin.php:517
do_action(‘wp_head’)
wp-includes/general-template.php:3192
wp_head()
wp-content/plugins/td-composer/legacy/Newspaper/header.php:8
require_once(‘/home/nordsipc/publi…Newspaper/header.php’)
wp-content/plugins/td-composer/td-composer.php:254
{closure}(”)
wp-includes/class-wp-hook.php:324
WP_Hook::apply_filters(”, array)
wp-includes/class-wp-hook.php:348
WP_Hook::do_action(array)
wp-includes/plugin.php:517
do_action(‘tdc_header’)
wp-content/themes/Newspaper/header.php:2
require_once(‘/home/nordsipc/publi…Newspaper/header.php’)
wp-includes/template.php:810
load_template(‘/home/nordsipc/publi…Newspaper/header.php’, true, array)
wp-includes/template.php:745
locate_template(array, true, true, array)
wp-includes/general-template.php:48
get_header()
wp-content/plugins/td-cloud-library/wp_templates/tdb_view_search.php:8
include(‘/home/nordsipc/publi…/tdb_view_search.php’)
wp-includes/template-loader.php:106
require_once(‘/home/nordsipc/publi…/template-loader.php’)
wp-blog-header.php:19
require(‘/home/nordsipc/public_html/wp-blog-header.php’)
index.php:17

Hello,

I have a valid license yet I have not received notification of an available update from 12.7.1. My concern are the xxs vulnerabilities related to td-cloud-library and td-composer.

Please advise.
Thank you.

Hello, we have issues with page responsivness – loading times on page http://www.modre-novice.si. We host on highest performance LiteSpeed server. We tried to optimize page with suggested cache plugin WP Super Cache – still not good, than we optimized it with liteSpeed cache – dedicated cacheing plugin for litespeed servers and it was a bit better but still too slow for an news portal.

We asked host to check on it and these were theirs findings:

Hello,
I checked the status of the website and ran a fairly simple test to see how long the initial response time is. I noticed that the response time for the website itself is indeed as described by the client — it takes more than two seconds for the main page to load.

I reviewed the server settings to see if there was anything that could still be optimized, but it seems the configuration is fine and nothing major has been overlooked. I then started looking into the application itself, so I began disabling WordPress plugins to identify which ones have the biggest impact on performance.
First, I disabled the top half of the plugins, but there was no noticeable change. Then I re-enabled them and repeated the process for the bottom half, where it turned out that some plugins could be problematic. When I started disabling the plugins one by one, I found that the “tagDiv Cloud Library” plugin, when disabled, reduced the total page render time by half.

I continued and disabled the “tagDiv Composer” plugin as well, which significantly reduced the load time even further — down to around 320 ms.

Usually, these modules for building and designing websites generate code that, unfortunately, isn’t very optimized for loading speed, even though the end product often looks nice. When I look at the website’s source code, the first thing I notice is that the <head> section is quite large and contains a huge amount of data.
The <head> tag stretches all the way to line 353 in the source code, and there’s a lot going on in that part of the code. This affects how quickly the browser can start loading the content from the <body> section. If there’s too much “bloat” in the <head> area, the browser has to process all of that before it can begin rendering any content.

My suggestion would be to review this page builder and consider replacing it with something else that would ultimately produce better performance.

If you decide to move to a VPS server, it will definitely be able to handle more of these “slow” requests compared to shared hosting. In addition, once the server is actually under load, we can recheck some parameters, and if the page still doesn’t load as expected (in this case, around 2.5 seconds is a typical result for an uncached single request), we can then increase certain limits on the server to achieve higher throughput.

________________________

What is the solution here?

My layman’s question is whether the website still works and looks the same when those two plugins are disabled? Namely, the news or posts are generated in the classic way under “Posts” without using these specific plugins. I’m wondering if they can remain disabled and only be turned on when needed — for example, when editing content on individual pages (and not on posts).

As for the tagDiv Cloud Library, it seems that this plugin provides the layouts for the posts themselves, the archive page, category pages, etc. Does the website’s visual structure break if this plugin is disabled?

tagDiv Cloud Library
Failed
An error occurred and we could not finish the process.
Please manually update the plugins.

I have this issue when I try to activate the plugin, I have tried also manually through file access but it still doesn’t activate

Hey Team,

I have a website Eurasian Times — where I’ve integrated the Newspaper theme along with the following plugins:

• tagDiv Cloud Library
• tagDiv Composer
• tagDiv Mobile Theme
• tagDiv Social Counter
• tagDiv Standard Pack

Currently, the AMP pages are being displayed using the tagDiv Mobile Theme settings, as shown below:

However, I’d like to customize or update the AMP page UI. I’ve tried creating a mobile page using tagDiv Composer, but the AMP version still loads the tagDiv Mobile Theme layout.

Does anyone know how I can update or override the AMP page design?
Any guidance would be greatly appreciated.

Thanks!