- NewsmagtagDiv Composer Tutorial
- NewsmagHow to use the Visual Composer plugin
- NewsmagHow to update a plugin
- NewsmagWhat’s included in Newsmag theme package
- NewsmagRequirements for Newsmag
- NewsmagInstall via WordPress
- NewsmagInstall via FTP
- NewsmagBlock settings tutorial
- NewsmagtagDiv Social Counter tutorial
- NewsmagHow to update the WPBakery plugin
- NewsmagPage Menu
- NewsmagCustom ad spots
- NewsmagSmart sidebar
- NewsmagVideo playlist
- NewsmagPage templates
- NewsmagHomepage – How to build and set it
Hi,
The first thing I see is that the required composer plugin isn’t active on the website. Please install it from the theme plugins panel -> https://prnt.sc/7P2I8thU8xeb Most of the theme’s functionality and features depend on the composer, so it should be active.
Then you can choose what you want to use, a simpler basic design based on the standard pack plugin, or a more advanced and complex design based on the cloud library -> https://tagdiv.com/why-tagdiv-cloud-library-is-a-better-alternative-to-the-standard-pack/
To provide a bit of context, the theme by itself with none of the theme plugins active is basically useless. The composer plugin provides the base. Then there are 2 directions, the cloud library or the standard pack, these add the extra capabilities.
I also noticed that you are using AMP -> https://prnt.sc/yhj7NKjJtRHv I rarely see AMP used anymore. But if you want to use it, then we recommend using it together with our mobile theme -> https://forum.tagdiv.com/tagdiv-amp-plugin-tutorial/
Let me know.
Thank you!
Hi,
I’m fine, thank you for asking. I hope everything is fine for you as well.
No problem, glad to help with what I can.
Changing that text is possible. In the composer after clicking on that block, please check in the Layout tab and scroll all the way down, the option is here -> https://prnt.sc/ocz0RUPwePx2 You can set the text you want there.
As a tip, sometimes this search function from here can be useful -> https://prnt.sc/6UeShWUdd_Yq After you click on a block in the composer you can use that search to find settings faster. Like in this case, searching for button will reveal where there are settings for buttons within the block, by marking them with a red dot -> https://prnt.sc/XrHTahkCrDgF It’s quite handy.
Let me know if I can help with something else.
Thank you!
Bonjour,
Nous rencontrons actuellement de très importants problèmes de chargement des pages ainsi que de nombreuses erreurs sur notre site utilisant le thème Newspaper.
Notre environnement est le suivant :
Thème : Newspaper 6.8.6
PHP : 8.3.32
WordPress : version compatible avec le thème
Les problèmes constatés sont les suivants :
Temps de chargement des pages extrêmement longs.
Erreurs multiples liées au thème et/ou à TagDiv Composer.
Problèmes de performances qui impactent aussi bien le front-office que l’administration.
Nous avons mis à jour le thème en version 6.8.6, conformément aux prérequis de la configuration du thème, et notre serveur fonctionne sous PHP 8.3.32.
Pouvez-vous nous aider à identifier l’origine de ces dysfonctionnements ? S’il existe des problèmes de compatibilité connus, des réglages recommandés ou des étapes de diagnostic à effectuer, nous sommes preneurs.
N’hésitez pas à nous indiquer les informations complémentaires dont vous avez besoin (journaux d’erreurs, captures d’écran, état du système, etc.), nous vous les transmettrons rapidement.
Merci d’avance pour votre aide.
Cordialement,
Wordfence should mark it as fixed soon. The issue affected the composer from the Newspaper theme, which was fixed -> https://patchstack.com/database/wordpress/plugin/td-composer/vulnerability/wordpress-tagdiv-composer-plugin-5-4-3-reflected-cross-site-scripting-xss-vulnerability
Today a new update was released for Newsmag -> https://tagdiv.com/newsmag/ The composer is now version 5.4.6. Please update the theme and it will be fine.
Go to Newspaper -> Plugins
Both ‘tagDiv Composer’ / ‘tagDiv Cloud library’ plugins are required and may need to be updated and activated (it is a 2 step process; click to update, then click again to activate; perform this on both plugins)
I just updated my site and noticed that I had to perform this after 12.7.7 update
Hope this is your answer.
(random user)
I’m currently redesigning a news website that I manage, and I’ve run into an issue.
No matter what I try, I can’t change the color of the post titles in the news blocks using TagDiv Composer.
For example, I select Block 21, go to the General tab, and set the Title Text Color to white (#ffffff). I save the changes, but the new color is not applied on the frontend.
I’ve already checked whether there’s a CSS class or custom style overriding this setting, but I haven’t been able to find anything that would prevent the color change.
I’m using Newspaper theme version 12.7.7 with the Magazine PRO demo installed.
Could you please help me identify what might be causing this issue?
Thank you in advance for your help!
Hi,
We just released an update for Newspaper today, and very soon there will be one for Newsmag. It contains the fix for the issue. It doesn’t affect the Newsmag theme, but since the plugin is called the same and version is the same for both themes, it will get flagged regardless of using the Newsmag composer. We just need to change the version of the plugin basically. Hopefully we can do this today and release this minor update.
We are very sorry for this situation.
Thank you!
my hosting company blocks the tagdiv composer plugin on my site
Hi – Our host flagged this for us. Can you review and let us know what we need to do fix?
Beyond this we are picking up on heavy search queries that work around the plugin td-composer. The specific file triggered is:
wp-content/plugins/td-composer/legacy/common/wp_booster/td_data_source.php line 1517
The site is spawning quite a few of them, and it’s the main contributor to the high load:
==============================================================================================================
Host: barrettmedia.com
Request: /page/2/?s=cbs+evening+news
Remote: 17.246.23.246
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)
Started: 2026-07-21T21:18:39.878639Z
SQL: SELECT SQL_CALC_FOUND_ROWS wp_posts.ID FROM wp_posts WHERE 1=1 AND wp_posts.ID NOT IN (237966) AND (((wp_posts.post_title LIKE '%cbs%') OR (wp_posts.post_excerpt LIKE '%cbs%') OR (wp_posts.post_content LIKE '%cbs%')) AND ((wp_posts.post_title LIKE '%evening%') OR (wp_posts.post_excerpt LIKE '%evening%') OR (wp_posts.post_content LIKE '%evening%')) AND ((wp_posts.post_title LIKE '%news%') OR (wp_posts.post_excerpt LIKE '%news%') OR (wp_posts.post_content LIKE '%news%'))) AND (wp_posts.post_password = '') AND wp_posts.post_type IN ('post', 'page', 'attachment', 'job_listing', 'tdc-review') AND ((wp_posts.post_status = 'publish')) OR EXISTS ( SELECT 1 FROM wp_term_relationships AS tr INNER JOIN wp_term_taxonomy AS tt ON tr.term_taxonomy_id = tt.term_taxonomy_id INNER JOIN wp_terms AS t ON tt.term_id = t.term_id WHERE tr.object_id = wp_posts.ID AND tt.taxonomy = 'category' AND ( t.name LIKE '%cbs evening news%' OR tt.description LIKE '%cbs evening news%' ) AND wp_posts.post_status = 'publish' ) OR EXISTS ( SELECT 1 FROM wp_term_relationships AS tr INNER JOIN wp_term_taxonomy AS tt ON tr.term_taxonomy_id = tt.term_taxonomy_id INNER JOIN wp_terms AS t ON tt.term_id = t.term_id WHERE tr.object_id = wp_posts.ID AND tt.taxonomy = 'post_tag' AND ( t.name LIKE '%cbs evening news%' OR tt.description LIKE '%cbs evening news%' ) AND wp_posts.post_status = 'publish' ) OR EXISTS ( SELECT 1 FROM wp_term_relationships AS tr INNER JOIN wp_term_taxonomy AS tt ON tr.term_taxonomy_id = tt.term_taxonomy_id INNER JOIN wp_terms AS t ON tt.term_id = t.term_id WHERE tr.object_id = wp_posts.ID AND tt.taxonomy = 'tdc-review-criteria' AND ( t.name LIKE '%cbs evening news%' OR tt.description LIKE '%cbs evening news%' ) AND wp_posts.post_status = 'publish' ) GROUP BY wp_posts.ID ORDER BY (CASE WHEN wp_posts.post_title LIKE '%cbs evening news%' THEN 1 WHEN wp_posts.post_title LIKE '%cbs%' AND wp_posts.post_title LIKE '%evening%' AND wp_posts.post_title LIKE '%news%' THEN 2 WHEN wp_posts.post_title LIKE '%cbs%' OR wp_posts.post_title LIKE '%evening%' OR wp_posts.post_title LIKE '%news%' THEN 3 WHEN wp_posts.post_excerpt LIKE '%cbs evening news%' THEN 4 WHEN wp_posts.post_content LIKE '%cbs evening news%' THEN 5 ELSE 6 END), wp_posts.post_date DESC LIMIT 0, 5
Origin: plugin | td-composer | wp-content/plugins/td-composer/legacy/common/wp_booster/td_data_source.php:1517
Duration: 3.698309 s
Memory: 42.00 MB (peak 42.00 MB)Such queries, taking around 4 seconds to be completed, will slow the entire site, so I’d recommend revisiting the code around that function
The update will be available tomorrow, first thing. The package is almost ready.
@ferhatakbas
Is the website infected with malware? What files are being modified/infected because of the XSS issue exactly? Please install wordfence and scan the website if there are such issues.
This vulnerability from the composer is related specifically to the simplified button element -> https://prnt.sc/gvSvPHoOk3iV While this is a medium level vulnerability, even if the button is used in a page, there is very little risk of a website getting infected with malware because of it. I won’t get into more details about how it can be exploited, but again, the chances are very low. If your website is actually infected with malware, restoring backups won’t fix it, neither will updating the theme. Please use a security plugin like wordfence and scan the website’s files in and outside of the wordpress installation.
Thank you!
From what version did you update? Is this the main website? -> https://tbrnewsmedia.com/ That’s Newspaper 4, from 2014. This changes things. Those aren’t old shortcodes, they are very old shortcodes, they don’t exist in the theme anymore unfortunately.
My suggestion is to consider using a new homepage. If you want to keep it simple, I suggest the default demo -> https://demo.tagdiv.com/newspaper/ This is the non-PRO version. These non-PRO demos rely on the theme panel settings and templates.
You can also import just a homepage, they are available separately -> https://cloud.tagdiv.com/#/load/All It can be done from the cloud library dashboard -> https://prnt.sc/gmxEkzRSHmY1
Or you can choose any of the theme demos, if you maybe want to update the design -> https://demo.tagdiv.com/select_demo/newspaper-prebuilt-websites/?demo-type=all
The PRO demos are fully built with our composer, meaning you can edit and customize the homepage and also the post template, category template, etc. with the composer -> https://tagdiv.com/live-visual-builder/
We can discuss more, let me know if you have any questions.
Thank you!
I saw the recent message stating that a fix for the td-composer vulnerability (v5.4.5) will be released “this week.”
Could you please provide an exact ETA for this update? My website’s files are being constantly modified and infected by attackers every single day because of this exploit. Dealing with this exact same hacking issue and restoring backups daily is becoming a massive problem for us.
We urgently need this security patch to secure our systems. Thank you.
Just bumping to say we got a similar notice from Blogvault. Expediting this as a hotfix would be ideal if possible.
“The tagDiv Composer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 5.4.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link”
Hi,
I can’t quite tell what that image is exactly. Did you install a theme demo? Either way, if it’s not set per category in the theme panel -> https://prnt.sc/bBQzZ9jBxVh8 then it must be set somewhere in the composer.
Could you provide a link to the website so I can check where the image is set? Or if you want you can send an email at contact@tagdiv.com and provide the link, and admin access, this way I can check and remove it as well.
Thank you!
Sorry for the delay.
That green line is an icon. It can be removed. It’s a bit hard to select it, so I suggest moving that block somewhere else temporarily, for example -> https://prnt.sc/ezxxt0z5uT6l Then you can select the icon and delete it. Then move the block back where it was.
The articles are written in wordpress. The theme provides a subtitle field where you can enter a subtitle if you want -> https://prnt.sc/vJp4xSPklKmj Then to display the subtitle in the post page, please edit the post template with the composer and add the subtitle element in the location you want -> https://prnt.sc/8e2DtXHJoAHY
Concerning the photo credits, would you like to add them as the caption perhaps? A caption can be added when you add the images in the post content -> https://prnt.sc/5-FglOiuSdfV
Let me know if you have more questions.
Thank you!
Hi,
Unfortunately our theme doesn’t have a dedicated FAQ element.
It could be done manually but if you plan to use multiple FAQ elements in multiple pages then I suggest using a plugin, like this one for example -> https://wordpress.org/plugins/ultimate-faqs/ It provides shortcodes so you can easily display them in any page. In the composer shortcodes can be added in the dedicated shortcode element -> https://prnt.sc/4n6EU07KeTV8 or in column text, text with title, or raw HTML elements.
I’m very sorry for the inconvenience. Please try that plugin and it should work fine.
Thank you!
Hi,
Some demos have a few demo ads in the pages and in the templates, these are set directly with the composer, not in the theme panel. However, the ads can easily be removed, it’s just a matter of editing the homepage and the templates with the composer, and removing the ad boxes, for example -> https://prnt.sc/CaMZmcdhgXpT
If the ads appear to be loading but then they disappear, maybe you are using an ad blocker in the browser. Do the ads appear if you check in incognito mode or with a different browser?
If you want I can take a look and remove the ads, you can send us an email at contact@tagdiv.com and provide a link to the website and admin login (user and pass).
Thank you!
Hi,
It’s a false positive most likely. I’ve downloaded the theme package from themeforest and scanned the composer with virus total, it’s in order -> https://prnt.sc/4iIOjqaTh7AZ I also scanned it locally with Bitdefender, it’s also in order. So it’s safe to say that the composer as provided in the theme package poses no threat.
Maybe the website itself is infected with malware. To know for sure you could test your website with this online scanner from Sucuri -> https://sitecheck.sucuri.net/ Or install the Wordfence plugin and scan the website files with it.
Thank you!
Hi,
That issue refers to the composer from the Newspaper theme, it was related to the button element which Newsmag doesn’t have. It was fixed partly in the previous Newspaper update but it needs an adjustment, we will release a new update this week most likely.
Thank you!
I fixed it by adding this in the file: wp-content/plugins/td-composer/legacy/common/wp_booster/wp-admin/external/wpalchemy/MetaBox.php (line 576).
Fix:
add_meta_box($this->id . ‘_metabox’, $this->title, array($this, ‘_setup’), $type, $this->context, $this->priority, array(
‘__block_editor_compatible_meta_box’ => true,
‘__back_compat_meta_box’ => false,
));
I am writing my own version of the theme to wean off third parties.
Ok, i figured out that the theme with version 5.4.3.6 uses the tagdiv composer plugin version 5.4.5, so that question is answered….
I’ve installed Newsmag. The version i have on my site is : 5.4.3.6. If i try to update, it won’t.
How come the problem is stated as version 5.4.5?
This is a warning that comes up in Worfence : https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/td-composer/tagdiv-composer-545-reflected-cross-site-scripting
As the problem is present since July 6, 2026, with a last update with no change on July 16, 2026, i am wondering when you’re going to address this problem.
Hi,
Wordfence signaled today about this: tagDiv Composer Version: 5.4.5 has a security vulnerability.
Details here:
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/td-composer/tagdiv-composer-545-reflected-cross-site-scripting
Here is the alert:
https://www.pasteboard.co/9HSozTwjG8pN.png
Please advice,
Thank you,
