- NewspaperHow to Install Newspaper via FTP
- NewspaperNewspaper theme documentation
- NewspaperHow to Update the Newspaper Theme
Hello,
Please let me know what version of the theme you have on the websites.
Please update the theme to the latest version 12.6.5.
This malware infects not only theme files but also WordPress files or other plugin files. This malware was not detected only in our theme but also in many other themes and plugins https://www.bleepingcomputer.com/news/security/massive-balada-injector-campaign-attacking-wordpress-sites-since-2017 / -> https://cybernews.com/security/wordpress-malware-epidemic-balada-injector/ -> https://www.geoedge.com/balda-injectors-2-0-evading-detection-gaining-persistence /
You could consider reinstalling the WordPress version, reinstalling the theme, and checking for this plugin wp-zexit.php. It might be wise to inspect via FTP if it doesn’t appear in the WordPress -> Plugins. Additionally, using Wordfence to scan the website and remove unknown users would be prudent.
Change admin passwords and delete admin accounts you are not familiar with;
– Delete any weird/unknown plugins;
– Delete the weird/unknown themes;
– Clean unfamiliar Theme Panel injected code (example – https://i.imgur.com/4q70kCv.png);
– Clean WordPress files (example – https://i.imgur.com/stJCqiK.png)
Please block /wp-json/tdw/save_css
If an attacker wants to target this URL /wp-json/tdw/save_css they can do so. Even if the website uses a different theme, the attacker can still try that URL. We could add an option to be able to enable/disable the Live CSS, it will be considered. But for now in order to remove it this can only be done with a modification to the composer plugin. I think that all that removing it requires is to comment this line of code – https://prnt.sc/RtwvL5Nc4ikR -> https://prnt.sc/ymZmhdUfp57U But as I mentioned, the attacker can still try to access the URL.
Thank you!
i,
If you want to update the theme, you should download the latest version of it from Theme Forest account and download it.
I recommend that you update the theme manually https://forum.tagdiv.com/how-to-update-the-theme-2/ via FTP/cPanel/File Manager, also if possible disable extra plugins during the theme update to avoid any problems that may arise and make sure that you have activated the tagDiv Standard pack plugin to keep the website’s look. You can try to update the theme on a staging website.
After you update the theme, you need to update the theme plugins too.
In the worst cases, the settings in the theme panel may be lost (there have been isolated cases), in these cases, after the theme plugins that were previously used are activated, you will have to use a backup for the theme panel -> https://forum.tagdiv.com/import-export-theme-settings/
If you want, you can contact our custom work team here, and they can help you update the theme safely: https://tagdiv.com/premium-customization-services/
Thank you!
Hi,
If you want to update the theme, you should download the latest version of it from Theme Forest account and download it.
I recommend that you update the theme manually https://forum.tagdiv.com/how-to-update-the-theme-2/ via FTP/cPanel/File Manager, also if possible disable extra plugins during the theme update to avoid any problems that may arise and make sure that you have activated the tagDiv Standard pack plugin to keep the website’s look. You can try to update the theme on a staging website.
After you update the theme, you need to update the theme plugins too.
In the worst cases, the settings in the theme panel may be lost (there have been isolated cases), in these cases, after the theme plugins that were previously used are activated, you will have to use a backup for the theme panel -> https://forum.tagdiv.com/import-export-theme-settings/
If you want, you can contact our custom work team here, and they can help you update the theme safely: https://tagdiv.com/premium-customization-services/
Thank you!
Hello.
At the moment, the Newspaper theme version 9.1 is installed and used on my site. WordPress has been updated to version 6.4.4. Php version 7.4.33 is used on the hosting.
There are more and more problems with the old version, and in order not to deal with them, it would be nice to update the theme version. There is an opportunity to upgrade the php version on the hosting up to 8.3. WordPress will also be updated before updating the theme.
But I have a number of questions, as some points are unclear.
1) I bought the Newspaper version 9.1 theme 5-6 years ago or more. There is an activation key and it is applied to the theme on the site. But on the tabs of the theme settings, I do not see where it would be possible to update between versions or sub-versions from the administrative part of the theme. As shown in the tutorial on updating the theme. That is, I will most likely have to update the new version via Ftp. Tutorial I read how to do it.
2) To get the new version, will I have to pay for it in full, as a new separate product? That is, not as an update for an already purchased product at any discount or reduced cost, for example.
3) Will the activation key be new or will the old one remain, which is currently activated by the current version of the theme?
4) And I want to understand whether the update will solve the problems that currently exist with the theme and its plugins.
Currently, there is a vulnerability issue for new malware in older versions. Malware was encountered and something was partially defeated by making edits to the theme code, something was limited by banning the REST API for the site, since installing a clean WordPress and a clean theme did not bring results.
And periodically, the tagDiv Composer plugin is deactivated by itself. It occurs at different times of the day and with different frequency by day. I have not been able to detect dependence on anything.
Therefore, I would like to understand that updating to the latest version of the theme has fixes for these problems. At least a security solution against the current malware attack and infection mechanisms. And it will be very cool if the update also solves the problem of self-deactivation of the plugin. Otherwise, it greatly spoils the appearance of the site when the Composer plugin is disabled.
I hope for understanding and help in answering my questions.
As soon as everything becomes more or less clear, I will send the answers to my management so that they pay for the new version and we will receive the new version of the topic as soon as possible.
Hello @infocj!
I recommend you to update the theme via FTP: https://forum.tagdiv.com/how-to-update-the-theme-2/
Thank you!
Hi,
Did you have checked the console? I would like to take a look, can you please contact us via email at contact@tagdiv.com and provide the wp-admin and FTP/cPanel access?
Thank you!
Hello,
Upon a quick analysis, I noticed that you’re using an older version of the theme.
Please update the theme to the latest version 12.6.5.
This malware infects not only theme files but also WordPress files or other plugin files. This malware was not detected only in our theme but also in many other themes and plugins https://www.bleepingcomputer.com/news/security/massive-balada-injector-campaign-attacking-wordpress-sites-since-2017 / -> https://cybernews.com/security/wordpress-malware-epidemic-balada-injector/ -> https://www.geoedge.com/balda-injectors-2-0-evading-detection-gaining-persistence /
You could consider reinstalling the WordPress version, reinstalling the theme, and checking for this plugin wp-zexit.php. It might be wise to inspect via FTP if it doesn’t appear in the WordPress -> Plugins. Additionally, using Wordfence to scan the website and remove unknown users would be prudent.
Change admin passwords and delete admin accounts you are not familiar with;
– Delete any weird/unknown plugins;
– Delete the weird/unknown themes;
– Clean unfamiliar Theme Panel injected code (example – https://i.imgur.com/4q70kCv.png);
– Clean WordPress files (example – https://i.imgur.com/stJCqiK.png)
If you’re not sure how to do it, our custom work team can help you with both theme updates and malware file cleanup https://tagdiv.com/submit-a-request/
Thank you!
Hi,
Did you have checked the console? I would like to take a look, can you please contact us via email at contact@tagdiv.com and provide the wp-admin and FTP/cPanel access?
Thank you!
Hello,
Please do a test by renaming the theme using cpanel/ftp and check if the issue persists also, you can try to use a default theme. Maybe you have malware, and you need to reinstall the theme and wordpress.
Thank you!
Hi,
Please update the theme to the latest version 12.6.5.
This malware infects not only theme files but also WordPress files or other plugin files. This malware was not detected only in our theme but also in many other themes and plugins https://www.bleepingcomputer.com/news/security/massive-balada-injector-campaign-attacking-wordpress-sites-since-2017 / -> https://cybernews.com/security/wordpress-malware-epidemic-balada-injector/ -> https://www.geoedge.com/balda-injectors-2-0-evading-detection-gaining-persistence /
You could consider reinstalling the WordPress version, reinstalling the theme, and checking for this plugin wp-zexit.php. It might be wise to inspect via FTP if it doesn’t appear in the WordPress -> Plugins. Additionally, using Wordfence to scan the website and remove unknown users would be prudent.
Change admin passwords and delete admin accounts you are not familiar with;
– Delete any weird/unknown plugins;
– Delete the weird/unknown themes;
– Clean unfamiliar Theme Panel injected code (example – https://i.imgur.com/4q70kCv.png);
– Clean WordPress files (example – https://i.imgur.com/stJCqiK.png)
If you’re not sure how to do it, our custom work team can help you with both theme updates and malware file cleanup https://tagdiv.com/submit-a-request/
Thank you!
One of my domains got suspended, it was the one using Newspaper theme. It has been restored after I removed the theme and plugins. I removed ALL files to start fresh. Some facts about me:
I update things in under 6 hours. if an update comes while I am sleeping hence 6 hours. No more than 24 hours.
I do not use any plugins that has no updates in 6 months or more. I use 2fa with my User account, Wordfence is used. My password is 25 mixed characters (lower and upper case, letters, numbers and symbols).
In everything else in my computer/digital life, I use a Yubikey and get notifications when there is a login.
Here is the original message I got from my hosting provider, for privacy’s sake I censored the domains:
Hello,
We have noticed trouble in the account with big CPU over usage in the account with monthly average value:
45.80% of 5.00% CPU Limit
and peaks over 65% recently seen in CPU Statistics menu:
https://(myloginidformydomainhosting.com)/statistics/load-stats/
In general, the more traffic and hits a PHP-based website gets the more CPU it consumes to process the scripts.
Additionally, high CPU usage is generated when a PHP-based website generates a high number of queries to its database:
https://(myloginidformydomainhosting.com)/mysql/stats/
https://(myloginidformydomainhosting.com)/statistics/web-stats/
https://(myloginidformydomainhosting.com)/statistics/traffic-stats/
Cross-reference of these factors and statistics will indicate to you which website generates the most CPU in the account.
In your case, this appears to be a combination of many websites running in the account starting with WordPress website at:
(mydomain.com)
which appears to be compromised by a hacker and running malicious scripts similar with its TagDiv plugins and Newspaper theme described in this article:
https://blog.sucuri.net/2023/10/balada-injector-targets-unpatched-tagdiv-plugin-newspaper-theme-wordpress-admins.html
and with huge amount of hits at:
(mydomain.com)/wp-json/tdw/save_css/
Due to these reasons, we have been forced to suspend the domain name, so it cannot be accessed online. Although this is so, you can access the domain name folder via File Manager or FTP to remove the trouble content.
The best solution in such a case is to download files to your computer for a comparison copy thus you can configure later needed plugins and templates as well as retrieve single static files like images.
Remove all files from the host(domain or subdomain) folder thus you can be sure that all malicious files are removed.
After that reinstall your website completely with a new fresh version of the scripts(core application, plugins, themes, etc.) latest versions. Use database configuration from wp-config.php file downloaded before so you can connect the reinstalled website to previous database for your website previous information.
Here is also a detailed article on a hacked website:
https://(myloginidformydomainhosting.com)/help/view-article/?id=550
Restore of the website files does not help in such cases as it reverts the same outdated scrips of your website which the hacker has compromised before so the trouble is repeated again and again.
Please check the content of your entire hosting account for any third-party scripts which are not a part of your websites uploaded by the hacker and remove such ones.
You have to change all passwords in your account too – all FTP accounts passwords and all scripts admin passwords.
After website is reinstalled you can try general protection of the WordPress script with a plugin such as one of these:
https://wordpress.org/plugins/better-wp-security/
https://wordpress.org/plugins/wordfence/
To optimize a website further:
– Try to reduce PHP/MySQL database requests with additional caching plugins like:
– WP Fastest Cache – https://wordpress.org/plugins/wp-fastest-cache/
or
– W3 Total Cache – https://wordpress.org/plugins/w3-total-cache/
– check details of the queries running – Query Monitor – https://wordpress.org/plugins/query-monitor/
and try to reduce queries or check with their developers for optimization advice.
– Try to reduce the number of articles that appear on your front page and reorganize them into sub-pages. This way you would lower the number of queries processed to the database on each visit of the website and will improve the site performance.
-check some advice to restrict bad bots crawling your website as they are a waste of website resources in general. Check online advice articles similar to:
– Limit hits from Google bots from their system:
https://search.google.com/search-console/about
– check official WordPress documentation: https://wordpress.org/support/article/optimization/
Monitor the statistics mentioned above for at least a couple of days which should be enough to see if the changes made have enough effect or if you need to take further measures.
We will expect a solution of this trouble from you in 7 days and we may be forced to suspend the account after that if no updates are provided from you in this ticket.
Looking forward to hearing from you.
Best Regards,
(insert technician’s name here)
Hello,
Please update the theme to the latest version, 12.6.5. It seems that you have an older version.
I recommend that you update the theme manually https://forum.tagdiv.com/how-to-update-the-theme-2/ via FTP/cPanel/File Manager, also if possible disable extra plugins during the theme update to avoid any problems that may arise and make sure that you have activated the tagDiv Standard pack plugin to keep the website’s look. You can try to update the theme on a staging website.
After you update the theme, you need to update the theme plugins too.
In the worst cases, the settings in the theme panel may be lost (there have been isolated cases), in these cases, after the theme plugins that were previously used are activated, you will have to use a backup for the theme panel -> https://forum.tagdiv.com/import-export-theme-settings/
Thank you!
Hello,
I recommend updating the theme to the latest version, 12.6.5 to be updated and check after if there error persists.
If you want to update the theme, you should download the latest version of it from Theme Forest account and download it.
I recommend that you update the theme manually https://forum.tagdiv.com/how-to-update-the-theme-2/ via FTP/cPanel/File Manager, also if possible disable extra plugins during the theme update to avoid any problems that may arise and make sure that you have activated the tagDiv Standard pack plugin to keep the website’s look. You can try to update the theme on a staging website.
After you update the theme, you need to update the theme plugins too.
In the worst cases, the settings in the theme panel may be lost (there have been isolated cases), in these cases, after the theme plugins that were previously used are activated, you will have to use a backup for the theme panel -> https://forum.tagdiv.com/import-export-theme-settings/
Thank you!
Hi,
Is this problem persisting when only bakery are composer are enabled?
This is interesting, do you have the last theme version? If you do not have it, then I will recommend to make a full backup, update the theme, the theme plugins, the WordPress and bakery with the one provided in the last package from the themeforest.
In case that the problems is still persisting, please contact us via email at contact@tagdiv.com and provide temporary wp-admin and FTP access. Also, include this topic to can identify you faster.
Thank you!
Hi,
I would like to take a look, can you please contact us via email at contact@tagdiv.com and provide the wp-admin and FTP/cPanel access?
Thank you!
Hi,
This malware infects not only theme files but also WordPress files or other plugin files. This malware was not detected only in our theme but also in many other themes and plugins https://www.bleepingcomputer.com/news/security/massive-balada-injector-campaign-attacking-wordpress-sites-since-2017 / -> https://cybernews.com/security/wordpress-malware-epidemic-balada-injector/ -> https://www.geoedge.com/balda-injectors-2-0-evading-detection-gaining-persistence /
You could consider reinstalling the WordPress version, reinstalling the theme, and checking for this plugin wp-zexit.php. It might be wise to inspect via FTP if it doesn’t appear in the WordPress -> Plugins. Additionally, using Wordfence to scan the website and remove unknown users would be prudent.
Thank you!
I would wait for 6.5.1 for edge bug fixes; and to allow all plugin folk to ‘catch up’ .. e.g., Yoast and ACF and others are pushing updates today. On one of our sites, we were unable to ‘schedule’ posts, and had to roll back from 6.5 to 6.4x (done via FTP).
Hello,
@boutiquepcland Please make sure you have the latest version of the theme, and that you have cleaned the files of malware.
You could consider reinstalling the WordPress version, reinstalling the theme, and checking for this plugin wp-zexit.php. It might be wise to inspect via FTP if it doesn’t appear in the WordPress -> Plugins. Additionally, using Wordfence to scan the website and remove unknown users would be prudent.
@sparky263 Have you investigated and cleaned all the files to ensure there is no strange injected code?
Could you provide more details on what specific vulnerability you’re referring to?
Thank you!
Hi,
You can download the latest package from your account from Themeforest -> https://forum.tagdiv.com/install-via-ftp/ -> and you can download the license too https://tagdiv.com/how-to-activate-the-newspaper-theme/
You can use a license key for one single product(website)
– https://themeforest.net/licenses/standard
– https://themeforest.net/licenses/terms/regular
Thank you!
Hello,
I recommend updating the theme to the latest version, 12.6.5 to be updated and to don’t have malware.
If you want to update the theme, you should download the latest version of it from Theme Forest account and download it.
I recommend that you update the theme manually https://forum.tagdiv.com/how-to-update-the-theme-2/ via FTP/cPanel/File Manager, also if possible disable extra plugins during the theme update to avoid any problems that may arise and make sure that you have activated the tagDiv Standard pack plugin to keep the website’s look. You can try to update the theme on a staging website.
After you update the theme, you need to update the theme plugins too.
In the worst cases, the settings in the theme panel may be lost (there have been isolated cases), in these cases, after the theme plugins that were previously used are activated, you will have to use a backup for the theme panel -> https://forum.tagdiv.com/import-export-theme-settings/
Thank you!
Hi,
So while indexing a page through the rank math plugin, you are receiving a 500 error? Does this happen only when our theme is active? We are not aware of an issue in the current theme version that could cause such an issue. Without us knowing if there is such an issue caused by the theme and fix in in the next update, we will need to know all the details, how to recreate it, etc. I also suggest checking the error log on the server to see if there is more information about the issue.
If you want us to take a look, I suggest to send us an email at contact@tagdiv.com and provide admin login for the website, also cPanel or FTP, and please mention how or where we can see the issue happening, so we can investigate the problem.
Thank you!
Hi,
If you want to update the theme, you should download the latest version of it from Theme Forest account and download it.
I recommend that you update the theme manually https://forum.tagdiv.com/how-to-update-the-theme-2/ via FTP/cPanel/File Manager, also if possible disable extra plugins during the theme update to avoid any problems that may arise and make sure that you have activated the tagDiv Standard pack plugin to keep the website’s look. You can try to update the theme on a staging website.
After you update the theme, you need to update the theme plugins too.
In the worst cases, the settings in the theme panel may be lost (there have been isolated cases), in these cases, after the theme plugins that were previously used are activated, you will have to use a backup for the theme panel -> https://forum.tagdiv.com/import-export-theme-settings/
If you want, you can contact our custom work team here, and they can help you update the theme safely: https://tagdiv.com/premium-customization-services/
Thank you!
Hello,
This error is from wordpress, not the theme. You can try this solution https://wordpress.org/support/topic/ftp_nlist-warnings/#post-12155716 https://wordpress.org/support/topic/wordpress-5-9-there-is-a-critical-error-on-your-site/
Thank you!
Hi,
If you want to update the theme, you should download the latest version of it from Theme Forest account and download it.
I recommend that you update the theme manually https://forum.tagdiv.com/how-to-update-the-theme-2/ via FTP/cPanel/File Manager, also if possible disable extra plugins during the theme update to avoid any problems that may arise and make sure that you have activated the tagDiv Standard pack plugin to keep the website’s look. You can try to update the theme on a staging website.
After you update the theme, you need to update the theme plugins too.
In the worst cases, the settings in the theme panel may be lost (there have been isolated cases), in these cases, after the theme plugins that were previously used are activated, you will have to use a backup for the theme panel -> https://forum.tagdiv.com/import-export-theme-settings/
If you want, you can contact our custom work team here, and they can help you update the theme safely: https://tagdiv.com/premium-customization-services/
Thank you!
Fatal error: Uncaught Error: ftp_fget(): Argument #1 ($ftp) must be of type resource, null given
in /home/mhd-01/www.sinapsimagazine.it/htdocs/wp-admin/includes/class-wp-filesystem-ftpext.php on line 146
mi potete dire come risolvere?
