Search Results for 'tagDiv Cloud Library plugin'

Hi,

Wordfence signaled today tagdiv cloud library plugin is vulnerable.

Details here:

https://www.wordfence.com/threat-intel/vulnerabilities/id/f97414f7-3544-4ecf-908a-a0215e322e68?source=plugin

Hi,
I’m using Newspaper theme with WPML multilanguage plugin.
I defined 8 single templates with tagdiv Cloud Template and use two languages managed with WPML. If I work with original language I haven’t any problems, but if select my secondary language there is something wrong in the Theme Category Setting.

For the first category, my Post Cloud Library Template list is empty, so I can’t associate my template to the category:

For the next category instead the list is right and complete:

Why?

Thank you.
Enzo

Hi Support,

I’m using the tagDiv Cloud Library plugin on my WordPress site and noticed there is a Cross-Site Scripting (XSS) vulnerability in versions before 3.9.2.

Could you confirm if updating to version 3.9.2 fully fixes this issue? Any advice to secure my site would be appreciated.

Thank you,

Hello
I recently noticed a security warning in my hosting panel related to the tagDiv Cloud Library plugin.

Here are the details:

Plugin: tagDiv Cloud Library

Version: 3.9.2

Build Date: 22.10.2025 10:59

Issue Type: Cross-Site Scripting (XSS) Vulnerability

Reference: Patchstack Advisory Link

My hosting provider is flagging this as a potential security issue.
Can you please confirm:

Whether this vulnerability has already been patched in the latest release or upcoming update?
https://prnt.sc/QomoE4P-SpO3

Hi there,
we came across this issue:
Installing wpml:
– in the template overview as written in your tutorial it works fine BUT
– the cloud template overview does not load correctly with the languages
– the cloud templates wont load correctly in theme panel when you try to give the translated categories the correct translated cloud template.

We made a fix and now it works.
If you guys are interested write an e-mail and I’ll share the code (not sure if you want code in the forum).
Maybe you can then look for a lasting solution.

Here a summary what it does:

Summary: What the Plugin Does
Problem it solves:
When you switch languages in WPML, tagDiv’s Cloud Templates Library and Theme Panel don’t update – they keep showing templates from the wrong language because they use their own cached language setting.
How it fixes it:
1. Client-Side (JavaScript):

Intercepts all HTTP requests (AJAX, Fetch API, XMLHttpRequest) made by tagDiv
Automatically adds the current WPML language parameter (lang=en or lang=de) to every request
Sets language cookies that tagDiv reads (wpml_lang, _icl_current_language)
This ensures tagDiv’s JavaScript always requests templates in the correct language

2. Server-Side (PHP):

Forces WPML to use the language from the URL parameter (?lang=en)
Switches WPML context during AJAX requests so WordPress queries return content in the right language
Filters template metadata to ensure the correct translated templates are loaded

In simple terms:
The plugin acts as a “translator” between WPML and tagDiv, making sure they both agree on which language is currently active. It catches every request tagDiv makes and stamps it with the correct language code before it reaches the server.
Result:
✅ Cloud Templates Library shows correct language templates
✅ Theme Panel dropdowns show correct language templates
✅ Language switching works immediately without page refresh issues

Cheers.

Hi, hope you can check this.

Vulnerability issue.

Cross Site Scripting (XSS)
vulnerability discovered by
João Pedro S Alcântara
(Kinorth) in WordPress Plugin
tagDiv Cloud Library
(versions < 3.9.2)

tagDiv Cloud Library vulnerability issue

tagDiv Cloud Library vulnerability issue

Any update?
Thanks in advance.

WordPress Plugin Vulnerabilities
tagDiv Cloud Library < 4.0 – Authenticated (Contributor+) Stored Cross-Site Scripting
Description
The tagDiv Cloud Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Affects Plugins
Plugin icon
td-cloud-library
Fixed in 4.0

https://wpscan.com/vulnerability/0ecaeb97-4f67-4e79-bea8-9c9a6ab7add3/

Hello, we have issues with page responsivness – loading times on page http://www.modre-novice.si. We host on highest performance LiteSpeed server. We tried to optimize page with suggested cache plugin WP Super Cache – still not good, than we optimized it with liteSpeed cache – dedicated cacheing plugin for litespeed servers and it was a bit better but still too slow for an news portal.

We asked host to check on it and these were theirs findings:

Hello,
I checked the status of the website and ran a fairly simple test to see how long the initial response time is. I noticed that the response time for the website itself is indeed as described by the client — it takes more than two seconds for the main page to load.

I reviewed the server settings to see if there was anything that could still be optimized, but it seems the configuration is fine and nothing major has been overlooked. I then started looking into the application itself, so I began disabling WordPress plugins to identify which ones have the biggest impact on performance.
First, I disabled the top half of the plugins, but there was no noticeable change. Then I re-enabled them and repeated the process for the bottom half, where it turned out that some plugins could be problematic. When I started disabling the plugins one by one, I found that the “tagDiv Cloud Library” plugin, when disabled, reduced the total page render time by half.

I continued and disabled the “tagDiv Composer” plugin as well, which significantly reduced the load time even further — down to around 320 ms.

Usually, these modules for building and designing websites generate code that, unfortunately, isn’t very optimized for loading speed, even though the end product often looks nice. When I look at the website’s source code, the first thing I notice is that the <head> section is quite large and contains a huge amount of data.
The <head> tag stretches all the way to line 353 in the source code, and there’s a lot going on in that part of the code. This affects how quickly the browser can start loading the content from the <body> section. If there’s too much “bloat” in the <head> area, the browser has to process all of that before it can begin rendering any content.

My suggestion would be to review this page builder and consider replacing it with something else that would ultimately produce better performance.

If you decide to move to a VPS server, it will definitely be able to handle more of these “slow” requests compared to shared hosting. In addition, once the server is actually under load, we can recheck some parameters, and if the page still doesn’t load as expected (in this case, around 2.5 seconds is a typical result for an uncached single request), we can then increase certain limits on the server to achieve higher throughput.

________________________

What is the solution here?

My layman’s question is whether the website still works and looks the same when those two plugins are disabled? Namely, the news or posts are generated in the classic way under “Posts” without using these specific plugins. I’m wondering if they can remain disabled and only be turned on when needed — for example, when editing content on individual pages (and not on posts).

As for the tagDiv Cloud Library, it seems that this plugin provides the layouts for the posts themselves, the archive page, category pages, etc. Does the website’s visual structure break if this plugin is disabled?

tagDiv Cloud Library
Failed
An error occurred and we could not finish the process.
Please manually update the plugins.

I have this issue when I try to activate the plugin, I have tried also manually through file access but it still doesn’t activate

Hey Team,

I have a website Eurasian Times — where I’ve integrated the Newspaper theme along with the following plugins:

• tagDiv Cloud Library
• tagDiv Composer
• tagDiv Mobile Theme
• tagDiv Social Counter
• tagDiv Standard Pack

Currently, the AMP pages are being displayed using the tagDiv Mobile Theme settings, as shown below:

However, I’d like to customize or update the AMP page UI. I’ve tried creating a mobile page using tagDiv Composer, but the AMP version still loads the tagDiv Mobile Theme layout.

Does anyone know how I can update or override the AMP page design?
Any guidance would be greatly appreciated.

Thanks!