Search Results for 'update'

Why every time it needs an update license get unregistered and everything is reset?

This is like the 4th time that I haven’t visited the site with the theme in a long while. When I login, I have to activate the license again and every is back to default. All my color, menu, header, blocks settings are reset to default, banner is gone, background, etc. Very annoying!

Hey! After updating to 12.6.5 my site got this black bar on top of it called: “td-scroll-up td-hide-scroll-up-on-mob”. How do I get rid of it? Thanks! https://testgurun.com

This seems to be a massive issue for this theme. I’ve looked over a number of other posts on this specific topic. The only support that is given is mostly unhelpful and sends people on a wild goose chase. Though the real problem lies with the theme itself.

My question is a simple one, If and when will the theme be updated to meet all the Core Web Vitals criteria?

At this stage I am looking at moving my website over to a different theme, even after using Newspaper for over 4 years. This would be a huge job though it currently seems to be my only option to save my website from Google search death.

My simple post page with no ads currently fails LCP, FCP & TTFB with a mobile score of 38/100

No good at all. A note to anyone else experiencing issues with there Core Web Vitals, WP Rocket (Paid Plugin) will help bring your score up, but will not help you pass Core Web Vitals.

I really like everything about this theme (apart from current issues with CWV) and don’t want to lose it but this could be the end.

Please team give us some real help and update the theme ASAP.

Craig.

Hello,
I have created two new categories -> updated them using cloud library template -> but now they are showing some corrupt data.
Whereas other two categories which were prebuild with the theme are displaying correctly.
I am not able to identify the issue.
Please help
Website: kinzine.com

Hello there,

Our website design has been completely ruined all of a sudden and we can’t explain why. As we haven’t done anything, nor have updated the website in a while, this must be an error from your side.

Please can you help us?

Website is https://pillow-magazine.com

Hey team, TopTo Buttons not working correctly in the latest update. Sometimes it doesn’t appear even if we turn it on. We also tried the New circular button. When we added custom CSS 90px for the button to appear above the footer, it turned blue instead of a transparent circular button. can you please check?

Hello Team,
I have created 4 categories menu section, in that 2 categories are showing this error “There has been a critical error on this website.” I have followed all solutions provided by kinsta.com and online communities. Even i have updated the limit in wp-config.php file.
But the issue is still not resolved.
Please help.

Greetings.
Probing one of our websites, running Newspaper 12.6.5 with WordPress 6.4.3, we have found that there is a security vulnerability related to requests to wp-admin/admin-ajax.php with a td_ajax_loop action in which the property moduleId is altered with malicious content.

This vulnerability has seemingly been reported previously as CVE-2022-2627, but the report mentions that it has been fixed in version 12 of the theme which is not currently true.

Here’s an example on your own demo site:

The request:

curl -i -s -k -X $'POST' -H $'Host: demo.tagdiv.com' -H $'User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/119.0' -H $'Content-Length: 119' -H $'Content-Type: application/x-www-form-urlencoded' --data-binary $'action=td_ajax_loop&loopState[moduleId]=--><form><math><img+src=1><mtext></form><!--&loopState[server_reply_html_data]=' $'https://demo.tagdiv.com/newspaper_pro/wp-admin/admin-ajax.php?td_theme_name=Newspaper'

The (truncated) response:

HTTP/2 200
...
content-type: text/html; charset=UTF-8
...

...

Notice how the parameters sent via ajax are returned to the client unescaped, in particular the form with an img tag inside. And because HTML tags are not being properly escaped, combined with the fact that the Content-Type of the response is text/html, this results in the malformed request being reflected towards the client and rendered as HTML, which can be abused by a malicious actor.

Your error message handling attempts to safeguard this by adding comment indicators around the content, but that can be trivially manipulated as per the example above.

A possible solution:

In your td-composer plugin, the function error of the class td_util is responsible for dealing with this content. The following line:

echo '<strong class="td-wp-booster-title">wp_booster error:</strong><br>' . $message;

Can be changed to the following alternative, sidestepping the issue cleanly:

echo '<strong class="td-wp-booster-title">wp_booster error:</strong><br>' . esc_html($message);

Hope to see this resolved in a future update.
Best regards.

Hi,

After last newspaper update, we have lost the pagination yellow background colour (as it is in the L’histoire prebuilt website. It is now transparent.
https://ibb.co/bFZvGjn Our website
https://ibb.co/V2dFhJ3 How it was
We have tried to change settings in the header / template / theme panel / homepage and menu sections without succes 🙁
How can we get it back ?
Thank you very much in advance,