Dear suport team, I get the system msg from server, for high CPU usage from theme & tagdiv
[msg 1]
Osama Hilal Zafar August 06, 2024 10:53
Hi Km,
Most of the call seems to be at save_css json call
Which we believe may have caused the issue. There has been a reported vulnerability of the same call https://wpscan.com/vulnerability/e6d8216d-ace4-48ba-afca-74da0dc5abb5/
In case if the same path is no longer being utilized, it can be blocked via htaccesss an example would be
RewriteEngine On
RewriteCond %{REQUEST_URI} ^/wp-json/tdw/save_css
RewriteRule ^(.*)$ – [F,L]
If you have any doubts on this, please do reach out.
[msg 2]
Please note that the path mentioned in the previous thread relates to your plugin for Newspaper and Tagdiv plugin/theme. So if we block that URL, it will cause the sources on your app to malfunction. Therefore we recommend that you first contact the Newspaper theme team to get this sorted out. If they share with you that we can block this URL, then sure we will go ahead and proceed on this action.
Or if you want us to block it directly then you can reply back simply.
Hi Man Kam, those seems to be some attacks on the website and those are creating requests on your website.
Such attacks can take from a few days to a few months. Besides fixing the vulnerability issue in the theme more then a year ago, there isn’t much else we can do. Attackers can still attack websites if they want to. Any theme or plugin can have vulnerabilities at some point – https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-themes/ and attackers will try to take advantage of it. Besides keeping the theme and plugins updated, a security/firewall plugin should be active on the website, or on the hosting side. This won’t stop the attack, but it will prevent the attack from being successful.
What you can do is to use Wordfence and CDN to block the attacks on “/wp-json/tdw/save_css”. If you are blocking the IPs that make that request on your website, then eventually the attack should end. But there’s no way to say how long it will take until the attack will stop. Sometimes it takes a few days, but it could take months until the attackers move on.
Thank you!
Thank you for your kindly reply !
It is helpful !
