I did not know when I bought the Newspaper theme that the 4.6 version of the Rev slider was included. I have a good reason to suspect it to be infected by malware. I bought the 5.0 version also but I find it irresponsible to have an old version of this plugin included.
The version included is a fully tested bundled version which is not infected by malware. The version included is way way past the old version which theme punch irresponsibly allowed it to have an attack vector. The version included free with theme download on theme forest right now does not have the old old vulnerability.
Its irresponsible to scare people without checking the changelog and version included ?
The theme also includes a very old version of the Visual Composer. I have already bought a new version of the Visual Composer and some of it´s add-ons. To use it I need to know how to disable the VC in the theme so I can use the license included with the new Visual Composer plugin.
It is crazy to use old versions of plugins which are included in themes. In the past year I have had 3 malware attacks. I am not saying the Rev-slider or the Visual Composer is the root of the problem – but they have been injected at some point and rule #1 in WordPress is to keep all plugins up to date to keep malware out. Having a theme which does not allow me to update the plugins when needed is possibly irresponsible of me. You should give webmasters the option to at least update them.
Hello,
Unfortunately we cannot update the theme the same time visual composer updates the plugin, but we add a new version of the plugin every time we update and there is a new release out. At the moment the latest version of the theme uses Visual composer version 4.9.2 which is the latest version of the plugin. I do not think we can be more up to date on that one 🙂
Please update your theme to the latest version and make sure you update visual composer as well (just use the one that comes with the theme https://forum.tagdiv.com/how-to-update-visual-composer-plugin/)
Thank you!
Rule #1 is NOT to update all plugins as many times they have bugs, are broken and cause issues. It’s only wise to update to TESTED versions of plugins, and check the support pages for any plugin for issues PRIOR to install. Often the latest versions of VC, SliderRevolution, Yoast, etc., have introduced major major problems with new versions (Yoast often rushes out 5 bug fix releases the first week to fix “problems” which have done things like break sitemaps, demolish meta data, and break other plugins!).
So, good to perhaps plan a little better for how you approach “updates” as the “latest” is not always the “best” — it’s better to be wary, and savvy of NEW updates, and not fully tested/mature versions proven to actually work with WP, themes, other plugins, and best practices.
You can update plugins which are bundled for free with theme each time the theme is updated. Also note over past 2.5 years, TagDiv has been on top of releases patches/updates for every security issues raised.
You might want to look at things like the Securi WordPress blog and other resources which stay on top of all the vulnerabilities in WP and related tech.
Good to be wary, but it’s super safe around these parts! I’m an #infosec expert, so totally part of my daily routine around here. 🙂
(Note: I am not trying to insult or belittle your opinion on this in any way; but as a 12 year WordPress user, and 2.5 year TagDiv user, I can tell you that you don’t need to “worry” about the versions of stuff included with TagDiv themes!)
Actually the latest version of the VC is 4.10.
Any idea why the Post settings panel is disabled? I have all the options there, but none of them work. Is it a question of role-settings?
Not only the post settings are disabled. I can´t change anything in the Newspaper theme panel. Is this a license issue?
Hello,
Actually yesterday when I wrote the reply the latest was 4.9.2. 4.10 was only released today : http://screencast.com/t/8FrvyKuVTtt
We will update our version of visual composer on the next theme update.
If your settings do not apply, it is not a license issue. You will need to check your system status parametres and increase them according to this guide: https://forum.tagdiv.com/system-status-parameters-guide/
You can also try to disable all plugins except visual composer and clear cache to rule out a plugin conflict.
Let us know how it goes.
Thank you!
Hi,
I contacted my host since I would only change the wp-config file. After the modifications according to your System Status Parameters Guide, it simply worked!
Many thanks!
Now I can go to work 😉
Also for info on “Security Hardening” your site, see:
http://premium.wpmudev.org/blog/keeping-wordpress-secure-the-ultimate-guide/
