Hello tagDiv Support Team,
I hope you are doing well.
I am using the **Newspaper theme** with the **latest versions** of WordPress, the theme, and the **tagDiv Cloud Library** plugin. However, my WordPress dashboard is still showing a **security/vulnerability warning** for the tagDiv Cloud Library.
In my case, the plugin is required because my **mobile header and footer are created using Cloud Library templates**, so I cannot deactivate it.
Could you please confirm:
1. Whether this vulnerability warning is a **false positive or low-risk issue**
2. If a fix or update is planned to address this warning
3. If there are any **recommended security precautions** we should take in the meantime
For reference, I am also using **Wordfence Security with Firewall and 2FA enabled**.
Thank you for your support. I look forward to your guidance.
Best regards,
Janan
Hi Janan,
This was fixed and is present only in versions smaller than 3.9.2, which is the current plugin version in Newspaper 12.7.3 – https://i.imgur.com/0flN6ED.png
https://vdp.patchstack.com/database/wordpress/plugin/td-cloud-library/vulnerability/wordpress-tagdiv-cloud-library-plugin-3-9-cross-site-scripting-xss-vulnerability.
We are also working on a new theme update that we hope will be released this month.
You say fixed but is still says so.
“vulnerability in tagDiv Cloud Library 3.9”
I use Newspaper 12.7.3 latest
You should tell us what is the problem or publish new update asap
Hi,
The reported “vulnerability in tagDiv Cloud Library 3.9” does not apply to our setup. The current installed version is 3.9.2, and as shown in the Patchstack reports, the issue has already been fixed.
However, because the plugin version string includes the text “| built on 12.01.2026 14:31”, some security scanning tools are not interpreting the version number correctly and are flagging it incorrectly.
A theme update will be released soon that removes this extra text from the version field and places it in the description instead, which should resolve the false positives.
If you would like to test this now, an RC version is available under Newspaper → Updates (click Check Updates and look for the RC version). Please ensure this is tested on a staging environment, not on the live site.
Thank you.
