I received a security warning from VaultPress and they looked into it and said that td-composer is triggering a security warning due to an unsanitized PHP global variable being used to include or require other files. This poses a security risk for your site and should be addressed.
I recently installed the Gutenberg editor and TD-cloud – theme and all plug-ins are up-to-date.
What are my next steps? (in detail please, I am not an advanced user).
Hello,
There is no extra step for you to take. I will pass this information on to the development team and they will check if there really is a security threat or not. it is not the first time certain scanning tools provided false positives with our theme. Please provide a precise log of the scan so we can investigate the issue.
Thank you!
Here it is: require_once( $_GET[‘wp_path’] . ‘/wp-load.php’ );
Thank you. I will pass this information on and we will take a look into this matter.
