We recently faced a malware issue on our website due to the documented vulnerabilities with this theme/dependent plugins. In an attempt to resolve this, we updated our theme (8.7.3) to the latest version. We encountered the following issues:
1. Child Theme Error: Our child theme is throwing a critical error related to the td_api_header_style::_helper_show_header(); function. This appears to be depreciated or no longer supported in the latest version of the theme, and the error prevents the site from loading at all
2. Parent Theme Shortcode Issue: Even when reverting to the parent theme, we noticed that shortcodes are visible all over the website as seen here on this staging site running the latest version of the parent theme.
Could you please assist us in resolving these 2 issues as soon as possible? We’re at a standstill until this is fixed.
My intuition is that because we are jumping from version 8.7.3 to the latest version, we’re missing some conversion that happened with how the shortcodes are handled – perhaps the update needs to be done in steps?
We can provide full access to a staging site if needed
Hi Michael,
I spoke with Jackson who originally set up this server – he said this server config is supposed to have a managed firewall/load balancer in front of it already.
Can you look into this? Thank you!
* please disregard 2nd message – wrong forum! Original post still needs addressed.
Hello!
Follow this guide to clean your WordPress and theme of malware:
https://www.wordfence.com/docs/how-to-clean-a-hacked-wordpress-site-using-wordfence/ or https://askwpgirl.com/10-steps-remove-malware-wordpress-site/
1. The child theme is not overwritten by the update. An issue for that could be the compatibility of your child theme with the new version of our theme(if you use some files which were updated).
2. A code in your frontend is appearing only when you have a plugin uninstalled when it should be installed, so instead of the code, it will display the element from that plugin. Check in Newspaper -> Plugins (the Standard Pack plugin).
Thank you!
Hi Bettina,
Can you look a little deeper into this?
1. Yes I understand the child theme is not overwritten, I’m asking for guidance about why we would get a critical error from this line of code in it’s header.php – perhaps related to #2? It is related to general issue of the update breaking the site, child theme or not.
This is the code:
/*
* loads the header template set in Theme Panel -> Header area
* the template files are located in ../parts/header
*/
td_api_header_style::_helper_show_header();
This is the error:
PHP Fatal error: Uncaught Error: Class “td_util” not found in /srv/htdocs/wp-content/themes/Newspaper/includes/wp-booster/wp-admin/tagdiv-view-header.php:19 Stack trace: #0 /srv/htdocs/wp-content/themes/Newspaper/includes/wp-booster/wp-admin/tagdiv-view-theme-plugins.php(59): require_once() #1 /srv/htdocs/wp-content/themes/Newspaper/includes/wp-booster/tagdiv-wp-booster-functions.php(499): require_once(‘/srv/htdocs/wp-…’) #2 /wordpress/core/6.3.1/wp-includes/class-wp-hook.php(310): {closure}(”) #3 /wordpress/core/6.3.1/wp-includes/class-wp-hook.php(334): WP_Hook->apply_filters(”, Array) #4 /wordpress/core/6.3.1/wp-includes/plugin.php(517): WP_Hook->do_action(Array) #5 /wordpress/core/6.3.1/wp-admin/admin.php(259): do_action(‘newspaper_page_…’) #6 {main} thrown in /srv/htdocs/wp-content/themes/Newspaper/includes/wp-booster/wp-admin/tagdiv-view-header.php on line 19
#2. We have all dependent plugins. Below is what the shortcodes look like that are appaering everywhere – they look related to the composer, which we have installed & activated, and the new version from the theme update. My theory is that because we are making such a jump in theme versions, we’re missing one of the intermediate updates that performed some sort of action that converted them in td composer during a previous update. Can you please ask your dev team?
[td_block_9 custom_title=”Breaking News” custom_url=”/category/breaking-news/” category_id=”24″ limit=”10″ el_class=”breaking-news-block” header_color=”#d90000″]
Hello!
It seems to be from the PHP version that you use. Check in Newspaper -> Plugins (the Standard Pack plugin should be installed and active).
Thank you!
