Hi, my website has been hacked, I’ve noticed this morning that one of my pages has a redirection to some strange website (or 502 bad gateway, as per Safari error message). I’ve read on another request that there was a vulnerability issue on Newspaper V12.7 and the last update V12.7.1 has fixed it. I didn’t have installed the last update yet, so I assume the malware could have come from that vulnerability.
My questions are :
– Do you recommend to clean it first or to update Newspaper to V12.7.1 ?
– To remove the malware, do you have any info that could help ?
– When such vulnerability is suspected, why don’t you send an emailing to all your contacts that bought your template to tell them to update quickly to the new version ?
Thank you.
Emma
Hi Emma,
I understand your concerns. However, it’s difficult to determine whether the issue you’re experiencing is due to an outdated theme or caused by a plugin conflict. These days, it’s common for both themes and plugins to have some vulnerabilities, which is why it’s important to take steps to protect your website proactively—using tools like Wordfence and Cloudflare is highly recommended.
What to Do Now:
Ensure you have a full backup of your website and database.
If possible, replace the core WordPress files, theme, and plugins with fresh, clean versions. Be sure to keep only files you know and trust. However, this process can be complex and might cause issues if not done carefully.
A simpler and safer approach is to update everything, including:
– WordPress core
– All plugins
– The theme
After updating, install Wordfence and run a full security scan. You can also scan your website with Sucuri SiteCheck here: https://sitecheck.sucuri.net/results/
Please note: we notify all our users whenever a new theme update is released. You can also review the update contents by checking the changelog here: – https://i.imgur.com/wSlH5Lr.png
Let me know if you need further help!
Thank you,
Thank you Calin, I’m gonna do that.
Regarding your notification thanks to the changelog, I was looking for it since a few months (and your screenshot doesn’t show where to find it).
Indeed, it was before easy to find through the link on Updates Tab of the plugin, but now this link always goes to your website homepage. Would you make sure the link to changelog is corrected for the next update ?
Otherwise, let me know where exactly to find it. Thank you.
Hi,
The changelog can be seen on our themeforest page – https://themeforest.net/item/newspaper/5489609 (yo need to scroll to the bottom) and also on our website on Newspaper Changelog page – https://tagdiv.com/newspaper-changelog/
Thank you!
Hi, as I couldn’t find the vulnerability, I’m currently re-installing everything on a new subdomain. I’d like to test and copy the work that has been done since a month before transferring my website to the new one. My licence is already used for my website and a sandbox, so I can’t use it for the new test website.
Is it possible to assign temporarily my licence to a 3rd URL ?
Otherwise, I have another licence I’d bought in 2020 for another website and that is not used any more. Is it possible to use 2 licences for the same URL (3 sub-domains)? I tried but I cannot click on “assign” (theme panel > licence tab > 3rd URL), I can only click on “Buy a new licence”.
Thank you.
I think you can use the license twice per domain, so that you can do exactly that; dev location and live location.
(I don’t work here.)
Hi emmalabbe,
Unfortunately a license can be used only on 2 domains, sorry! But if you have a second one, you can use that one to activate the theme on the 3th domains (go to system status and make sure that the second license is used there, if not, use the rest key button and after that use the key to activate the theme).
In case that us still have problems with the license, but those are not used on more then 2 live domains, then you can contact us via email at contact@tagdiv.com and provide the license keys to check them were and how are used.
Thank you!
