Hello, no problem, thanks a lot, and good luck with your search.

Hello, I’m going to see about changing the theme so, on the wordfence site this is not corrected https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/td-composer/tagdiv-composer-41-cross-site-request-forgery-to-cross-site-scripting. But OK !!!

https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/td-composer/tagdiv-composer-41-cross-site-request-forgery-to-cross-site-scripting

WordPress tagDiv Composer plugin

@Anamaria It still seems to be there unfortunately.

@Anamaria Hello, thank you for rereading my first post!

Link already present, it seems to me?

Does that suit you? or do you want other information?

https://snipboard.io/xseATz.jpg

• This reply was modified 2 years by boutiquepcland.

Hello, if I talk about vulnerability, it’s necessarily because I’m on the latest version of the theme! after once again where you tell me that you are working on the theme, there is no point in responding then? Especially for mentioning me every time (I don’t work here.).

Hello, it is my server panel (plesk) which informs me of the vulnerability, I might as well tell you that it is never wrong. As a result, the module of my panel calls me by email, but also by notification in the panel to tell me that the vulnerability is still present and not corrected to date. You need an update with the security prerequisites, nothing else.

Hi,

“you can ignore it.”

But it’s not fixed yet! the only method I have to fix and disable the module!

If I disable my site will be more functional.

THANKS !

Hello, my theme version is 12.5 tagDiv Composer Version 4.2 | built on 25.07.2023 tagDiv Cloud Library and Version 2.8 | built on 25.07.202

there is a link: https://patchstack.com/database/vulnerability/td-composer/wordpress-tagdiv-composer-plugin-4-1-csrf-to-xss-vulnerability?_a_id=110

hello it does not work for me!

Good morning,

I have the latest version of the theme, but my Plesk still tells me the problem, I can’t ignore it since it’s a vulnerability.

It’s only “tagDiv Cloud Library” if I disable the module the theme still works?

thanks in advance

Hello, thank you for your answer, I followed the guides, thank you.

exemple : https://www.leblogdumineur.fr/pool-minage/

hello I come back to you, I see that it works for new articles but not old ones, how can I solve the problem?

I just got there, I don’t know how I did it but it suits me!

https://www.leblogdumineur.fr/connaissez-vous-les-panneaux-solaires-beem-energy-decouvrez-les-avantages-des-kits-beem/

thanks anyway.

Hello, thank you for your answer it works!

That said, it’s not great to have to do this style of manipulation!