UPDATE and Visual Composer Security Notice
Hi there,
How do we update the theme? I received an email from theme forest telling me to update the CeeVee Theme.
I also received another email about the security of Visual Composer. Can you let us know if it's okay to update and how to update if we should?
Thank you!!
--------------
Hi Farhad,
We are getting in touch to let you know about multiple XSS security vulnerabilities in the Visual Composer WordPress plugin versions prior to 4.7.4 (releases prior to October 2, 2015). This plugin was included in items you've purchased (listed below).
We have been working with WP Bakery, the creators of Visual Composer, who have addressed all identified vulnerabilities and undertaken a code audit to ensure that it is as secure as possible. Theme authors whose items include Visual Composer have been instructed to make sure their items accommodate this upgrade. Items that include older versions of Visual Composer will be disabled from the market until this change is made.
Affected Items
Your items that include Visual Composer:
CeeVee - Responsive CV Resume WordPress Theme
What You Should Do
In order to secure your item from these vulnerabilities we strongly encourage you to update to version 4.7.4 or later as soon as possible. We recommend you take the following steps to secure your sites immediately, after first backing up your WordPress site.
Visual Composer Plugin Update Steps
Log in to codecanyon.net and proceed to download the latest version of Visual Composer to your computer from this URL: http://codecanyon.net/item/visual-composer-page-builder-for-wordpress/242431
Locate and unzip the downloaded plugin file.
Connect to your server using an FTP client and upload the js_composer directory (from the downloaded zip file) to the wp-content/plugins/ directory. (Note: This will overwrite the old Visual Composer files with the secure versions.)
Log into WordPress and navigate to the Plugins page to confirm the Visual Composer plugin is version 4.7.4
The link to the latest version, provided above, will be live for 3 weeks from the time this email was sent. After this period, you will need to access the latest version via your theme zip file.
Please note: This replaces the existing plugin under the licensing of the theme(s) you've purchased and is only licensed for use in these themes.
Your Security is Our Priority
We take security seriously at Envato. When we receive security vulnerability reports for items sold on our marketplaces, we work as quickly as possible to validate the report, investigate risk and determine the best course of action for the security of our community.
On behalf of the plugin creator and Envato, we'd like to apologize for this inconvenience and assure you that security is and always will be our priority.
Regards,
The Envato Team
How do we update the theme? I received an email from theme forest telling me to update the CeeVee Theme.
I also received another email about the security of Visual Composer. Can you let us know if it's okay to update and how to update if we should?
Thank you!!
--------------
Hi Farhad,
We are getting in touch to let you know about multiple XSS security vulnerabilities in the Visual Composer WordPress plugin versions prior to 4.7.4 (releases prior to October 2, 2015). This plugin was included in items you've purchased (listed below).
We have been working with WP Bakery, the creators of Visual Composer, who have addressed all identified vulnerabilities and undertaken a code audit to ensure that it is as secure as possible. Theme authors whose items include Visual Composer have been instructed to make sure their items accommodate this upgrade. Items that include older versions of Visual Composer will be disabled from the market until this change is made.
Affected Items
Your items that include Visual Composer:
CeeVee - Responsive CV Resume WordPress Theme
What You Should Do
In order to secure your item from these vulnerabilities we strongly encourage you to update to version 4.7.4 or later as soon as possible. We recommend you take the following steps to secure your sites immediately, after first backing up your WordPress site.
Visual Composer Plugin Update Steps
Log in to codecanyon.net and proceed to download the latest version of Visual Composer to your computer from this URL: http://codecanyon.net/item/visual-composer-page-builder-for-wordpress/242431
Locate and unzip the downloaded plugin file.
Connect to your server using an FTP client and upload the js_composer directory (from the downloaded zip file) to the wp-content/plugins/ directory. (Note: This will overwrite the old Visual Composer files with the secure versions.)
Log into WordPress and navigate to the Plugins page to confirm the Visual Composer plugin is version 4.7.4
The link to the latest version, provided above, will be live for 3 weeks from the time this email was sent. After this period, you will need to access the latest version via your theme zip file.
Please note: This replaces the existing plugin under the licensing of the theme(s) you've purchased and is only licensed for use in these themes.
Your Security is Our Priority
We take security seriously at Envato. When we receive security vulnerability reports for items sold on our marketplaces, we work as quickly as possible to validate the report, investigate risk and determine the best course of action for the security of our community.
On behalf of the plugin creator and Envato, we'd like to apologize for this inconvenience and assure you that security is and always will be our priority.
Regards,
The Envato Team
Howdy, Stranger!
It looks like you're new here. If you want to get involved, click one of these buttons!
Comments
New CeeVee theme is available to download from ThemeForest, and it's equipped with latest version of Visual Composer plugin.
As for theme update - please refer to http://www.apollo13.eu/docs/ceevee/#!/installation_update_update_theme
All the Best.
I tried to update and I followed the instructions but I keep getting Errors.
I deactivated all plugins and everything but it still won't let me.
--------------------
Internal Server Error
The server encountered an internal error or misconfiguration and was unable to complete your request.
Please contact the server administrator to inform of the time the error occurred and of anything you might have done that may have caused the error.
More information about this error may be available in the server error log.
Web Server at farhadpanahi.com
this might be as issue of memory limit set to low.
You can always try to update it via FTP: http://codex.wordpress.org/Using_Themes#Adding_New_Themes
All the Best.