Visual Composer Security Vulnerability Fix

You seem to be using a very outdated version of the Salient theme, which also includes its own heavily customized version of Visual Composer. In older versions of that theme, the included VC version is installed inside the theme folder (as it is the case on your setup). The theme authors changed that quite some time ago, so that their VC version is now installed as standalone plugin (as it should be).

But as it stands now, you are attempting to run two different versions of VC at the same time; one version coming from the theme folder, and another one as normal plugin. That is of course not possible, as it will cause the error you get (and many other you don’t see), because both VC versions are attempting to register the same functions, causing conflicts.

You need to update the Salient theme first, which will move the VC that comes with the theme out of the theme folder and will allow you to install it as a normal plugin. The latest Salient releases already include VC v4.7.4 (in the customized version). If you want to use the standard (non-customized) version that you also seem to own, you can then deactivate the theme version and activate the standard one.

1 Like

Tks a lot, I’ll update salient theme and try again.

Sorry I cannot check disabled themes (that’s something only staff have access to), all I can do is help people update their installed copies of vc :slight_smile:

Thanks for your reply :slight_smile:

Hello Takanewa,

I updated the salient theme and the new visual composer, but i noticed that the footer icons and some contact icons disappeared. And also when I try to activate salient visual composer appears this message:

Fatal error: Cannot redeclare class Vc_Manager in /home/estud907/public_html/wp-content/plugins/js_composer_salient/js_composer.php on line 35

Can u help me again?

You can only use ONE Visual Composer version at a time, either the version that comes with your theme, or the standalone standard one. In order to switch between both versions, you have to deactivate BOTH first, before you can re-activate one of the two. The moment you have both versions activated, you will receive the error messages again.

The author of the Salient theme did a lot of customization to the version that comes with the theme, but both versions still share the same core functions and classes; and a function or class can only be registered once with WordPress. The theme version includes new elements specific to the theme that the standard version of VC does not include, while at the same time replacing/removing some elements from the standard version. So make sure you want in fact be using the standard standalone version, as you will lose all those theme specific elements.

As for the missing icons when NOT using the theme version of Visual Composer … the reason is that the theme authors load the required icon definitions along with their custom VC version, but if you don’t use their VC version, those definitions never get loaded. You will have to manually add those definitions to the custom CSS code editor in the theme settings, which will restore the missing icons on the frontend.

In the theme’s ā€œcssā€ folder, you will find a file ā€œfont-awesome.min.cssā€, which includes the missing icon definitions. From that file, copy everything (starting from line 12 all the way to the end of the file) into the theme’s custom CSS code editor, which you will find on the theme settings page (tab ā€œGeneral Settingsā€; at the bottom). Once you saved the theme settings with the new CSS code, the icons should show.

That’s great! I got it.

Tks a lot.

@jremick Can you please check our item Marvel has been soft-disabled. We’ve updated to the latest version VC.

Thanks in advance,

Hi pixelgeeklab,

The reviewers will check the item as soon as they reach it in the queue. Thanks

Hi Ramsz,

Your client would need to purchase a VC license directly from CodeCanyon to receive them directly.

Hi Takanewa,

I’ve noticed that my website has a lot break images and some items in portfolio look terrible :frowning: after the last update.

www.estudiobora.la

Can you help me with this?

Tks

Hi @jremick i bought a theme (one in the top sellers called CoPro) and installed it recently,at the begging every thing was working very well but one week after finishing the site,my site has suddenly blocked by Google Webmaster and now far more than 15 days ,
this is my site http://argustechs.com/
actually i dont know the reason,it began give my this red security error page

(pls check the attachement) i tried to contact the support team many times they told me that the Visual Composer plugin was recently compromised and most likely my website was attacked through it so i did update mine to the new version of Visual Composer and still having the same problem
here the reports of my site using Google Webmaster tools could you check it please
https://www.google.com/safebrowsing/diagnostic?site=AS:7296&client=googlechrome&hl=en-US

any expected help or instructions to do will be really appricated its a really urgent issue could you help me to fix it please
thank you in advance

this is the second report
https://www.google.com/safebrowsing/diagnostic?site=wportsdrafssqamm.tk/&client=googlechrome&hl=en-US

Hi @carolpet,

As Tekanewa mentioned, the latest version of Salient comes with a custom version of Visual Composer. You should probably be using that version (rather than the direct download version) and you should also have the latest version of Salient as well (to ensure they are compatible).

If you need Help with getting that in place, you should use the support service provided with that theme.

Hi @Aximus25,

Could you please [create a Help ticket][1] and we’ll see if we can advise you on this. Please select ā€œI have a question about Visual Composerā€ when creating it. Thanks!
[1]: https://help.market.envato.com/hc/en-us/requests/new

Received an email, downloaded the version of visual composer, uploaded, nothing wrong in the backend but in the frontend the visual composer doesn’t work. I go to edit the home page and the visual composer doesn’t visualize. Now I’m using the atribute pagebuilder + later articles + pagination because in default layout can’t see, at least, the articles.

I updated to the VC 4.7.4 and my site broke getting the following error message:

[04-Nov-2015 22:11:42 UTC] PHP Fatal error: Class ā€˜WPBakeryShortCode_VC_Row’ not found in /home2/blacksq1/public_html/wp-content/themes/salient/nectar/nectar-vc-addons/nectar-addons.php on line 399

Has anyone else seen this? Any available help to fix would be great.

Thanks,
Suzanna

@dtbaker I have a similar issue as webmethod and Juon, theme is gone but uses VC 3.x
can you share with me anything would help
Thanks

You’re welcome to send me a message and I can assist. http://themeforest.net/user/dtbaker

Hi all,

my website is based on Architectos which is no longer available for purchase anyway and the developer has vanished into the blue skies.

However, it contains VC as an embedded modified version and it seems that it can not be updated to a secure state at all.

If anybody has some guidelines or ideas on how to go about it without dumping the website altogether - I would greatly appreciate any input.

Thanks.