"I got a security alert JS composer compromised... best way to update?" (#699514) / ThemeNectar

Comments

Sterling started the conversation
March 10, 2016 at 5:19am
What do you suggest best way to remedy this?
Is there a way to register Salient (I bought a second copy to design his site with) via his backend so visual composer and salient can update automatically?
My client RichTalarico.com was emailed by his host DreamHost and he sent to me:
The following files/directories had insecure permissions (777), which have been remediated. /home/richtalarico/richtalarico.com/wp-content/uploads/js_composer /home/richtalarico/richtalarico.com/wp-content/uploads/smile_fonts/Defaults Additionally, the following steps should be taken to ensure password security.
Change your users password(s) by clicking under the Action Column for that user in our Web Panel: https://panel.dreamhost.com/index.cgi?tree=users.users
Change your database password(s) by clicking the database username in our Web Panel: https://panel.dreamhost.com/index.cgi?tree=goodies.mysql
IMPORTANT: You may need to modify your site's configuration file to reflect the new password.
8,992
Tahir replied
March 11, 2016 at 8:06pm
Hey ,

We just released Salient 7.0.7, If you've already installed Salient VC 4.9.2 you'll need to delete it and update to 4.10 to get some of the fixes, See changelog : http://themenectar.com/changelogs/salient.html .

Update the theme by following this guide: https://themenectar.ticksy.com/article/3218/ . Also see Visual Composer update instructions in here: https://themenectar.ticksy.com/article/5182/
Best.

ThemeNectar Support Team
Sterling replied
March 12, 2016 at 7:27am
Hmmm Typically I just activate 2015, delete the theme, upload the zipped theme and activate and same with Visual Composer, but it has to all be done via FTP? (I don't have client's ftp so kind of a hassle to do that way)
THNKS