Title: des2019's Replies | WordPress.org --- # des2019 [ ](https://wordpress.org/support/users/des2019/) * [Profile](https://wordpress.org/support/users/des2019/) * [Topics Started](https://wordpress.org/support/users/des2019/topics/) * [Replies Created](https://wordpress.org/support/users/des2019/replies/) * [Reviews Written](https://wordpress.org/support/users/des2019/reviews/) * [Topics Replied To](https://wordpress.org/support/users/des2019/replied-to/) * [Engagements](https://wordpress.org/support/users/des2019/engagements/) * [Favorites](https://wordpress.org/support/users/des2019/favorites/) Search replies: ## Forum Replies Created Viewing 15 replies - 1 through 15 (of 38 total) 1 [2](https://wordpress.org/support/users/des2019/replies/page/2/?output_format=md) [3](https://wordpress.org/support/users/des2019/replies/page/3/?output_format=md) [→](https://wordpress.org/support/users/des2019/replies/page/2/?output_format=md) * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance] File change – plugin.json](https://wordpress.org/support/topic/file-change-plugin-json/) * Thread Starter [des2019](https://wordpress.org/support/users/des2019/) * (@des2019) * [7 months, 1 week ago](https://wordpress.org/support/topic/file-change-plugin-json/#post-18772327) * Thank you for letting me know that it’s not an issue. As you can see from my last post, I was in the process of reinstalling on all sites I maintain. Now that you’ve clarified that it’s nothing to worry about, I’m not going to do the reinstall on the rest of the sites. I’m guessing that warning will automatically go away with your next plugin update. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance] File change – plugin.json](https://wordpress.org/support/topic/file-change-plugin-json/) * Thread Starter [des2019](https://wordpress.org/support/users/des2019/) * (@des2019) * [7 months, 1 week ago](https://wordpress.org/support/topic/file-change-plugin-json/#post-18771850) * I found a way to resolve this issue. I’ve tried it out on 4 different sites, so far, and each time I ran another scan the file no longer shows up as being changed. * Sidebar: On every site I’ve tested this out on Wordfence was taking a MUCH longer time than usual to run a scan and often put up a notice about not being able to complete the scan. Be that as it may, the file change notice did not come up. * Here’s what worked for me: - Deactivate and then Delete WP-Optimize. - Reinstall and activate it. Ignore that Set Up wizard and scroll down to EXIT SETUP. * You may need to check your settings after you reactivate the plugin. Run a scan. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance] File change – plugin.json](https://wordpress.org/support/topic/file-change-plugin-json/) * Thread Starter [des2019](https://wordpress.org/support/users/des2019/) * (@des2019) * [7 months, 2 weeks ago](https://wordpress.org/support/topic/file-change-plugin-json/#post-18769900) * Hi, * Not since a couple of weeks ago when 4.4.0 was released. I didn’t see the file change notice notice in Wordfence until a couple of days ago, when I posted my question here. The **Original version** of the file is extremely long and shows a lot of info about Yoast SEO, WooCommerce order forms, Events Calendar, Adwords conversions… and the list goes on and on. The **Modified version** is completely blank. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Tealium] XSS Warning](https://wordpress.org/support/topic/xss-warning/) * Thread Starter [des2019](https://wordpress.org/support/users/des2019/) * (@des2019) * [1 year, 1 month ago](https://wordpress.org/support/topic/xss-warning/page/2/#post-18540238) * Thank you for all of your help! In the end, we decided to place the Tealium tag in the functions file and remove the plugin. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Tealium] XSS Warning](https://wordpress.org/support/topic/xss-warning/) * Thread Starter [des2019](https://wordpress.org/support/users/des2019/) * (@des2019) * [1 year, 1 month ago](https://wordpress.org/support/topic/xss-warning/#post-18537032) * As mentioned, the plugin upgrade crashed the website. I had to deactivate the plugin via FTP, then rollback to the previous version 2.1.17. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Tealium] XSS Warning](https://wordpress.org/support/topic/xss-warning/) * Thread Starter [des2019](https://wordpress.org/support/users/des2019/) * (@des2019) * [1 year, 1 month ago](https://wordpress.org/support/topic/xss-warning/#post-18537022) * I just updated the plugin and it crashed the website: There has been a critical error on this website. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Tealium] XSS Warning](https://wordpress.org/support/topic/xss-warning/) * Thread Starter [des2019](https://wordpress.org/support/users/des2019/) * (@des2019) * [1 year, 1 month ago](https://wordpress.org/support/topic/xss-warning/#post-18537013) * Hi, * To be sure I’m understanding this upgrade: It will only solve the security problem if I do the upgrade AND also disable the template file editor in your wp-config file? * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Tealium] XSS Warning](https://wordpress.org/support/topic/xss-warning/) * Thread Starter [des2019](https://wordpress.org/support/users/des2019/) * (@des2019) * [1 year, 1 month ago](https://wordpress.org/support/topic/xss-warning/#post-18535103) * Hi, * Thank you for your detailed explanation! * The plugin was installed by the marketing company. I checked the settings at they’re not using the Advanced Tag Code section. I’m going to find out if they can provide me with a conversion tracking code that I can manually place into the header or footer. * Too bad there’s no way for you to patch the security risk so that Wordfence stops putting up that warning. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Tealium] XSS Warning](https://wordpress.org/support/topic/xss-warning/) * Thread Starter [des2019](https://wordpress.org/support/users/des2019/) * (@des2019) * [1 year, 1 month ago](https://wordpress.org/support/topic/xss-warning/#post-18534685) * Hi, * Are you working on a patch for this, or should I delete this plugin? * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Tealium] XSS Warning](https://wordpress.org/support/topic/xss-warning/) * Thread Starter [des2019](https://wordpress.org/support/users/des2019/) * (@des2019) * [1 year, 1 month ago](https://wordpress.org/support/topic/xss-warning/#post-18528633) * As of this morning, this is now being picked up by Wordfence. * [https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/tealium/tealium-2117-authenticated-administrator-stored-cross-site-scripting](https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/tealium/tealium-2117-authenticated-administrator-stored-cross-site-scripting) * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Tealium] XSS Warning](https://wordpress.org/support/topic/xss-warning/) * Thread Starter [des2019](https://wordpress.org/support/users/des2019/) * (@des2019) * [1 year, 1 month ago](https://wordpress.org/support/topic/xss-warning/#post-18526945) * I appreciate your looking into this; Thank you! * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[Tealium] XSS Warning](https://wordpress.org/support/topic/xss-warning/) * Thread Starter [des2019](https://wordpress.org/support/users/des2019/) * (@des2019) * [1 year, 1 month ago](https://wordpress.org/support/topic/xss-warning/#post-18526450) * Hi, * Here’s where the notice is posted: [https://patchstack.com/database/wordpress/plugin/tealium/vulnerability/wordpress-tealium-plugin-2-1-17-cross-site-scripting-xss-vulnerability?_a_id=350](https://patchstack.com/database/wordpress/plugin/tealium/vulnerability/wordpress-tealium-plugin-2-1-17-cross-site-scripting-xss-vulnerability?_a_id=350) * What puzzles me most is that Wordfence makes no mention of this vulnerability, and I haven’t been able to find anything about it other than what Patch Stack is showing. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[WPForms - AI Form Builder for WordPress - Contact Forms, Payment Forms, Survey Form, Quiz & More] Error: Attempt to submit corrupted post data](https://wordpress.org/support/topic/error-attempt-to-submit-corrupted-post-data/) * Thread Starter [des2019](https://wordpress.org/support/users/des2019/) * (@des2019) * [1 year, 2 months ago](https://wordpress.org/support/topic/error-attempt-to-submit-corrupted-post-data/#post-18496453) * Closing out this thread as it appears that I MAY have FINALLY solved the problem. * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[WPForms - AI Form Builder for WordPress - Contact Forms, Payment Forms, Survey Form, Quiz & More] Error: Attempt to submit corrupted post data](https://wordpress.org/support/topic/error-attempt-to-submit-corrupted-post-data/) * Thread Starter [des2019](https://wordpress.org/support/users/des2019/) * (@des2019) * [1 year, 2 months ago](https://wordpress.org/support/topic/error-attempt-to-submit-corrupted-post-data/#post-18495963) * Deleting this comment until after I run a few more tests. - This reply was modified 1 year, 2 months ago by [des2019](https://wordpress.org/support/users/des2019/). Reason: Running additional testing * Forum: [Plugins](https://wordpress.org/support/forum/plugins-and-hacks/) In reply to: [[WPForms - AI Form Builder for WordPress - Contact Forms, Payment Forms, Survey Form, Quiz & More] Error: Attempt to submit corrupted post data](https://wordpress.org/support/topic/error-attempt-to-submit-corrupted-post-data/) * Thread Starter [des2019](https://wordpress.org/support/users/des2019/) * (@des2019) * [1 year, 2 months ago](https://wordpress.org/support/topic/error-attempt-to-submit-corrupted-post-data/#post-18494168) * Hi Ralden, * Thank you! I’ve been trying everything I can think of, and clearing cache after every change, and still get the error message. [https://growingroots.com/long-beach-thousand-oaks-interior-plants](https://growingroots.com/long-beach-thousand-oaks-interior-plants/)/ Viewing 15 replies - 1 through 15 (of 38 total) 1 [2](https://wordpress.org/support/users/des2019/replies/page/2/?output_format=md) [3](https://wordpress.org/support/users/des2019/replies/page/3/?output_format=md) [→](https://wordpress.org/support/users/des2019/replies/page/2/?output_format=md)