Archive: Announcements

6 month support? Really?!

Not exactly.

Support is a matter of mutual respect between the developer and the buyer. This means that if you are not abusing it (submitted up to 3-5 tickets per 6 months), you can count on continuous support on our usual terms: http://support.dream-theme.com/support-policy/

And, BTW, no matter what your support status is, all updates are free for item(s) lifetime.

Visual Composer “XSS security vulnerabilities” explained

First of all, there’s no need to panic.
We’d like to emphasize that Envato is screaming Red Alert without explaining what the issue really is..
As usual (:

Second, let’s have a look into the issue itself.
There is a security “hole” which allows users without admin permissions to get access to some admin features (namely editing pages/posts/etc.). However, this is quite complicated and time consuming task even for experienced developer/hacker, who is well accustomed with Visual Composer codebase. It cannot be exploited by amateur.
Therefore, we haven’t heard of cases exploiting this vulnerability in the real world.

Moreover, on most WordPress sites there is only an admin user(s) and registration of new users is disabled.
In this case there’s no way to exploit this security hole.
Which lead us to the fact that usage of older versions of Visual Composer on such sites is 100% safe.

This information is confirmed by Michael M. from WPBakery (Visual Composer developer).

2013 Easter holidays

Hello everyone,

We just wanted to let you know that due to easter holidays in our country support will not be provided from May 2 to May 5. All support requests collected during this period will be processed on Monday, May 6.

Please, excuse us for any inconveniences and thank you for understanding!

[DONE] Support portal software update

Currently, we are carrying support portal software upgrade. Our new Support Portal includes such extremely useful modules as Knowledge Base and Troubleshooter. We hope that these improvements will help you to solve product-related issues even without submitting a support request.

Considering the circumstances mentioned above, support tickets submission will be withdrawn from Feb 15th till Feb 20th (2013). Meanwhile, you will be able to use our Knowledge Base and Troubleshooter for self-support.

Thank you for understanding!
Yours sincerely, Dream-Theme.