Hello, we are having several security vulnerabilities raised against the Visualizer plugin. All state the following :
Info:?All versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for https://snyk.io/vuln/SNYK-JS-DATATABLESNET-598806.
We have two instances of this in the following filepaths :
/agent/_work/2/s/wp-content/plugins/visualizer/classes/Visualizer/Gutenberg/build/block.js
/agent/_work/2/s/wp-content/plugins/visualizer/js/lib/datatables.min.js
Please could you tell me whether these are genuine vulnerabilities or false positives. If they are genuine, please could you tell me when they will be fixed. If they are false positives, please could you explain why.
We are using version 3.1.16
Thanks!
Alice
Info: React applications which rendered to HTML using the ReactDOMServer API were not escaping user-supplied attribute names at render-time. That lack of escaping could lead to a cross-site scripting vulnerability. This issue affected minor releases 16.0.x, 16.1.x, 16.2.x, 16.3.x, and 16.4.x. It was fixed in 16.0.1, 16.1.2, 16.2.1, 16.3.3, and 16.4.2.
FilePaths:?/wp-content/plugins/visualizer/classes/Visualizer/Gutenberg/build/block.js
https://security.snyk.io/vuln/npm:react-dom:20180802
Please consider updating ReactDOM.
Thanks!
]]>Info:?All versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for https://snyk.io/vuln/SNYK-JS-DATATABLESNET-598806.
File: /wp-content/plugins/visualizer/js/lib/datatables.min.js
Please consider patching this to version 1.10.22 or higher.
]]>Hi Themeisle Team,
First, I’d like to thank you for this amazing Visualizer plugin! It’s been super helpful for creating charts on our site.
However, I’ve encountered an issue and would appreciate any guidance. While using the plugin on a Kinsta server, the page works fine with around 25 charts embedded via shortcodes. For example:
https://tadels.law.ntu.edu.tw/questionnaire/q-report-1/
But when I add more than 25 charts, the page turns completely blank. Here’s an example:
https://tadels.law.ntu.edu.tw/questionnaire/q-report-2/
Interestingly, I tried the same on a SiteGround server and everything works perfectly, even with more charts:
https://tadels.law.egcreative.tw/questionnaire/q-report-3/
Could this be related to server limitations or another issue? I would be grateful for any insights or advice on resolving this.
Environment:
Thank you very much for your assistance. I appreciate any help you can offer!
Best regards,
Vincent
Hi,
When I creating a Pie/Donut Chart using Google Charts API, there is a case where the center of the slice is in the center of the donut when there is only one slice.
In this case, I would like to change the label color of the slice, but there seems to be no item to change the label color in the settings menu (Settings – Slice Settings).
To adjust the display when there is only one slice, alternatives include:
However, I thought it would be better to change the label color.
I would like to know if there is a way to change the slice label color. If not, I believe it would be a good idea to add an option for this in the settings.
(e.g.,”Slice Label Color” or “Slice Text Color”)
After reading the Google Charts API documentation, I found a description that suggests changing the slice text color in such cases:
‘Note that Google Charts tries to place the label as close to the center of the slice as possible. If you have a donut chart with just one slice, the center of the slice may fall into the donut hole. In that case, change the color of the label.’
https://developers.google.com/chart/interactive/docs/gallery/piechart#donut
Thanks,
Our pie chart has four slices. The labels for two of the slices only appear when hovering over the slices.
Can we get more control over this with the Premium, or is this automatic for all.
Hi there,
Firstly, thank you for supporting Visualizer with your purchase!
If you are a paid customer of Visualizer, and need help, please contact us via?our website?as this forum is used just for support for the free version of Visualizer.
Submitting a ticket via our website will guarantee a much faster response as we only answer questions on this forum after we have taken care of our paying customers.
Thank you!
]]>Hi there,
Firstly, thank you for using Visualizer.
Below, you will find some info about the support we provide via this forum.
Expectations
Before Posting a new topic
Thank you!
]]>Does this plugin allow me to import xlsx files with macros? And does your demo have all the pro features on there?
]]>The free version charts Area and Column are not editable in the free version of the plugin. That is strange because they are in the list of free charts. If you try to edit an existing column chart you get the message “In order to edit premium charts, benefit from updates and support for Visualizer Premium plugin, please renew your license code or activate it“. But they were free.
You are able to create a free Area and Column chart. But when try to edit the chart, you receive the message of the premium charts.
I read on other post that there was no change in the list of free charts. So there is a problem in the plugin related to an update.
Hey I have always used the Free Version of this Plugin.
However, when I go to edit a Chart, I get the Message:
“In order to edit premium charts, benefit from updates and support for Visualizer Premium plugin, please renew your license code or activate it.“
But these are not premium charts….
Or Have you removed the Free version?
Using the free version Visualizer for years on multisite, but not activated on network and only using it on one site, intranet. Stopped working within the last month or two. Only have 4 charts. Want do i have to do to fix this??? tried to roll-back to previous version, same issue.
Kind regards
Erik
]]>Hey!
Is there any way to highlight Washington DC when viewing US map?
Hi, I found a problem with the Visualizer plugin – it keeps downloading feeds at “https://themeisle.com/blog/feed“, “https://www.codeinwp.com/blog/feed” and “https://wpshout.com/feed” but gets 403 status.
I can see this through Query monitor plugin’s debug panel
Do you have any idea how to fix it?
Thanks
]]>As of this week, I can no longer edit charts I have made over many years, because the Import Data from File feature is suddenly a premium feature requiring a $99 annual upgrade. Is this correct?
I see another support topic from a separate user this week who reported a similar issue. Your response was that whatever table he was trying to access had been a premium feature “for years”. But the user did not seem to agree this was the case. He had been using these charts in the past and these functions had never previously required a paid upgrade. I am having a very similar issue.
The ability to import data from a file has been a free feature for years. The plug-in is basically not usable if users are not able to import data from .csv or other database files. Please explain if this change is intentional or if it’s a glitch. Thank you
Since yesterday i can no longer edit my bar charts. I still can create bar charts, but when i want to edit i get the question if i want to Renew License or Activate License.
]]>Hi! I would like to know if this plugin can help me design an interactive map like this one?https://www.gsma.com/r/somic/
]]>Hi,
I have a problem with my first chart. I would like the graphic to take up the full width, but it doesn’t. I would also like the names of the columns to be all indicated (the years and not every other year). Can you help me ?
All the Best
Gregory
]]>Please note I’m using a placeholder chart at the moment on the page.
I’m having an issue with the Pie Chart that would be located under the accordion titled Road Ownership by Entity
I have added in the shortcode but it still does not display and I’m not sure why this would happen because it was always there.
The theme, plugins and WordPress are all up-to-date.
]]>Is it possible to create a double X-axis graph (see attached example screenshot) using combo graph?
]]>Hi,
I have about 600 Visualizer charts on my site and have used Plug-in for several years now. Within the past week or so, all charts on the site have ceased to load. This is the same whether I am using desktop or mobile and whether I am logged in to WordPress or logged out.
Interestingly, if I have the “Print” and “Download” options enable in Front End Actions, those links still load even though the chart itself is invisible.
Can you help?
On the attached sample page, click on the “ATTENDANCE” tab at the top of this page to access the area where the Chart should display:
Thank you
WordPress: 6.4.2
PHP: 8.2 FPM (via Docker)
Visualizer plugin: 3.10.4
I’m in the middle of migrating my WordPress site to Docker, and I’ll be using nginx for this. (Existing site is using Apache2.) And I was getting a rather interesting error:
NOTICE: PHP message: PHP Fatal error: Uncaught TypeError: ftp_nlist(): Argument #1 ($ftp) must be of type FTP\Connection, null given in /usr/share/nginx/wordpress/wp-admin/includes/class-wp-filesystem-ftpext.php:438
Here’s the stacktrace:
Stack trace:
#0 /usr/share/nginx/wordpress/wp-admin/includes/class-wp-filesystem-ftpext.php(438): ftp_nlist()
#1 /usr/share/nginx/wordpress/wp-admin/includes/class-wp-filesystem-base.php(231): WP_Filesystem_FTPext->exists()
#2 /usr/share/nginx/wordpress/wp-admin/includes/class-wp-filesystem-base.php(79): WP_Filesystem_Base->find_folder()
#3 /usr/share/nginx/wordpress/wp-content/plugins/visualizer/classes/Visualizer/Module.php(532): WP_Filesystem_Base->wp_content_dir()
#4 /usr/share/nginx/wordpress/wp-content/plugins/visualizer/classes/Visualizer/Module/Frontend.php(274): Visualizer_Module->get_user_customization_js()
#5 /usr/share/nginx/wordpress/wp-includes/class-wp-hook.php(324): Visualizer_Module_Frontend->enqueueScripts()
#6 /usr/share/nginx/wordpress/wp-includes/class-wp-hook.php(348): WP_Hook->apply_filters()
#7 /usr/share/nginx/wordpress/wp-includes/plugin.php(517): WP_Hook->do_action()
#8 /usr/share/nginx/wordpress/wp-includes/script-loader.php(2262): do_action()
#9 /usr/share/nginx/wordpress/wp-includes/class-wp-hook.php(324): wp_enqueue_scripts()
#10 /usr/share/nginx/wordpress/wp-includes/class-wp-hook.php(348): WP_Hook->apply_filters()
#11 /usr/share/nginx/wordpress/wp-includes/plugin.php(517): WP_Hook->do_action()
#12 /usr/share/nginx/wordpress/wp-includes/general-template.php(3052): do_action()
#13 /usr/share/nginx/wordpress/wp-content/themes/graphy/header.php(15): wp_head()
#14 /usr/share/nginx/wordpress/wp-includes/template.php(790): require_once('/usr/share/nginx/wordpress/wp-content/themes/graphy/header.php')
#15 /usr/share/nginx/wordpress/wp-includes/template.php(725): load_template()
#16 /usr/share/nginx/wordpress/wp-includes/general-template.php(48): locate_template()
#17 /usr/share/nginx/wordpress/wp-content/themes/graphy/home.php(10): get_header()
#18 /usr/share/nginx/wordpress/wp-includes/template-loader.php(106): include('/usr/share/nginx/wordpress/wp-content/themes/graphy/home.php')
#19 /usr/share/nginx/wordpress/wp-blog-header.php(19): require_once('/usr/share/nginx/wordpress/wp-includes/template-loader.php')
#20 /usr/share/nginx/wordpress/index.php(17): require('/usr/share/nginx/wordpress/wp-blog-header.php')
#21 {main}
thrown in /usr/share/nginx/wordpress/wp-admin/includes/class-wp-filesystem-ftpext.php on line 438
In going through the plugin’s code with the stack trace above, I believe the issue is your call to this method: WP_Filesystem_Base::wp_content_dir()
. This method is called on lines 532 and 533 of classes/Visualizer/Module.php
. Changing these lines to use WP_CONTENT_DIR
alleviated the error.
And in searching the code to the other plugins I have installed, it appears yours is the only one (of my set, at least) using the wp_content_dir()
method to get the content directory path. You should change that to use the WP_CONTENT_DIR
variable directly instead since there appears to be an issue with the wp_content_dir method on some setups. I am not seeing any adverse side-effects with the plugin with that change.
Hi,
When I was testing updating to PHP 8.2, I get this deprecation notice:
PHP Deprecated: auto_detect_line_endings is deprecated in /var/www/html/public/content/plugins/visualizer/classes/Visualizer/Source/Csv.php on line 119
I’m using v3.10.4.
]]>Hello, after update to WordPress v6.3.2 and PHP v8.2.12
the website has a “critical error” and crashes if the Visualizer-Plugin is activated- After deactivating this plugin the website is working again.
We can’t see the reason exactly.
BR Hermann
I have a problem and that is that when I activate Visualizer, the galleries of the Gallery with thumbnail slider plugin (https://es.www.ads-software.com/plugins/gallery-with-thumbnail-slider/) are deactivated and the error “Uncaught SyntaxError: Unexpected token” appears. ‘<‘” on the page where the galleries are, how do I solve it?
]]>Hello i am tryinh to build a simple chart where on X i have date, on y a value and in the chart ineed to show the point that indicated the event that generates
DATE,AMOUNT,TITLE
string,number,string
1/1/2022,1000, caravaggio
like this
but i get error
It seems i can only have number a part of 1 string
How do i do that?
Hi,
I’ve already replied to another thread because of this problem: I’ve been using the FREE version of the plugin for about a year but now I’m reading the error “Not showing structured data for chart because description is empty” where once was my graph (checking the DOM). What’s going on here?
]]>Having a problem when using define( ‘FS_METHOD’, ‘ssh2’ ) in the config.php causes a crash. Have you seen this?
]]>Thanks for the great plugin!
Google reports me the following problem on the pages with the visualizer:
Text is too small to read
Pages with this problem do not have high usability
How can I fix this problem in CSS?
Thanks in advance
Regards
Michael
Hello. I’ve just installed your charts plugin, and I’ve successfully integrated it into a Gravity Forms form, which is fantastic. I’d like to be able to add a point to the chart based on form data (in real-time). Is it possible to use a hook or a function to highlight a point on an existing chart? I’m not a premium customer yet, but if you tell me this is doable, I’ll certainly sign up. Thank you very much for any insights you can provide.
]]>