Changeset 3180569

Timestamp:

11/03/2024 06:25:40 AM (14 months ago)

Author:

10web

Message:

Fixed: Security fix.

Location:

slider-wd/trunk

Files:

• readme.txt (modified) (2 diffs)
• slider-wd.php (modified) (2 diffs)
• wd/includes/notices.php (modified) (3 diffs)

slider-wd/trunk/readme.txt

@@ -5 +5 @@
 Tested up to: 5.8
 Requires PHP: 5.2
-Stable tag: 1.2.60
+Stable tag: 1.2.61
 License: GPLv2 or later
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
@@ -20 +20 @@
 == Changelog ==
 
+
+= 1.2.61 =
+* Fixed: Security issue.
 
 = 1.2.60 =

slider-wd/trunk/slider-wd.php

@@ -4 +4 @@
  * Plugin URI: https://10web.io/plugins/wordpress-slider/?utm_source=slider&utm_medium=free_plugin
  * Description: This is a responsive plugin, which allows adding sliders to your posts/pages and to custom location. It uses large number of transition effects and supports various types of layers.
- * Version: 1.2.60
+ * Version: 1.2.61
  * Author: 10Web
  * Author URI: https://10web.io/pricing/?utm_source=slider&utm_medium=free_plugin
@@ -80 +80 @@
     $this->plugin_url = plugins_url(plugin_basename(dirname(__FILE__)));
     $this->main_file = plugin_basename(__FILE__);
-    $this->plugin_version = '1.2.60';
-    $this->db_version = '1.2.60';
+    $this->plugin_version = '1.2.61';
+    $this->db_version = '1.2.61';
     $this->prefix = 'wds';
     $this->nicename = __('Slider', $this->prefix);

slider-wd/trunk/wd/includes/notices.php

@@ -98 +98 @@
                                 <p class="wd-notice-body">' . $admin_display_msg . '</p>
                                 <ul class="wd-notice-body wd-blue">' . $admin_display_link . '</ul>
-                                <a href="' . $query_str . '" class="dashicons dashicons-dismiss"></a>
+                                <a href="' . esc_url($query_str) . '" class="dashicons dashicons-dismiss"></a>
                               </div>';
                     }
@@ -107 +107 @@
                                     ' . $admin_display_link . '
                                   </ul>';
-                        echo '<a href="' . $query_str . '" class="dashicons dashicons-dismiss close-promo"></a>';
+                        echo '<a href="' . esc_url($query_str) . '" class="dashicons dashicons-dismiss close-promo"></a>';
                         echo '</div>';
                     }
@@ -212 +212 @@
           'msg' => sprintf(__('We hope you\'ve enjoyed using WordPress %s! Would you consider leaving us a review on WordPress.org?', $wd_options->prefix), $wd_options->plugin_title),
           'link' => '<li><span class="dashicons dashicons-external"></span><a href="https://wordpress.org/support/plugin/' . $wd_options->plugin_wordpress_slug . '/reviews?filter=5&rate=5#new-post" target="_blank">' . __('Sure! I\'d love to!', $wd_options->prefix) . '</a></li>
-                         <li><span class="dashicons dashicons-smiley"></span><a href="' . $two_week_review_ignore . '"> ' . __('I\'ve already left a review', $wd_options->prefix) . '</a></li>
-                         <li><span class="dashicons dashicons-calendar-alt"></span><a href="' . $two_week_review_temp . '">' . __('Maybe Later', $wd_options->prefix) . '</a></li>
-                         <li><span class="dashicons dashicons-dismiss"></span><a href="' . $two_week_review_ignore . '">' . __('Never show again', $wd_options->prefix) . '</a></li>',
+                         <li><span class="dashicons dashicons-smiley"></span><a href="' . esc_url($two_week_review_ignore) . '"> ' . __('I\'ve already left a review', $wd_options->prefix) . '</a></li>
+                         <li><span class="dashicons dashicons-calendar-alt"></span><a href="' . esc_url($two_week_review_temp) . '">' . __('Maybe Later', $wd_options->prefix) . '</a></li>
+                         <li><span class="dashicons dashicons-dismiss"></span><a href="' . esc_url($two_week_review_ignore) . '">' . __('Never show again', $wd_options->prefix) . '</a></li>',
           'later_link' => $two_week_review_temp,
           'int' => 14