Changeset 3228269

Timestamp:

01/24/2025 11:14:41 PM (13 months ago)

Author:

xpro

Message:

V 1.2.8.3 - 25 January 2025

• Fix: Resolved vulnerability private post content via shortcode.

Location:

xpro-theme-builder/trunk

Files:

• changelog.txt (modified) (1 diff)
• plugin.php (modified) (1 diff)
• readme.txt (modified) (2 diffs)
• xpro-theme-builder.php (modified) (1 diff)

xpro-theme-builder/trunk/changelog.txt

@@ +1 @@
+= V 1.2.8.3 - 25 January 2025 =
+
+- Fix: Resolved vulnerability private post content via shortcode.
+
+
 = V 1.2.8.2 - 01 November 2024 =
 

xpro-theme-builder/trunk/plugin.php

@@ -334 +334 @@
         }
 
+        // if post type private and user can not read the post
+            $post = get_post( $id );
+            if ( ! $post || $post->post_status === 'private' && ! current_user_can( 'read_post', $id ) ) {
+            wp_die( __( 'You are not allowed to access this post.', 'xpro-elementor-addons' ), 403 );
+        }
+
         if ( self::$elementor_instance ) {
             if ( class_exists( '\Elementor\Core\Files\CSS\Post' ) ) {

xpro-theme-builder/trunk/readme.txt

@@ -1 +1 @@
 === Xpro Theme Builder For Elementor - FREE ===
 Plugin Name: Xpro Theme Builder For Elementor - FREE
-Version: 1.2.8.2
+Version: 1.2.8.3
 Contributors: Xpro
 Tags: elementor, theme builder, header footer builder, sticky header, free theme builder
@@ -290 +290 @@
 == Changelog ==
 
+= V 1.2.8.3 - 25 January 2025 =
+
+- Fix: Resolved vulnerability private post content via shortcode.
+
+
 = V 1.2.8.2 - 01 November 2024 =
 

xpro-theme-builder/trunk/xpro-theme-builder.php

@@ -6 +6 @@
  * Author:      Xpro
  * Author URI:  https://www.wpxpro.com/
- * Version:     1.2.8.2
+ * Version:     1.2.8.3
  * Developer:   Xpro Team
  * Text Domain: xpro-theme-builder
- * Elementor tested up to: 3.25.3
+ * Elementor tested up to: 3.27.1
  *
  * @package xpro-theme-builder
  */
 
-define( 'XPRO_THEME_BUILDER_VER', '1.2.8.2' );
+define( 'XPRO_THEME_BUILDER_VER', '1.2.8.3' );
 define( 'XPRO_THEME_BUILDER_FILE', __FILE__ );
 define( 'XPRO_THEME_BUILDER_BASE', plugin_basename( __FILE__ ) );