WordPress.org
Get WordPress

Plugin Directory

Changeset 3248584


Ignore:
Timestamp:
02/28/2025 03:52:43 PM (12 months ago)
Author:
xpro
Message:

V 1.4.6.8 – 28 Feb 2025

Fix: Resolved vulnerability issue in the Button Widget.
Fix: Resolved vulnerability issue in the Animated Link Widget.

Location:
xpro-elementor-addons/trunk
Files:
8 edited

Legend:

Unmodified
Added
Removed

  • xpro-elementor-addons/trunk/assets/js/xpro-widgets.js

    r3246393 r3248584  
    517517                r = "",
    518518                a = e.find("#xpro-icon-box-lottie");
    519                 console.log(i);
    520519            "" !== t.hover_animation &&
    521520                i.hover(

  • xpro-elementor-addons/trunk/changelog.txt

    r3246393 r3248584  
     1= V 1.4.6.8 – 28 Feb 2025
     2
     3Fix: Resolved vulnerability issue in the Button Widget.
     4Fix: Resolved vulnerability issue in the Animated Link Widget.
     5
     6
    17= V 1.4.6.7 – 25 Feb 2025
    28

  • xpro-elementor-addons/trunk/readme.txt

    r3246393 r3248584  
    11=== 140+ Widgets | Xpro Addons For Elementor - FREE ===
    22Plugin Name: Xpro Addons For Elementor (140+ Widgets & Free Theme Builder)
    3 Version: 1.4.6.7
     3Version: 1.4.6.8
    44Contributors: Xpro
    55Tags: elementor, widgets for elementor, elementor widgets, addons for elementor, woocommerce elementor
    … …  
    266266== Changelog ==
    267267
     268= V 1.4.6.8 – 28 Feb 2025
     269
     270Fix: Resolved vulnerability issue in the Button Widget.
     271Fix: Resolved vulnerability issue in the Animated Link Widget.
     272
     273
    268274= V 1.4.6.7 – 25 Feb 2025
    269275

  • xpro-elementor-addons/trunk/widgets/animated-link/animated-link.php

    r3246393 r3248584  
    229229        );
    230230
    231         if ( current_user_can( 'administrator' ) ) {
     231        if ( current_user_can( 'manage_options' ) ) {
    232232            $this->add_control(
    233233                'onclick_event',
    … …  
    363363    }
    364364
     365    public static function check_capability( $capability ) {
     366        $post = get_post();
     367        if ( ! $post ) {
     368            return false;
     369        }
     370        $post_author_id = $post->post_author;
     371        return user_can( $post_author_id, $capability );
     372    }
     373
    365374    /**
    366375     * Render image widget output on the frontend.

  • xpro-elementor-addons/trunk/widgets/animated-link/layout/frontend.php

    r3235058 r3248584  
    99$attr    .= $settings['link']['is_external'] ? ' target="_blank"' : '';
    1010$attr    .= $settings['link']['nofollow'] ? ' rel="nofollow"' : '';
    11 
    12 // Sanitize the link URL
    1311$attr    .= $settings['link']['url'] ? ' href="' . esc_url( $settings['link']['url'] ) . '"' : '';
    1412
    15 // Sanitize the onclick event
    1613// $attr    .= ( $settings['onclick_event'] ) ? ' onclick="' . esc_js( $settings['onclick_event'] ) . '"' : '';
    17 $attr .= !empty( $settings['onclick_event'] ?? '' )  ? ' onclick="' . esc_js( $settings['onclick_event'] ) . '"'  : '';
     14
     15if ( !empty( $settings['onclick_event'] ) && self::check_capability( 'manage_options' ) ) {
     16    $attr .= ' onclick="' . esc_attr( $settings['onclick_event'] ) . '"';
     17}
    1818
    1919if ( $settings['link'] && $settings['link']['custom_attributes'] ) {

  • xpro-elementor-addons/trunk/widgets/button/button.php

    r3246393 r3248584  
    257257        );
    258258
    259         if ( current_user_can( 'administrator' ) ) {
     259        if ( current_user_can( 'manage_options' ) ) {
    260260            $this->add_control(
    261261                'onclick_event',
    … …  
    744744    }
    745745
     746    public static function check_capability( $capability ) {
     747        $post = get_post();
     748        if ( ! $post ) {
     749            return false;
     750        }
     751        $post_author_id = $post->post_author;
     752        return user_can( $post_author_id, $capability );
     753    }
     754
    746755    /**
    747756     * Render image widget output on the frontend.

  • xpro-elementor-addons/trunk/widgets/button/layout/frontend.php

    r3235058 r3248584  
    99$attr    .= $settings['link']['url'] ? ' href="' . esc_url ( $settings['link']['url'] ) . '"' : '';
    1010// $attr    .= ( $settings['onclick_event'] ) ? ' onclick="' . esc_js ( $settings['onclick_event'] ) . '"' : '';
    11 $attr .= !empty( $settings['onclick_event'] ?? '' )  ? ' onclick="' . esc_js( $settings['onclick_event'] ) . '"'  : '';
     11
     12if ( !empty( $settings['onclick_event'] ) && self::check_capability( 'manage_options' ) ) {
     13    $attr .= ' onclick="' . esc_attr( $settings['onclick_event'] ) . '"';
     14}
    1215
    1316if ( $settings['link'] && $settings['link']['custom_attributes'] ) {

  • xpro-elementor-addons/trunk/xpro-elementor-addons.php

    r3246393 r3248584  
    44 * Description: A complete Elementor Addons Pack to enhance your web designing experience. Create amazing websites with 50+ FREE Widgets, Extensions & more.
    55 * Plugin URI:  https://elementor.wpxpro.com/
    6  * Version:     1.4.6.7
     6 * Version:     1.4.6.8
    77 * Author:      Xpro
    88 * Author URI:  https://www.wpxpro.com/
    … …  
    1414defined( 'ABSPATH' ) || die();
    1515
    16 define( 'XPRO_ELEMENTOR_ADDONS_VERSION', '1.4.6.7' );
     16define( 'XPRO_ELEMENTOR_ADDONS_VERSION', '1.4.6.8' );
    1717define( 'INNER_ELEMENTOR_WIDGET_CONTAINER', false );
    1818define( 'XPRO_ELEMENTOR_ADDONS__FILE__', __FILE__ );
    … …  
    6767     * @var string The plugin version.
    6868     */
    69     const VERSION = '1.4.6.7';
     69    const VERSION = '1.4.6.8';
    7070
    7171    /**
Note: See TracChangeset for help on using the changeset viewer.