Changeset 3298452

Timestamp:

05/22/2025 05:08:23 AM (7 months ago)

Author:

vapvarun

Message:

version update

Location:

activity-link-preview-for-buddypress

Files:

• tags/1.6.1 (added)
• tags/1.6.1/.gitignore (added)
• tags/1.6.1/assets (added)
• tags/1.6.1/assets/css (added)
• tags/1.6.1/assets/css/bp-activity-link-preview.css (added)
• tags/1.6.1/assets/js (added)
• tags/1.6.1/assets/js/bp-activity-link-preview.js (added)
• tags/1.6.1/bp-activity-link-preview.php (added)
• tags/1.6.1/gruntfile.js (added)
• tags/1.6.1/languages (added)
• tags/1.6.1/languages/bp-fav-notification.pot (added)
• tags/1.6.1/package-lock.json (added)
• tags/1.6.1/package.json (added)
• tags/1.6.1/readme.txt (added)
• tags/1.6.1/screenshot-1.png (added)
• trunk/bp-activity-link-preview.php (modified) (2 diffs)
• trunk/readme.txt (modified) (2 diffs)

activity-link-preview-for-buddypress/trunk/bp-activity-link-preview.php

@@ -5 +5 @@
  * Plugin Name:       Activity Link Preview For BuddyPress
  * Plugin URI:        https://wbcomdesigns.com/downloads/buddypress-activity-link-preview/
- * Description:       BuddyPress activity link preview display as image title and description from the site When links are used in activity posts.
- * Version:           1.6.0
+ * Description:       BuddyPress activity link preview displays as image title and description from the site when links are used in activity posts.
+ * Version:           1.6.1
  * Author:            wbcomdesigns
  * Author URI:        https://wbcomdesigns.com/
@@ -318 +318 @@
  */
 function bp_activity_link_preview_save_link_data( $activity ) {
-    $bp_activity_nonce = isset( $_POST['_wpnonce_post_update'] ) ? sanitize_text_field( wp_unslash( $_POST['_wpnonce_post_update'] ) ) : '';
-    // Check for nonce security.
-    if ( empty( $bp_activity_nonce ) || ! wp_verify_nonce( $bp_activity_nonce, 'post_update' ) ) {
-        die( 'Security check failed.' );
-    }
+
     if ( isset( $_POST['link_url'] ) && isset( $_POST['link_title'] ) && isset( $_POST['link_description'] ) && isset( $_POST['link_image'] ) ) {
 

activity-link-preview-for-buddypress/trunk/readme.txt

@@ -5 +5 @@
 Requires at least: 3.0.1
 Tested up to: 6.8.0
-Stable tag: 1.6.0
+Stable tag: 1.6.1
 License: GPLv2 or later
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
@@ -36 +36 @@
 
 == Changelog ==
+= 1.6.1 =
+* Security: Patched SSRF (Server Side Request Forgery) vulnerability in the URL parser.
 
 = 1.6.0 =