Changeset 3348764

Timestamp:

08/22/2025 05:54:13 PM (6 months ago)

Author:

xpro

Message:

V 1.4.18 – 22 Aug 2025

• Fix: Resolved vulnerability in the Info List Widget.

Location:

xpro-elementor-addons/trunk

Files:

• changelog.txt (modified) (1 diff)
• readme.txt (modified) (2 diffs)
• widgets/info-list/layout/frontend.php (modified) (1 diff)
• xpro-elementor-addons.php (modified) (2 diffs)

xpro-elementor-addons/trunk/changelog.txt

@@ +1 @@
+
+= V 1.4.18 – 22 Aug 2025
+
+- Fix: Resolved vulnerability in the Info List Widget.
+
 
 = V 1.4.17 – 11 Aug 2025
 
-Fix: Improved and optimized CSS in the Social Icon widget.
-Fix: Resolved a bug in the MailChimp Widget.
-Fix: Fixed controls not working in the Text Marquee Widget.
-Fix: Fixed icon color issue in the Carousel Portfolio Widget.
-New: Added style layouts and scroll animations to the Vertical Timeline Widget.
-New: Added multiple selection and exclude options in the Ajax Live Search Widget.
+- Fix: Improved and optimized CSS in the Social Icon widget.
+- Fix: Resolved a bug in the MailChimp Widget.
+- Fix: Fixed controls not working in the Text Marquee Widget.
+- Fix: Fixed icon color issue in the Carousel Portfolio Widget.
+- New: Added style layouts and scroll animations to the Vertical Timeline Widget.
+- New: Added multiple selection and exclude options in the Ajax Live Search Widget.
 
 

xpro-elementor-addons/trunk/readme.txt

@@ -1 +1 @@
 === 140+ Widgets | Xpro Addons For Elementor - FREE ===
 Plugin Name: Xpro Addons For Elementor (140+ Widgets & Free Theme Builder)
-Version: 1.4.17
+Version: 1.4.18
 Contributors: Xpro
 Tags: elementor, widgets for elementor, elementor widgets, addons for elementor, woocommerce elementor
@@ -266 +266 @@
 == Changelog ==
 
+= V 1.4.18 – 22 Aug 2025
+
+- Fix: Resolved vulnerability in the Info List Widget.
+
+
 = V 1.4.17 – 11 Aug 2025
 
-Fix: Improved and optimized CSS in the Social Icon widget.
-Fix: Resolved a bug in the MailChimp Widget.
-Fix: Fixed controls not working in the Text Marquee Widget.
-Fix: Fixed icon color issue in the Carousel Portfolio Widget.
-New: Added style layouts and scroll animations to the Vertical Timeline Widget.
-New: Added multiple selection and exclude options in the Ajax Live Search Widget.
+- Fix: Improved and optimized CSS in the Social Icon widget.
+- Fix: Resolved a bug in the MailChimp Widget.
+- Fix: Fixed controls not working in the Text Marquee Widget.
+- Fix: Fixed icon color issue in the Carousel Portfolio Widget.
+- New: Added style layouts and scroll animations to the Vertical Timeline Widget.
+- New: Added multiple selection and exclude options in the Ajax Live Search Widget.
 
 

xpro-elementor-addons/trunk/widgets/info-list/layout/frontend.php

@@ -46 +46 @@
 
             <div class="xpro-infolist-content">
-                <?php if ( $item['title'] ) : ?>
-                    <<?php echo esc_attr( sanitize_key($item['title_tag']) ); ?> class="xpro-infolist-title"><?php echo esc_html( $item['title'] ); ?></<?php echo esc_attr( sanitize_key($item['title_tag']) ); ?>>
-                <?php endif; ?>
+                <?php if ( $item['title'] ) :
+
+                    $html_tag = isset( $item['title_tag'] ) ? strtolower( sanitize_key( $item['title_tag'] ) ) : 'h2';
+                    $allowed_tags = array( 'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'div', 'span' );
+                    
+                    if ( ! in_array( $html_tag, $allowed_tags, true ) ) {
+                        $html_tag = 'h2';
+                    }
+
+                ?>
+                <<?php echo esc_attr( $html_tag ); ?> class="xpro-infolist-title"> <?php echo esc_html( $item['title'] ); ?> </<?php echo esc_attr( $html_tag ); ?>>
+                <?php endif; ?>
                 <?php if ( $item['description'] ) : ?>
                     <p class="xpro-infolist-desc"><?php echo wp_kses_post( $item['description'] ); ?></p>

xpro-elementor-addons/trunk/xpro-elementor-addons.php

@@ -4 +4 @@
  * Description: A complete Elementor Addons Pack to enhance your web designing experience. Create amazing websites with 50+ FREE Widgets, Extensions & more.
  * Plugin URI:  https://elementor.wpxpro.com/
- * Version:     1.4.17
+ * Version:     1.4.18
  * Author:      Xpro
  * Author URI:  https://www.wpxpro.com/
  * Developer:   Xpro Team
  * Text Domain: xpro-elementor-addons
- * Elementor tested up to: 3.31.1
+ * Elementor tested up to: 3.31.2
  */
 
 defined( 'ABSPATH' ) || die();
 
-define( 'XPRO_ELEMENTOR_ADDONS_VERSION', '1.4.17' );
+define( 'XPRO_ELEMENTOR_ADDONS_VERSION', '1.4.18' );
 define( 'XPRO_ELEMENTOR_ADDONS__FILE__', __FILE__ );
 define( 'XPRO_ELEMENTOR_ADDONS_BASE', plugin_basename( __FILE__ ) );
@@ -66 +66 @@
      * @var string The plugin version.
      */
-    const VERSION = '1.4.17';
+    const VERSION = '1.4.18';
 
     /**