Changeset 3428744

Timestamp:

12/28/2025 09:58:07 PM (3 months ago)

Author:

marceljm

Message:

Fixing vulnerability

Location:

featured-image-from-url/trunk

Files:

• elementor/widgets/widget.php (modified) (1 diff)
• featured-image-from-url.php (modified) (1 diff)
• readme.txt (modified) (4 diffs)

featured-image-from-url/trunk/elementor/widgets/widget.php

@@ -89 +89 @@
                     if ($image_url && filter_var($image_url, FILTER_VALIDATE_URL) === false)
                         $image_url = '';
+
+                    if ($image_url) {
+                        $validated_url = wp_http_validate_url($image_url);
+                        if ($validated_url === false) {
+                            continue;
+                        }
+                        $image_url = $validated_url;
+                    }
+
                     fifu_dev_set_image($post_id, $image_url);
                     $att_id = get_post_thumbnail_id($post_id);

featured-image-from-url/trunk/featured-image-from-url.php

@@ -5 +5 @@
  * Plugin URI: https://fifu.app/
  * Description: Use remote media as the featured image and beyond.
- * Version: 5.3.1
+ * Version: 5.3.2
  * Author: fifu.app
  * Author URI: https://fifu.app/
  * WC requires at least: 4.0
- * WC tested up to: 10.3.4
+ * WC tested up to: 10.4.3
  * Text Domain: featured-image-from-url
  * License: GPLv3

featured-image-from-url/trunk/readme.txt

@@ -4 +4 @@
 Tags: featured, image, url, video, woocommerce
 Requires at least: 5.6
-Tested up to: 6.8.3
-Stable tag: 5.3.1
+Tested up to: 6.9
+Stable tag: 5.3.2
 License: GPLv3
 License URI: https://www.gnu.org/licenses/gpl-3.0.html
@@ -248 +248 @@
 == Changelog ==
 
+= 5.3.2 =
+* Fix: vulnerability reported by Wordfence team.
+
 = 5.3.1 =
 * New feature: Auto-share on social media; Fix: Featured image might not be displaying on X.
@@ -275 +278 @@
 * Fix: the plugin was being translated into the site language instead of the user language; Fix: input field for featured image.
 
-= 5.2.2 =
-* New: WordPress block for remote featured images; Enhancement: Alternative Text field added to the Elementor widget; Enhancement: Registers are no longer listed in the Custom Fields box; Enhancements and fixes: Input fields for posts, products, and categories; Fix: Images were being cropped unnecessarily in WooCommerce.
-
 = others =
 * [more](https://fifu.app/changelog)
@@ -284 +284 @@
 == Upgrade Notice ==
 
-= 5.3.1 =
-* New feature: Auto-share on social media; Fix: Featured image might not be displaying on X.
+= 5.3.2 =
+* Fix: vulnerability reported by Wordfence team.