Changeset 3436301

Timestamp:

01/09/2026 09:06:15 PM (6 weeks ago)

Author:

Rustaurius

Message:

v2.7.9 released and tagged

Location:

restaurant-reservations

Files:

• tags/2.7.9 (copied) (copied from restaurant-reservations/trunk)
• tags/2.7.9/includes/WP_List_Table.BookingsTable.class.php (modified) (1 diff)
• tags/2.7.9/readme.txt (modified) (2 diffs)
• tags/2.7.9/restaurant-reservations.php (modified) (2 diffs)
• trunk/includes/WP_List_Table.BookingsTable.class.php (modified) (1 diff)
• trunk/readme.txt (modified) (2 diffs)
• trunk/restaurant-reservations.php (modified) (2 diffs)

restaurant-reservations/tags/2.7.9/includes/WP_List_Table.BookingsTable.class.php

@@ -886 +886 @@
         }
 
+        $nonce        = isset( $_POST['_wpnonce'] ) ? $_POST['_wpnonce'] : '';
+        if ( ! wp_verify_nonce( $nonce, 'bulk-' . $this->_args['plural'] ) ) {
+            return;
+        }
+
         if ( !current_user_can( 'manage_bookings' ) ) {
             return;

restaurant-reservations/tags/2.7.9/readme.txt

@@ -3 +3 @@
 Tested Up To: 6.9
 Tags: reservation, reservations, restaurant reservations, reservation form, restaurant, restaurant booking, restaurant reservation form, restaurant booking form, restaurant booking system, reservation system, online reservations, online restaurant booking, dinner reservations, restaurant form, gutenberg reservations, gutenberg restaurant reservations, gutenberg restaurant booking, mobile reservations, responsive reservations, table reservations, open table, book table, reserve table, easy reservations, simple reservations, quick restaurant reservations, custom reservation form, custom restaurant reservations
-Stable tag: 2.7.8
+Stable tag: 2.7.9
 License: GPLv3
 License URI: https://www.gnu.org/licenses/gpl-3.0.html
@@ -303 +303 @@
 == Changelog ==
 
+= 2.7.9 (2026-01-09) =
+- Patch for low priority/no impact CSRF vulnerability reported by Patchstack.
+
 = 2.7.8 (2025-12-18) =
 - Fix: When updating a booking from the admin, notifications were being sent all the time instead of only when the "Send notifications" box was checked.

restaurant-reservations/tags/2.7.9/restaurant-reservations.php

@@ -4 +4 @@
  * Plugin URI: http://www.fivestarplugins.com/plugins/five-star-restaurant-reservations/
  * Description: Restaurant reservations made easy. Accept bookings online. Quickly confirm or reject reservations, send email notifications, set booking times and more.
- * Version: 2.7.8
+ * Version: 2.7.9
  * Author: Five Star Plugins
  * Author URI: https://www.fivestarplugins.com/
@@ -59 +59 @@
 
         // Common strings
-        define( 'RTB_VERSION', '2.7.8' );
+        define( 'RTB_VERSION', '2.7.9' );
         define( 'RTB_PLUGIN_DIR', untrailingslashit( plugin_dir_path( __FILE__ ) ) );
         define( 'RTB_PLUGIN_URL', untrailingslashit( plugins_url( basename( plugin_dir_path( __FILE__ ) ), basename( __FILE__ ) ) ) );

restaurant-reservations/trunk/includes/WP_List_Table.BookingsTable.class.php

@@ -886 +886 @@
         }
 
+        $nonce        = isset( $_POST['_wpnonce'] ) ? $_POST['_wpnonce'] : '';
+        if ( ! wp_verify_nonce( $nonce, 'bulk-' . $this->_args['plural'] ) ) {
+            return;
+        }
+
         if ( !current_user_can( 'manage_bookings' ) ) {
             return;

restaurant-reservations/trunk/readme.txt

@@ -3 +3 @@
 Tested Up To: 6.9
 Tags: reservation, reservations, restaurant reservations, reservation form, restaurant, restaurant booking, restaurant reservation form, restaurant booking form, restaurant booking system, reservation system, online reservations, online restaurant booking, dinner reservations, restaurant form, gutenberg reservations, gutenberg restaurant reservations, gutenberg restaurant booking, mobile reservations, responsive reservations, table reservations, open table, book table, reserve table, easy reservations, simple reservations, quick restaurant reservations, custom reservation form, custom restaurant reservations
-Stable tag: 2.7.8
+Stable tag: 2.7.9
 License: GPLv3
 License URI: https://www.gnu.org/licenses/gpl-3.0.html
@@ -303 +303 @@
 == Changelog ==
 
+= 2.7.9 (2026-01-09) =
+- Patch for low priority/no impact CSRF vulnerability reported by Patchstack.
+
 = 2.7.8 (2025-12-18) =
 - Fix: When updating a booking from the admin, notifications were being sent all the time instead of only when the "Send notifications" box was checked.

restaurant-reservations/trunk/restaurant-reservations.php

@@ -4 +4 @@
  * Plugin URI: http://www.fivestarplugins.com/plugins/five-star-restaurant-reservations/
  * Description: Restaurant reservations made easy. Accept bookings online. Quickly confirm or reject reservations, send email notifications, set booking times and more.
- * Version: 2.7.8
+ * Version: 2.7.9
  * Author: Five Star Plugins
  * Author URI: https://www.fivestarplugins.com/
@@ -59 +59 @@
 
         // Common strings
-        define( 'RTB_VERSION', '2.7.8' );
+        define( 'RTB_VERSION', '2.7.9' );
         define( 'RTB_PLUGIN_DIR', untrailingslashit( plugin_dir_path( __FILE__ ) ) );
         define( 'RTB_PLUGIN_URL', untrailingslashit( plugins_url( basename( plugin_dir_path( __FILE__ ) ), basename( __FILE__ ) ) ) );