Changeset 3459703

Timestamp:

02/12/2026 09:30:11 AM (5 days ago)

Author:

10web

Message:

• Fixed: Security issue.

Location:

form-maker/trunk

Files:

• form-maker.php (modified) (2 diffs)
• readme.txt (modified) (2 diffs)
• wd/includes/deactivate.php (modified) (1 diff)

form-maker/trunk/form-maker.php

@@ -4 +4 @@
  * Plugin URI: https://10web.io/plugins/wordpress-form-maker/?utm_source=form_maker&utm_medium=free_plugin
  * Description: This plugin is a modern and advanced tool for easy and fast creating of a WordPress Form. The backend interface is intuitive and user friendly which allows users far from scripting and programming to create WordPress Forms.
- * Version: 1.15.36
+ * Version: 1.15.37
  * Author: 10Web Form Builder Team
  * Author URI: https://10web.io/plugins/?utm_source=form_maker&utm_medium=free_plugin 
@@ -27 +27 @@
   public $front_urls = array();
   public $main_file = '';
-  public $plugin_version = '1.15.36';
-  public $db_version = '2.15.36';
+  public $plugin_version = '1.15.37';
+  public $db_version = '2.15.37';
   public $menu_postfix = '_fm';
   public $plugin_postfix = '';

form-maker/trunk/readme.txt

@@ -4 +4 @@
 Requires at least: 4.6
 Tested up to: 6.8
-Stable tag: 1.15.36
+Stable tag: 1.15.37
 License: GPLv2 or later
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
@@ -558 +558 @@
 
 == Changelog ==
+
+= 1.15.37 =
+* Fixed: Security issue.
 
 = 1.15.36 =

form-maker/trunk/wd/includes/deactivate.php

@@ -74 +74 @@
   public function submit_and_deactivate() {
     $wd_options = $this->config;
-    if ( isset($_POST[$wd_options->prefix . "_submit_and_deactivate"]) ) {
+    if ( isset($_POST[$wd_options->prefix . "_submit_and_deactivate"]) && wp_verify_nonce($_POST[$wd_options->prefix . '_save_form_fild'], $wd_options->prefix . '_save_form') ) {
 
       if ( $_POST[$wd_options->prefix . "_submit_and_deactivate"] == 2 || $_POST[$wd_options->prefix . "_submit_and_deactivate"] == 3 ) {