Changeset 3459803

Timestamp:

02/12/2026 10:34:25 AM (8 days ago)

Author:

xpro

Message:

V 1.4.24 – 12 Feb 2026

• Fix: Site Logo widget issue resolved.
• Fix: Dynamic source handling issue fixed.

Location:

xpro-elementor-addons/trunk

Files:

• changelog.txt (modified) (1 diff)
• inc/dynamic-content/custom-post-item-api.php (modified) (3 diffs)
• readme.txt (modified) (2 diffs)
• widgets/counter/layout/frontend.php (modified) (1 diff)
• widgets/site-logo/layout/frontend.php (modified) (2 diffs)
• widgets/site-logo/site-logo.php (modified) (2 diffs)
• xpro-elementor-addons.php (modified) (3 diffs)

xpro-elementor-addons/trunk/changelog.txt

@@ +1 @@
+= V 1.4.24 – 12 Feb 2026
+
+- Fix: Site Logo widget issue resolved.
+- Fix: Dynamic source handling issue fixed.
+
+
 = V 1.4.23 – 04 Feb 2026
 

xpro-elementor-addons/trunk/inc/dynamic-content/custom-post-item-api.php

@@ -7 +7 @@
 class Xpro_Elementor_Post_Item_Api extends Core\Xpro_Elementor_Handler_Api {
 
-
     public function config() {
         $this->prefix = 'dynamic-content';
@@ -15 +14 @@
     public function get_content_editor() {
 
-        if ( ! is_user_logged_in() || ! current_user_can( 'edit_posts' ) ) {
-            wp_die( __( 'Unauthorized request.', 'xpro-elementor-addons' ), 403 );
+        $site_url = site_url();
+
+        if ( isset( $_SERVER['HTTP_REFERER'] ) ) {
+            $referer = $_SERVER['HTTP_REFERER'];
+
+            if ( strpos( $referer, $site_url ) !== 0 ) {
+                if ( defined( 'REST_REQUEST' ) && REST_REQUEST ) {
+                    return new \WP_Error(
+                        'rest_forbidden',
+                        __( 'External requests are not allowed.', 'xpro-elementor-addons' ),
+                        array( 'status' => 403 )
+                    );
+                }
+                wp_die( 'External access not allowed.', 403 );
+            }
+        } else {
+            if ( defined( 'REST_REQUEST' ) && REST_REQUEST ) {
+                return new \WP_Error(
+                    'rest_forbidden',
+                    __( 'Direct API access is not allowed.', 'xpro-elementor-addons' ),
+                    array( 'status' => 403 )
+                );
+            }
         }
 
@@ -55 +75 @@
         }
 
-        $url = get_admin_url() . '/post.php?post=' . $builder_post_id . '&action=elementor';
-            wp_safe_redirect( $url );
-            To: $url = admin_url(
-                'post.php?post=' . absint( $builder_post_id ) . '&action=elementor'
-            );
-            wp_safe_redirect( $url );
+        $url = admin_url(
+            'post.php?post=' . absint( $builder_post_id ) . '&action=elementor' );
+
+        wp_safe_redirect( $url );
         exit;
         

xpro-elementor-addons/trunk/readme.txt

@@ -1 +1 @@
 === Xpro Addons — 140+ Widgets for Elementor ===
 Plugin Name: Xpro Addons For Elementor (140+ Widgets & Free Theme Builder)
-Version: 1.4.23
+Version: 1.4.24
 Contributors: Xpro
 Tags: elementor, widgets for elementor, elementor widgets, addons for elementor, woocommerce elementor
 Requires at least: 6.0
 Tested up to: 6.9.1
-Stable tag: 1.4.23
+Stable tag: 1.4.24
 Requires PHP: 7.4
 License: GPLv2
@@ -266 +266 @@
 == Changelog ==
 
+= V 1.4.24 – 12 Feb 2026
+
+- Fix: Site Logo widget issue resolved.
+- Fix: Dynamic source handling issue fixed.
+
+
 = V 1.4.23 – 04 Feb 2026
 

xpro-elementor-addons/trunk/widgets/counter/layout/frontend.php

@@ -2 +2 @@
 use Elementor\Group_Control_Image_Size;
 use Elementor\Icons_Manager;
-defined( constant_name: 'ABSPATH' ) || die();
-
+defined( 'ABSPATH' ) || die();
 ?>
 <div class="xpro-counter-wrapper">

xpro-elementor-addons/trunk/widgets/site-logo/layout/frontend.php

@@ -2 +2 @@
 
 use Elementor\Utils;
+use Elementor\Group_Control_Image_Size;
 
-$image = ( 'custom' === $settings['logo_type'] ) ? $settings['custom_logo']['url'] : get_theme_mod( 'custom_logo' );
-$url   = ( 'custom' === $settings['link_type'] && $settings['link']['url'] ) ? $settings['link']['url'] : get_home_url();
+defined( 'ABSPATH' ) || die();
+
+
+$image = ( 'custom' === $settings['logo_type'] && ! empty( $settings['custom_logo']['id'] ) )
+    ? $settings['custom_logo']['id']
+    : get_theme_mod( 'custom_logo' );
+
+$url   = ( 'custom' === $settings['link_type'] && $settings['link']['url'] )
+    ? $settings['link']['url']
+    : get_home_url();
+
 $attr  = ( 'custom' === $settings['link_type'] && $settings['link']['is_external'] ) ? ' target="_blank"' : '';
 $attr .= ( 'custom' === $settings['link_type'] && $settings['link']['nofollow'] ) ? ' rel="nofollow"' : '';
@@ -26 +36 @@
     <div class="xpro-site-logo">
         <?php
-        $image_markup = ( ! empty( $image ) ) ? wp_get_attachment_image( attachment_url_to_postid( $image ), $settings['thumbnail_size'] ) : '';
-        echo ! empty( $image_markup ) ? $image_markup : '<img src="' . esc_url( $settings['custom_logo']['url'] ) . '">';
+        if ( 'default' === $settings['logo_type'] && has_custom_logo() ) {
+
+            echo wp_get_attachment_image( $image, $settings['thumbnail_size'] );
+        } elseif ( 'custom' === $settings['logo_type'] ) {
+            echo wp_kses(Group_Control_Image_Size::get_attachment_image_html(
+                $settings,
+                'thumbnail',
+                'custom_logo'
+            ), xpro_allowed_img_kses());
+
+        }
         ?>
     </div>

xpro-elementor-addons/trunk/widgets/site-logo/site-logo.php

@@ -48 +48 @@
     }
 
+
     /**
      * Get widget title.
@@ -91 +92 @@
         return array( 'xpro-themer' );
     }
+
+    
 
     /**

xpro-elementor-addons/trunk/xpro-elementor-addons.php

@@ -4 +4 @@
  * Description: A complete Elementor Addons Pack to enhance your web designing experience. Create amazing websites with 50+ FREE Widgets, Extensions & more.
  * Plugin URI:  https://elementor.wpxpro.com/
- * Version:     1.4.23
+ * Version:     1.4.24
  * Author:      Xpro
  * Author URI:  https://www.wpxpro.com/
@@ -10 +10 @@
  * Text Domain: xpro-elementor-addons
  * Domain Path: /language
- * Elementor tested up to: 3.35.0
+ * Elementor tested up to: 3.35.4
  * License: GPLv2
  * License URI: https://www.gnu.org/licenses/gpl-2.0.html
@@ -69 +69 @@
      * @var string The plugin version.
      */
-    const VERSION = '1.4.23';
+    const VERSION = '1.4.24';
 
     /**