Starfish Reviews (Premium)

Starfish Reviews (Premium) 3.1.24

Keine Berechtigung zum Herunterladen
* Compatibility:
*Tested against WordPress 7.0.2; declared Requires at least 6.0 and Requires PHP 7.4 in the plugin header.
*Removed all uses of FILTER_SANITIZE_STRING, deprecated as of PHP 8.1.
*Fixed PHP 8 warnings in the logging and migration routines.
*Fixed plugin translations not loading due to an incorrect textdomain path.
* Security:
*Fixed a SQL injection in the collection reviews query.
*Fixed SQL injection via the sort order on the Reviews and Review Profiles admin screens.
*Added missing capability checks to eight admin AJAX actions.
*Added missing capability and nonce checks to the review and profile bulk delete actions.
*Fixed stored cross-site scripting in the review details and review profile admin dialogs.
*Fixed cross-site scripting in the plugin log console and in dismissible admin notices.
*Moved the debug log out of the plugin directory to a protected, non-guessable location and removed any previously exposed log file.
*Hardened the review scrape callback endpoint against unsolicited and oversized payloads.
*Review URL validation now uses WordPress' safe HTTP API with TLS verification enabled.
* Fixes:
*Fixed profile lookup by job id, which previously never matched a record.
*Fixed collection filter cleanup not running when a review profile was deleted.
*Fixed random sort order in collections.
*Removed a registered AJAX action whose handler did not exist.
* Fixes:
*Fixed an issue Unauthenticated Arbitrary Feedback Modification via 'feedback_id'.
* Fixes:
*Fixed an issue with the cron-based auto-scrape feature.
Zurück
Oben