diff --git a/changelog.txt b/changelog.txt index d5418638..2aee518b 100644 --- a/changelog.txt +++ b/changelog.txt @@ -1,22 +1,31 @@ == Changelog == -= 2.9.2 December 16, 2024 = += 2.9.2 January 14, 2025 = * Enhancements: - Added: Compatibility with the new [Ultimate Member - Zapier](https://ultimatemember.com/extensions/zapier/) extension + - Added: Only approved user Reset Password setting defined as true by default - Added: `UM()->is_new_ui()` function for future enhancements related to new UI + - Added: Filter hook `um_before_user_submitted_registration_data` - Tweak: Changed hook's priority for initialization of email templates paths - Tweak: Removed `load_plugin_textdomain` due to (article)[https://make.wordpress.org/core/2024/10/21/i18n-improvements-6-7/#Enhanced-support-for-only-using-PHP-translation-files] * Bugfixes: + - Fixed: Security issue CVE ID: CVE-2025-0308 + - Fixed: Security issue CVE ID: CVE-2025-0318 - Fixed: Using placeholders in email templates when Action Scheduler is active. Using `fetch_user_id` attribute for fetching necessary user before sending email + - Fixed: PHP 8.4 compatibility. Using WordPress native `wp_is_mobile()` instead of MobileDetect library - Fixed: PHP errors related to `UM()->localize()` function - Fixed: PHP errors in user meta header when `last_update` meta is empty + - Fixed: Small CSS changes and avoid duplicates + - Fixed: Removed ms-native show password button for type="password" field in UM forms + - Fixed: Define scalable attribute for cropper * Deprecated: + - Fully deprecated `UM()->mobile()` function - Fully deprecated `UM()->localize()` function - Fully deprecated `um_language_textdomain` filter hook diff --git a/includes/class-init.php b/includes/class-init.php index e89a0c54..3312e35f 100644 --- a/includes/class-init.php +++ b/includes/class-init.php @@ -1460,10 +1460,10 @@ if ( ! class_exists( 'UM' ) ) { /** * @since 2.0 - * @deprecated 2.9.3 + * @deprecated 2.9.2 */ public function mobile() { - _deprecated_function( __METHOD__, '2.9.3', 'wp_is_mobile' ); + _deprecated_function( __METHOD__, '2.9.2', 'wp_is_mobile' ); } } } diff --git a/readme.txt b/readme.txt index e70377d5..d75558d4 100644 --- a/readme.txt +++ b/readme.txt @@ -167,23 +167,32 @@ No specific extensions are needed. But we highly recommended keep active these P IMPORTANT: PLEASE UPDATE THE PLUGIN TO AT LEAST VERSION 2.6.7 IMMEDIATELY. VERSION 2.6.7 PATCHES SECURITY PRIVILEGE ESCALATION VULNERABILITY. PLEASE SEE [THIS ARTICLE](https://docs.ultimatemember.com/article/1866-security-incident-update-and-recommended-actions) FOR MORE INFORMATION -= 2.9.2 2024-12-16 = += 2.9.2 2025-01-14 = **Enhancements** * Added: Compatibility with the new [Ultimate Member - Zapier](https://ultimatemember.com/extensions/zapier/) extension +* Added: Only approved user Reset Password setting defined as true by default * Added: `UM()->is_new_ui()` function for future enhancements related to new UI +* Added: Filter hook `um_before_user_submitted_registration_data` * Tweak: Changed hook's priority for initialization of email templates paths * Tweak: Removed `load_plugin_textdomain` due to (article)[https://make.wordpress.org/core/2024/10/21/i18n-improvements-6-7/#Enhanced-support-for-only-using-PHP-translation-files] **Bugfixes** +* Fixed: Security issue CVE ID: CVE-2025-0308 +* Fixed: Security issue CVE ID: CVE-2025-0318 * Fixed: Using placeholders in email templates when Action Scheduler is active. Using `fetch_user_id` attribute for fetching necessary user before sending email +* Fixed: PHP 8.4 compatibility. Using WordPress native `wp_is_mobile()` instead of MobileDetect library * Fixed: PHP errors related to `UM()->localize()` function * Fixed: PHP errors in user meta header when `last_update` meta is empty +* Fixed: Small CSS changes and avoid duplicates +* Fixed: Removed ms-native show password button for type="password" field in UM forms +* Fixed: Define scalable attribute for cropper **Deprecated** +* Fully deprecated `UM()->mobile()` function * Fully deprecated `UM()->localize()` function * Fully deprecated `um_language_textdomain` filter hook