From 77f2fce8dce6b905cd5b8ab07e3a8bc1b66035d3 Mon Sep 17 00:00:00 2001 From: Mykyta Synelnikov Date: Wed, 6 Mar 2024 14:33:38 +0200 Subject: [PATCH] - prepared to release; --- README.md | 2 +- changelog.txt | 14 ++++++++++++++ readme.txt | 18 ++++++++++++++++-- ultimate-member.php | 2 +- 4 files changed, 32 insertions(+), 4 deletions(-) diff --git a/README.md b/README.md index e5fe5998..f3bb1b4f 100644 --- a/README.md +++ b/README.md @@ -44,7 +44,7 @@ GNU Version 2 or Any Later Version ### IMPORTANT: PLEASE UPDATE THE PLUGIN TO AT LEAST VERSION 2.6.7 IMMEDIATELY. VERSION 2.6.7 PATCHES SECURITY PRIVILEGE ESCALATION VULNERABILITY. PLEASE SEE [THIS ARTICLE](https://docs.ultimatemember.com/article/1866-security-incident-update-and-recommended-actions) FOR MORE INFORMATION -[Official Release Version: 2.8.3](https://github.com/ultimatemember/ultimatemember/releases/tag/2.8.3). +[Official Release Version: 2.8.4](https://github.com/ultimatemember/ultimatemember/releases/tag/2.8.4). ## Changelog diff --git a/changelog.txt b/changelog.txt index afa93309..8fd080f7 100644 --- a/changelog.txt +++ b/changelog.txt @@ -1,5 +1,19 @@ == Changelog == += 2.8.4: March 6, 2024 = + +* Enhancements: + + - Tweak: Added separate file for full changelog. readme.txt shows only a few latest versions + +* Bugfixes: + + - Fixed: Member directory data sanitizing (CVE-2024-2123) + - Fixed: Activation link time changed from seconds to days + - Fixed: Password validation error + - Fixed: Password reset url for the approved user who didn't set their password after registration without password + - Fixed: Conflict with WebP Uploads + = 2.8.3: February 19, 2024 = * Enhancements: diff --git a/readme.txt b/readme.txt index f957e171..4dfcefec 100644 --- a/readme.txt +++ b/readme.txt @@ -7,7 +7,7 @@ Tags: community, member, membership, user-profile, user-registration Requires PHP: 5.6 Requires at least: 5.5 Tested up to: 6.4 -Stable tag: 2.8.3 +Stable tag: 2.8.4 License: GNU Version 2 or Any Later Version License URI: http://www.gnu.org/licenses/gpl-3.0.txt @@ -42,6 +42,7 @@ Read about all of the plugin's features at [Ultimate Member](https://ultimatemem Ultimate Member has a range of extensions that allow you to extend the power of the plugin. You can purchase all of these extensions at a significant discount with our [All Access Pass](https://ultimatemember.com/pricing/) or you can purchase extensions individually. +* [Stripe](https://ultimatemember.com/extensions/stripe/) - Sell paid memberships to access your website via Stripe subscriptions * [User Notes](https://ultimatemember.com/extensions/user-notes/) - Allow users to create public and private notes from their profile * [Profile Tabs](https://ultimatemember.com/extensions/profile-tabs/) - Allow to add the custom tabs to profiles * [User Locations](https://ultimatemember.com/extensions/user-locations/) - Allow to display users on a map on the member directory page and allow users to add their location via their profile @@ -166,9 +167,19 @@ No specific extensions are needed. But we highly recommended keep active these P IMPORTANT: PLEASE UPDATE THE PLUGIN TO AT LEAST VERSION 2.6.7 IMMEDIATELY. VERSION 2.6.7 PATCHES SECURITY PRIVILEGE ESCALATION VULNERABILITY. PLEASE SEE [THIS ARTICLE](https://docs.ultimatemember.com/article/1866-security-incident-update-and-recommended-actions) FOR MORE INFORMATION -= 2.8.4: March xx, 2024 = += 2.8.4 2024-03-06 = +**Enhancements** +* Tweak: Added separate file for full changelog. readme.txt shows only a few latest versions + +**Bugfixes** + +* Fixed: Member directory data sanitizing (CVE-2024-2123) +* Fixed: Activation link time changed from seconds to days +* Fixed: Password validation error +* Fixed: Password reset url for the approved user who didn't set their password after registration without password +* Fixed: Conflict with WebP Uploads = 2.8.3 2024-02-19 = @@ -302,6 +313,9 @@ IMPORTANT: PLEASE UPDATE THE PLUGIN TO AT LEAST VERSION 2.6.7 IMMEDIATELY. VERSI == Upgrade Notice == += 2.8.4 = +This version fixes a security related bug. Upgrade immediately. + = 2.8.3 = This version fixes a security related bug. Upgrade immediately. diff --git a/ultimate-member.php b/ultimate-member.php index cde2c781..1498f852 100644 --- a/ultimate-member.php +++ b/ultimate-member.php @@ -3,7 +3,7 @@ * Plugin Name: Ultimate Member * Plugin URI: http://ultimatemember.com/ * Description: The easiest way to create powerful online communities and beautiful user profiles with WordPress - * Version: 2.8.4-alpha + * Version: 2.8.4 * Author: Ultimate Member * Author URI: http://ultimatemember.com/ * Text Domain: ultimate-member