422d2b7c67
Refactor password handling to bypass wp_unslash.
...
Introduce a dedicated method to handle password fields securely, avoiding `wp_unslash` for these fields. This enhances consistency and security when processing form data across the plugin.
2025-02-12 17:47:19 +02:00
cbc8c24b35
Merge pull request #1647 from ultimatemember/fix/password
...
Password set in Dashboard can't be used for UM login or vice versa (CU-86cxwy7ww)
2025-02-12 17:21:27 +02:00
38593400ba
Merge pull request #1644 from ultimatemember/fix/updates-request
...
Fixes updates request
2025-02-12 17:16:56 +02:00
51c4d6f072
Merge pull request #1645 from ultimatemember/security/mysql
...
Fixes CVE-2024-12276
2025-02-12 17:15:23 +02:00
17d95a189b
Task CU-86cxwy7ww
...
- password sanitize has been changed to the standard WordPress one.
2025-02-04 23:23:26 +02:00
4adbe19cbe
* fixed CVE-2024-12276;
...
* reviewed using $wpdb and WPCS;
* set minimum required version to 6.2 due to using %i for $wpdb->prepare;
2025-02-03 16:17:37 +02:00
a760a6242e
* updated requests to site URL;
...
* WPCS;
2025-01-31 15:19:28 +02:00
26c8aa21e1
Merge pull request #1642 from ultimatemember/fix/honeypot_script_style
...
Fixes honeypot script&style
2025-01-30 13:04:30 +02:00
865fbf83c2
* added honeypot scripts/styles via
...
`wp_add_inline_script()`, `wp_add_inline_style()`
2025-01-30 13:00:17 +02:00
4d43d94502
* related to https://github.com/ultimatemember/ultimatemember/commit/8ca44d02a02e887fc4ab9bcb8ea9ff18ab2c0413
2025-01-30 12:33:49 +02:00
236293645a
Merge pull request #1641 from ultimatemember/fix/cover_profile_photo_on_view
...
Cover and Profile photo uploaders (CU-86cxtae21) alternativity
2025-01-29 16:48:50 +02:00
bb0a49e08a
* update dropdown items texts on cover photo change/remove;
...
* WPCS;
2025-01-29 16:44:29 +02:00
fce490f54b
* update dropdown items texts on cover photo change/remove;
...
* WPCS;
2025-01-29 16:43:05 +02:00
4dd1be344e
* backward compatibility;
...
* update dropdown items texts on profile photo change/remove;
* added escapers;
* WPCS;
2025-01-29 16:01:02 +02:00
0520a55cc4
* removed hidden inputs on view mode;
...
* handle data attribute instead of the hidden input;
* WPCS;
2025-01-29 14:49:47 +02:00
e9e68e28cf
* added data attribute;
...
* updated hooks docs;
* WPCS;
2025-01-29 14:24:15 +02:00
817bc4b2e3
* fixed #1636
2025-01-24 18:32:11 +02:00
0e2cd16f73
Merge pull request #1634 from ultimatemember/fix/og_image_size
...
Open Graph Image Size (CU-86cxq9tuk)
2025-01-24 18:20:41 +02:00
5fc2cd54a4
* Reviewed #1634
2025-01-24 18:19:14 +02:00
5952c06c59
Task CU-86cxq9tuk
...
- changed Open Graph image size.
2025-01-19 14:58:59 +02:00
b0b9f82ebe
* fixed order_count meta table update
2025-01-15 12:02:08 +02:00
0624a634d2
* fixed money_spent meta table update
2025-01-14 17:36:20 +02:00
6aab8152f8
* bump version;
2025-01-14 17:21:26 +02:00
980de8a800
Merge branch 'master' into development/2.9.x
2025-01-14 15:40:11 +02:00
5cb6ae6dc5
* prepared to the release
2025-01-14 15:39:01 +02:00
5b2c785def
* prepared to the release
2025-01-14 15:28:28 +02:00
f7b3585b1a
* prepared to the release
2025-01-14 15:24:45 +02:00
27aeef42af
* prepared to the release
2025-01-14 15:24:03 +02:00
dc81fa44ae
Merge pull request #1607 from ultimatemember/fix/remove_mobile_detect
...
Deprecates mobile detect library
2025-01-14 12:02:23 +02:00
fa0cfa84c2
Merge pull request #1616 from ultimatemember/fix/md_security
...
Fixes security vulnerabilities
2025-01-14 11:55:43 +02:00
5ebefde6b8
* fixed security issue CVE ID: CVE-2025-0308
2025-01-10 02:17:18 +02:00
e5fe05503a
* fixed security issue CVE ID: CVE-2025-0308
...
* fixed security issue CVE ID: CVE-2025-0318
2025-01-08 12:20:35 +02:00
5cefd5ba3a
Merge pull request #1609 from ultimatemember/fix/cropper-scalable
...
Maybe cropper.js fix
2025-01-02 14:10:04 +02:00
3c88512bc2
Merge pull request #1608 from ultimatemember/fix/show-hide-pw-ms-browser
...
Fixes show/hide password buttion in Edge browser
2024-12-20 01:03:20 +02:00
a0892e18aa
* enhancements related to #1599 ;
2024-12-19 17:24:52 +02:00
9d45a9f088
* fixed scalable attribute for cropper;
2024-12-19 13:25:29 +02:00
44bfcdeb38
* removed ms-native show password button for type="password" field in UM forms;
2024-12-19 13:00:20 +02:00
7bccbac786
🔄 Generated POT File
2024-12-19 10:48:27 +00:00
6ae63cfc93
* updated "woocommerce/action-scheduler" to 3.9.0
2024-12-19 12:48:00 +02:00
1ba3809344
* using wp_is_mobile instead of MobileDetect library
2024-12-17 21:53:18 +02:00
a6904639f3
Merge pull request #1604 from ultimatemember/feature/submitted_registration_data
...
Submitted registration data
2024-12-17 16:11:35 +02:00
6653769d72
- add a hooks for submitted registration data
2024-12-17 15:48:20 +02:00
447242e93a
🔄 Generated POT File
2024-12-16 20:24:53 +00:00
77d2e3509c
* release day is changed
2024-12-16 22:24:26 +02:00
69a855fcdd
🔄 Generated POT File
2024-12-16 11:23:55 +00:00
23eef8085e
Merge pull request #1603 from ultimatemember/development/2.9.x
...
Version 2.9.2 enhancements
2024-12-16 13:23:37 +02:00
b41ac2bb96
* uncommented Zapier extension;
2024-12-16 12:35:32 +02:00
e63e27f5c0
* updated .distignore
2024-12-16 12:22:42 +02:00
9db80134bd
Merge branch 'master' into development/2.9.x
2024-12-16 12:19:20 +02:00
8a86737472
* updated methods for properly searchable code;
2024-12-03 14:30:01 +02:00
Mykyta Synelnikov