Mykyta Synelnikov 302731f252 Fix: Address CVE-2025-13217 and improve input sanitization ...

Resolved CVE-2025-13217 by implementing proper input sanitization and escaping for iframe URLs in YouTube, Vimeo, and Google Maps embeds. This update ensures safer handling of user-provided links to mitigate potential security vulnerabilities.

2025-12-05 17:56:45 +02:00

..

action-scheduler

Enhance password reset logic and add Action Scheduler filter

2025-04-22 17:16:55 +03:00

admin

Merge pull request #1761 from ultimatemember/fix/check_empty_response

2025-11-18 13:10:18 +02:00

ajax

Update Ultimate Member to version 2.10.6

2025-09-27 11:17:08 +03:00

blocks

- blocks build

2025-04-14 15:14:39 +03:00

common

Add filter hook to customize empty status user queries

2025-09-05 12:17:15 +03:00

core

Fix: Address CVE-2025-13217 and improve input sanitization

2025-12-05 17:56:45 +02:00

frontend

Fix user profile URL logic for comment authors

2025-10-07 11:56:25 +03:00

lib

Update dynamic function blacklist for security enhancement

2025-05-12 13:16:17 +03:00

widgets

- fixed no preview available block displaying;

2021-07-20 15:53:32 +03:00

class-config.php

Rename 'auto_user_approve' to 'admin_ignore_user_status'.

2025-04-14 16:04:29 +03:00

class-dependencies.php

Update 'groups' dependency to version 2.5.0

2025-12-01 12:04:03 +02:00

class-extensions.php

- add translators

2023-07-13 11:36:29 +03:00

class-functions.php

"Align array keys in allowed HTML definitions for clarity.

2025-09-16 18:28:49 +03:00

class-init.php

Add Stripe API method and GPLv3 license metadata

2025-05-19 17:27:17 +03:00

um-core-functions.php

Add function to check if a post is a predefined page

2025-09-16 16:00:26 +03:00

um-deprecated-functions.php

* fixed CVE-2024-12276;

2025-02-03 16:17:37 +02:00

um-deprecated-hooks.php

* changed hook for initialization of email templates paths;

2024-11-29 14:09:23 +02:00

um-short-functions.php

- fix contain in conditional logic

2025-07-31 13:49:45 +03:00