Mykyta Synelnikov 54deffd244 Enhance password reset logic and add Action Scheduler filter ...

Ensure proper handling of user data in password reset functions by adding checks and updating parameter handling. Introduce a new filter to extend site health information and include a setting for enabling email sending via Action Scheduler. Improve code clarity with updated comments and function annotations.

2025-04-22 17:16:55 +03:00

..

rest

* fixed CVE-2024-12276;

2025-02-03 16:17:37 +02:00

class-access.php

* fixed CVE-2024-12276;

2025-02-03 16:17:37 +02:00

class-account.php

Refactor password handling to bypass wp_unslash.

2025-02-12 17:47:19 +02:00

class-ajax-common.php

* maybe fixed CVE-2024-10528;

2024-11-05 11:55:07 +02:00

class-blocks.php

- change blocks folder

2024-11-06 12:12:13 +02:00

class-builtin.php

Fixed #1677

2025-04-17 20:02:28 +03:00

class-cron.php

- UM cron class review;

2023-07-07 13:34:55 +03:00

class-date-time.php

- finally reviewed #1361;

2023-12-01 12:50:13 +02:00

class-external-integrations.php

- fixed using esc_attr() in href="" attributes;

2024-03-27 11:06:02 +02:00

class-fields.php

* using wp_is_mobile instead of MobileDetect library

2024-12-17 21:53:18 +02:00

class-files.php

* sorted deprecated function;

2024-11-29 14:24:35 +02:00

class-fonticons.php

- FontIcons libraries moving to legacy;

2023-09-26 12:25:49 +03:00

class-form.php

Refactor password handling to bypass wp_unslash.

2025-02-12 17:47:19 +02:00

class-gdpr.php

- partially reviewed #1361;

2023-11-30 10:55:00 +02:00

class-login.php

- updated hookdocs;

2023-07-18 12:06:17 +03:00

class-logout.php

- updated hookdocs;

2023-07-18 12:06:17 +03:00

class-mail.php

* changed hook for initialization of email templates paths;

2024-11-29 14:09:23 +02:00

class-member-directory-meta.php

- fixed a member directory 'select' filter query

2025-04-11 16:04:55 +03:00

class-member-directory.php

Refactor nonce verification handling in search processing

2025-03-26 00:20:45 +02:00

class-multisite.php

- fixed scroll via enqueue new scroll library;

2019-05-02 18:29:00 +03:00

class-options.php

- WPCS;

2024-03-07 14:56:55 +02:00

class-password.php

Enhance password reset logic and add Action Scheduler filter

2025-04-22 17:16:55 +03:00

class-permalinks.php

Refactor email activation flow in Ultimate Member.

2025-02-28 14:21:54 +02:00

class-plugin-updater.php

* updated requests to site URL;

2025-01-31 15:19:28 +02:00

class-profile.php

- reviewed #1481;

2024-04-02 17:28:54 +03:00

class-query.php

* fixed CVE-2024-12276;

2025-02-03 16:17:37 +02:00

class-register.php

- updated hookdocs;

2023-07-18 12:06:17 +03:00

class-rewrite.php

* Admin Users bulk-actions

2024-09-24 13:18:48 +03:00

class-roles-capabilities.php

* fixed um_current_user_can();

2024-11-15 11:16:55 +02:00

class-setup.php

Implement batch processing for users with empty account statuses

2025-04-15 14:27:59 +03:00

class-shortcodes.php

* fixed #1436;

2024-09-26 12:20:26 +03:00

class-templates.php

- WPCS for defined constants;

2023-09-13 22:56:32 +03:00

class-uploader.php

* fixed CVE-2024-12276;

2025-02-03 16:17:37 +02:00

class-user-posts.php

* fixed CVE-2024-12276;

2025-02-03 16:17:37 +02:00

class-user.php

Enhance password reset logic and add Action Scheduler filter

2025-04-22 17:16:55 +03:00

class-validation.php

- reviewd #1237;

2023-07-04 12:44:06 +03:00

um-actions-access.php

* fixed sending emails upon registration;

2024-10-10 18:18:56 +03:00

um-actions-account.php

fixed "Download your data" and "Erase of your data" fields layout.

2025-01-17 16:03:51 +02:00

um-actions-ajax.php

- intermediate results with sanitizing form handlers;

2021-06-29 02:51:54 +03:00

um-actions-form.php

* fixed security issue CVE ID: CVE-2025-0308

2025-01-08 12:20:35 +02:00

um-actions-global.php

* added honeypot scripts/styles via

2025-01-30 13:00:17 +02:00

um-actions-login.php

* fixed login form after recent updates

2024-10-11 17:10:42 +03:00

um-actions-misc.php

* added security condition to check that one logged-in user cannot activate another one user via email activation link;

2024-10-11 18:47:40 +03:00

um-actions-profile.php

- fixed PHP Warning that occurs when using the getimagesize function with an image from an external source.

2025-04-02 22:23:14 +03:00

um-actions-register.php

Merge pull request #1670 from ultimatemember/feature/schedule_account_status_check

2025-04-17 19:57:21 +03:00

um-actions-save-profile.php

* fixed #1434;

2024-09-26 17:39:57 +03:00

um-actions-user.php

- added escape functions, security fix for XSS;

2019-08-08 00:36:33 +03:00

um-actions-wpadmin.php

- intermediate results with sanitizing form handlers;

2021-06-29 02:51:54 +03:00

um-filters-account.php

- reviewd #1237;

2023-07-04 12:44:06 +03:00

um-filters-avatars.php

* reviewed #1582;

2024-11-13 17:20:52 +02:00

um-filters-commenting.php

- fixed using esc_attr() in href="" attributes;

2024-03-27 11:06:02 +02:00

um-filters-fields.php

* fixed HTML formatted textarea;

2024-10-10 11:56:55 +03:00

um-filters-files.php

- fixed user registration;

2018-03-20 13:24:38 +02:00

um-filters-login.php

* fixed sending emails upon registration;

2024-10-10 18:18:56 +03:00

um-filters-misc.php

- fixed user registration;

2018-03-20 13:24:38 +02:00

um-filters-navmenu.php

- fixed conditional menu handlers for MegaMenu themes (#1334);

2024-01-04 00:54:19 +02:00

um-filters-profile.php

* fixed deprecated function

2024-09-27 18:01:58 +03:00

um-filters-user.php

* Admin Users bulk-actions

2024-09-24 13:18:48 +03:00