| @@ -2,11 +2,11 @@ | ||
| 2 | 2 | Contributors: cozmoslabs, sareiodata, adispiac, madalin.ungureanu, iova.mihai, barinagabriel |
| 3 | 3 | Donate link: https://www.cozmoslabs.com/wordpress-profile-builder/ |
| 4 | 4 | Tags: user registration, user profile, registration, profile, user registration form |
| 5 | 5 | Requires at least: 3.1 |
| 6 | -Tested up to: 7.0 | |
| 6 | +Tested up to: 7.1 | |
| 7 | 7 | Requires PHP: 7.4 |
| 8 | -Stable tag: 3.15.9 | |
| 8 | +Stable tag: 4.0.3 | |
| 9 | 9 | License: GPLv2 or later |
| 10 | 10 | License URI: https://www.gnu.org/licenses/gpl-2.0.html |
| 11 | 11 | |
| 12 | 12 | Powerful user profile plugin to create front-end user registration forms, login & user profile forms. Includes user role editor & content restriction. |
| @@ -157,9 +157,14 @@ | ||
| 157 | 157 | |
| 158 | 158 | NOTE: |
| 159 | 159 | This plugin adds/removes user fields in the front-end. Both default and extra profile fields will be visible in the back-end as well. |
| 160 | 160 | |
| 161 | += External Services = | |
| 162 | +If you opt in, the plugin sends limited diagnostic and configuration data to Cozmoslabs.com to help improve the product. | |
| 161 | 163 | |
| 164 | +Terms & Conditions: https://www.cozmoslabs.com/terms-conditions/ | |
| 165 | +Privacy Policy: https://www.cozmoslabs.com/privacy-policy/ | |
| 166 | + | |
| 162 | 167 | == Installation == |
| 163 | 168 | |
| 164 | 169 | 1. Upload the profile-builder folder to the '/wp-content/plugins/' directory |
| 165 | 170 | 1. Activate the plugin through the 'Plugins' menu in WordPress |
| @@ -186,8 +191,12 @@ | ||
| 186 | 191 | = I can’t find a question similar to my issue; Where can I find support? = |
| 187 | 192 | |
| 188 | 193 | For more information please check out the [documentation section](https://www.cozmoslabs.com/docs/profile-builder/?utm_source=wp.org&utm_medium=pb-description-page&utm_campaign=PBFree) from Profile Builder - front-end user registration plugin. |
| 189 | 194 | |
| 195 | += Where do I report security bugs found in this plugin? = | |
| 196 | + | |
| 197 | + Please report security bugs found in the source code of the Profile Builder plugin through the [Patchstack Vulnerability Disclosure Program](https://patchstack.com/database/vdp/405e067c-7b0f-49e7-ae3c-97037b80ad2d). The Patchstack team will assist you with verification, CVE assignment, and notify the developers of this plugin. | |
| 198 | + | |
| 190 | 199 | == Screenshots == |
| 191 | 200 | 1. User Registration Form Style preview |
| 192 | 201 | 2. Register Form - Front-end User Registration Page with Custom Fields |
| 193 | 202 | 3. Edit Profile Form Style Preview |
| @@ -206,17 +215,37 @@ | ||
| 206 | 215 | 16. User Roles Editor - create custom user roles or edit existing roles and capabilities |
| 207 | 216 | 17. Edit or Add New User Role |
| 208 | 217 | |
| 209 | 218 | == Changelog == |
| 210 | -= 3.15.9 = | |
| 211 | -* Fix: An php error that was triggered with the pro versions of the plugin | |
| 219 | += 4.0.3 = | |
| 220 | +* Fix: Security issue regarding authenticated (Subscriber+) stored cross-site scripting via Avatar and Upload fields. Thanks to the Wordfence team | |
| 221 | +* Fix: Further security hardening for Avatar and Upload fields when using simple upload. Thanks to Jonah Burgess, Tarcísio Luchesi and the Wordfence and Patchstack teams | |
| 222 | +* Enhancement: Disabled browser HTML5 validation on Edit Profile and Recover Password forms so Profile Builder can show all validation errors on a single submit matching how Registration works | |
| 223 | +* Fix: PHP warnings for undefined array keys when Elementor elements without Profile Builder restriction settings pass through content restriction | |
| 212 | 224 | |
| 213 | -= 3.15.8 = | |
| 214 | -* Feature: Added a Maximum File Size option to the Avatar and Upload fields | |
| 215 | -* Feature: Added option to request users to enter their current password when changing passwords from the Edit Profile form. This can be activated by editing the Password field under the Form Fields interface | |
| 216 | -* Fix: Security issue regarding Unauthenticated Stored Cross-Site Scripting. Thanks to daroo and the Wordfence team | |
| 217 | -* Fix: Missing dependencies errors being thrown from the Roles Editor page | |
| 218 | -* Fix: A notice that could be thrown from the Setup Wizard in some cases | |
| 219 | -* Fix: International Telephone Input admin notice not being dismissable | |
| 220 | -* Fix: A notice that could be thrown on the Edit Profile page | |
| 225 | += 4.0.2 = | |
| 226 | +* Fix: Issue with some free fields which were not available in the new form fields editor | |
| 227 | +* Fix: Added fallback to the old Form Fields editor when Gutenberg is blocked by the Classic Editor plugin | |
| 228 | +* Fix: reCaptcha failing after Wordfence 2FA | |
| 229 | +* Fix: Placeholder Labels not activating proeprly | |
| 230 | +* Fix: Rework restricted post preview functionality | |
| 231 | +* Misc: Small Colorpicker field display correction | |
| 232 | +* Misc: Don't show success message when the password reset form is submitted with an empty field | |
| 233 | + | |
| 234 | += 4.0.1 = | |
| 235 | +* Fix: Security issue regarding unauthenticated access to the media library. Thanks to the WPScan team | |
| 236 | +* Fix: Security issue regarding unauthenticated stored cross-site scripting through the Unconfirmed Email Addresses list. Thanks to the Wordfence team | |
| 237 | +* Fix: Security issue regarding authenticated (Contributor+) stored cross-site scripting via the format-date shortcode. Thanks to Muni Nitish Kumar Yaddala, WPScan and the Wordfence team | |
| 238 | +* Fix: Security issue regarding PHP object injection during Import and Export. Thanks to Vivien LEBAS and the WPScan team | |
| 239 | +* Fix: Admin Approval user deletion now routes through WordPress's content reassignment screen | |
| 240 | +* Fix: "Failed to initialize plugin: tablepress_tinymce" error when opening the new Form Editor with TablePress active | |
| 241 | +* Fix: Attempt to read property "post_type" on null warnings on some third-party admin screens | |
| 242 | +* Misc: Raised the Avatar field maximum size from 200px to 800px | |
| 243 | + | |
| 244 | += 4.0.0 = | |
| 245 | +* New: Reworked the form builder interface to a more modern one that uses blocks. All existing fields and forms are migrated to the new structure. Go to Profile Builder -> Forms to get started | |
| 246 | +* New: The Form Fields page is now called Forms. On this page you can see the Default Registration and Edit Profile forms and open the new form builder | |
| 247 | +* Feature: reCaptcha and Turnstile can now be enabled on default WordPress comment forms | |
| 248 | +* Fix: Accessibility improvements for alerts and radio/checkbox fields | |
| 249 | +* Fix: Harden checks around referral urls to catch non-string requests | |
| 221 | 250 | |
| 222 | 251 | [Click Here](https://www.cozmoslabs.com/docs/profile-builder/free-changelog/?utm_source=wp.org&utm_medium=pb-description-page&utm_campaign=PBFree) to view the full changelog. |
