← All changes | readme.txt +42 -9 3.16.1 → 4.0.3 View file →

		@@ -2,11 +2,11 @@
2	2	Contributors: cozmoslabs, sareiodata, adispiac, madalin.ungureanu, iova.mihai, barinagabriel
3	3	Donate link: https://www.cozmoslabs.com/wordpress-profile-builder/
4	4	Tags: user registration, user profile, registration, profile, user registration form
5	5	Requires at least: 3.1
6		-Tested up to: 7.0
	6	+Tested up to: 7.1
7	7	Requires PHP: 7.4
8		-Stable tag: 3.16.1
	8	+Stable tag: 4.0.3
9	9	License: GPLv2 or later
10	10	License URI: https://www.gnu.org/licenses/gpl-2.0.html
11	11
12	12	Powerful user profile plugin to create front-end user registration forms, login & user profile forms. Includes user role editor & content restriction.
		@@ -157,9 +157,14 @@
157	157
158	158	NOTE:
159	159	This plugin adds/removes user fields in the front-end. Both default and extra profile fields will be visible in the back-end as well.
160	160
	161	+= External Services =
	162	+If you opt in, the plugin sends limited diagnostic and configuration data to Cozmoslabs.com to help improve the product.
161	163
	164	+Terms & Conditions: https://www.cozmoslabs.com/terms-conditions/
	165	+Privacy Policy: https://www.cozmoslabs.com/privacy-policy/
	166	+
162	167	== Installation ==
163	168
164	169	1. Upload the profile-builder folder to the '/wp-content/plugins/' directory
165	170	1. Activate the plugin through the 'Plugins' menu in WordPress
		@@ -186,8 +191,12 @@
186	191	= I can’t find a question similar to my issue; Where can I find support? =
187	192
188	193	For more information please check out the [documentation section](https://www.cozmoslabs.com/docs/profile-builder/?utm_source=wp.org&utm_medium=pb-description-page&utm_campaign=PBFree) from Profile Builder - front-end user registration plugin.
189	194
	195	+= Where do I report security bugs found in this plugin? =
	196	+
	197	+ Please report security bugs found in the source code of the Profile Builder plugin through the [Patchstack Vulnerability Disclosure Program](https://patchstack.com/database/vdp/405e067c-7b0f-49e7-ae3c-97037b80ad2d). The Patchstack team will assist you with verification, CVE assignment, and notify the developers of this plugin.
	198	+
190	199	== Screenshots ==
191	200	1. User Registration Form Style preview
192	201	2. Register Form - Front-end User Registration Page with Custom Fields
193	202	3. Edit Profile Form Style Preview
		@@ -206,13 +215,37 @@
206	215	16. User Roles Editor - create custom user roles or edit existing roles and capabilities
207	216	17. Edit or Add New User Role
208	217
209	218	== Changelog ==
210		-= 3.16.1 =
211		-* Fix: A nonce error appearing for users that tried to edit their profile in some cases
212		-* Fix: A notice coming from the login form
213		-* Fix: DbDelta failure notice on legacy wp_signup tables when enabling email confirmation
214		-* Fix: Only enqueue wysiwyg assets when they are needed in the form
215		-* Fix: Blocks content restriction changes
216		-* Misc: Fix some random notices
	219	+= 4.0.3 =
	220	+* Fix: Security issue regarding authenticated (Subscriber+) stored cross-site scripting via Avatar and Upload fields. Thanks to the Wordfence team
	221	+* Fix: Further security hardening for Avatar and Upload fields when using simple upload. Thanks to Jonah Burgess, Tarcísio Luchesi and the Wordfence and Patchstack teams
	222	+* Enhancement: Disabled browser HTML5 validation on Edit Profile and Recover Password forms so Profile Builder can show all validation errors on a single submit matching how Registration works
	223	+* Fix: PHP warnings for undefined array keys when Elementor elements without Profile Builder restriction settings pass through content restriction
	224	+
	225	+= 4.0.2 =
	226	+* Fix: Issue with some free fields which were not available in the new form fields editor
	227	+* Fix: Added fallback to the old Form Fields editor when Gutenberg is blocked by the Classic Editor plugin
	228	+* Fix: reCaptcha failing after Wordfence 2FA
	229	+* Fix: Placeholder Labels not activating proeprly
	230	+* Fix: Rework restricted post preview functionality
	231	+* Misc: Small Colorpicker field display correction
	232	+* Misc: Don't show success message when the password reset form is submitted with an empty field
	233	+
	234	+= 4.0.1 =
	235	+* Fix: Security issue regarding unauthenticated access to the media library. Thanks to the WPScan team
	236	+* Fix: Security issue regarding unauthenticated stored cross-site scripting through the Unconfirmed Email Addresses list. Thanks to the Wordfence team
	237	+* Fix: Security issue regarding authenticated (Contributor+) stored cross-site scripting via the format-date shortcode. Thanks to Muni Nitish Kumar Yaddala, WPScan and the Wordfence team
	238	+* Fix: Security issue regarding PHP object injection during Import and Export. Thanks to Vivien LEBAS and the WPScan team
	239	+* Fix: Admin Approval user deletion now routes through WordPress's content reassignment screen
	240	+* Fix: "Failed to initialize plugin: tablepress_tinymce" error when opening the new Form Editor with TablePress active
	241	+* Fix: Attempt to read property "post_type" on null warnings on some third-party admin screens
	242	+* Misc: Raised the Avatar field maximum size from 200px to 800px
	243	+
	244	+= 4.0.0 =
	245	+* New: Reworked the form builder interface to a more modern one that uses blocks. All existing fields and forms are migrated to the new structure. Go to Profile Builder -> Forms to get started
	246	+* New: The Form Fields page is now called Forms. On this page you can see the Default Registration and Edit Profile forms and open the new form builder
	247	+* Feature: reCaptcha and Turnstile can now be enabled on default WordPress comment forms
	248	+* Fix: Accessibility improvements for alerts and radio/checkbox fields
	249	+* Fix: Harden checks around referral urls to catch non-string requests
217	250
218	251	[Click Here](https://www.cozmoslabs.com/docs/profile-builder/free-changelog/?utm_source=wp.org&utm_medium=pb-description-page&utm_campaign=PBFree) to view the full changelog.