| @@ -2,11 +2,11 @@ | ||
| 2 | 2 | Contributors: cozmoslabs, sareiodata, adispiac, madalin.ungureanu, iova.mihai, barinagabriel |
| 3 | 3 | Donate link: https://www.cozmoslabs.com/wordpress-profile-builder/ |
| 4 | 4 | Tags: user registration, user profile, registration, profile, user registration form |
| 5 | 5 | Requires at least: 3.1 |
| 6 | -Tested up to: 7.0 | |
| 6 | +Tested up to: 7.1 | |
| 7 | 7 | Requires PHP: 7.4 |
| 8 | -Stable tag: 3.16.3 | |
| 8 | +Stable tag: 4.0.3 | |
| 9 | 9 | License: GPLv2 or later |
| 10 | 10 | License URI: https://www.gnu.org/licenses/gpl-2.0.html |
| 11 | 11 | |
| 12 | 12 | Powerful user profile plugin to create front-end user registration forms, login & user profile forms. Includes user role editor & content restriction. |
| @@ -191,8 +191,12 @@ | ||
| 191 | 191 | = I can’t find a question similar to my issue; Where can I find support? = |
| 192 | 192 | |
| 193 | 193 | For more information please check out the [documentation section](https://www.cozmoslabs.com/docs/profile-builder/?utm_source=wp.org&utm_medium=pb-description-page&utm_campaign=PBFree) from Profile Builder - front-end user registration plugin. |
| 194 | 194 | |
| 195 | += Where do I report security bugs found in this plugin? = | |
| 196 | + | |
| 197 | + Please report security bugs found in the source code of the Profile Builder plugin through the [Patchstack Vulnerability Disclosure Program](https://patchstack.com/database/vdp/405e067c-7b0f-49e7-ae3c-97037b80ad2d). The Patchstack team will assist you with verification, CVE assignment, and notify the developers of this plugin. | |
| 198 | + | |
| 195 | 199 | == Screenshots == |
| 196 | 200 | 1. User Registration Form Style preview |
| 197 | 201 | 2. Register Form - Front-end User Registration Page with Custom Fields |
| 198 | 202 | 3. Edit Profile Form Style Preview |
| @@ -211,12 +215,37 @@ | ||
| 211 | 215 | 16. User Roles Editor - create custom user roles or edit existing roles and capabilities |
| 212 | 216 | 17. Edit or Add New User Role |
| 213 | 217 | |
| 214 | 218 | == Changelog == |
| 215 | -= 3.16.3 = | |
| 216 | -* Fix: Security hardening | |
| 217 | -* Fix: Simple Upload field failing on the back-end edit user screen | |
| 218 | -* Fix: Invalid markup in login form submit button | |
| 219 | -* Fix: Some changes to reCaptcha and Turnstile validation | |
| 220 | -* Misc: Add a filter to force load the block theme stylesheets | |
| 219 | += 4.0.3 = | |
| 220 | +* Fix: Security issue regarding authenticated (Subscriber+) stored cross-site scripting via Avatar and Upload fields. Thanks to the Wordfence team | |
| 221 | +* Fix: Further security hardening for Avatar and Upload fields when using simple upload. Thanks to Jonah Burgess, Tarcísio Luchesi and the Wordfence and Patchstack teams | |
| 222 | +* Enhancement: Disabled browser HTML5 validation on Edit Profile and Recover Password forms so Profile Builder can show all validation errors on a single submit matching how Registration works | |
| 223 | +* Fix: PHP warnings for undefined array keys when Elementor elements without Profile Builder restriction settings pass through content restriction | |
| 224 | + | |
| 225 | += 4.0.2 = | |
| 226 | +* Fix: Issue with some free fields which were not available in the new form fields editor | |
| 227 | +* Fix: Added fallback to the old Form Fields editor when Gutenberg is blocked by the Classic Editor plugin | |
| 228 | +* Fix: reCaptcha failing after Wordfence 2FA | |
| 229 | +* Fix: Placeholder Labels not activating proeprly | |
| 230 | +* Fix: Rework restricted post preview functionality | |
| 231 | +* Misc: Small Colorpicker field display correction | |
| 232 | +* Misc: Don't show success message when the password reset form is submitted with an empty field | |
| 233 | + | |
| 234 | += 4.0.1 = | |
| 235 | +* Fix: Security issue regarding unauthenticated access to the media library. Thanks to the WPScan team | |
| 236 | +* Fix: Security issue regarding unauthenticated stored cross-site scripting through the Unconfirmed Email Addresses list. Thanks to the Wordfence team | |
| 237 | +* Fix: Security issue regarding authenticated (Contributor+) stored cross-site scripting via the format-date shortcode. Thanks to Muni Nitish Kumar Yaddala, WPScan and the Wordfence team | |
| 238 | +* Fix: Security issue regarding PHP object injection during Import and Export. Thanks to Vivien LEBAS and the WPScan team | |
| 239 | +* Fix: Admin Approval user deletion now routes through WordPress's content reassignment screen | |
| 240 | +* Fix: "Failed to initialize plugin: tablepress_tinymce" error when opening the new Form Editor with TablePress active | |
| 241 | +* Fix: Attempt to read property "post_type" on null warnings on some third-party admin screens | |
| 242 | +* Misc: Raised the Avatar field maximum size from 200px to 800px | |
| 243 | + | |
| 244 | += 4.0.0 = | |
| 245 | +* New: Reworked the form builder interface to a more modern one that uses blocks. All existing fields and forms are migrated to the new structure. Go to Profile Builder -> Forms to get started | |
| 246 | +* New: The Form Fields page is now called Forms. On this page you can see the Default Registration and Edit Profile forms and open the new form builder | |
| 247 | +* Feature: reCaptcha and Turnstile can now be enabled on default WordPress comment forms | |
| 248 | +* Fix: Accessibility improvements for alerts and radio/checkbox fields | |
| 249 | +* Fix: Harden checks around referral urls to catch non-string requests | |
| 221 | 250 | |
| 222 | 251 | [Click Here](https://www.cozmoslabs.com/docs/profile-builder/free-changelog/?utm_source=wp.org&utm_medium=pb-description-page&utm_campaign=PBFree) to view the full changelog. |
