| @@ -2,11 +2,11 @@ | ||
| 2 | 2 | Contributors: cozmoslabs, sareiodata, adispiac, madalin.ungureanu, iova.mihai, barinagabriel |
| 3 | 3 | Donate link: https://www.cozmoslabs.com/wordpress-profile-builder/ |
| 4 | 4 | Tags: user registration, user profile, registration, profile, user registration form |
| 5 | 5 | Requires at least: 3.1 |
| 6 | -Tested up to: 7.0 | |
| 6 | +Tested up to: 7.1 | |
| 7 | 7 | Requires PHP: 7.4 |
| 8 | -Stable tag: 4.0.0 | |
| 8 | +Stable tag: 4.0.3 | |
| 9 | 9 | License: GPLv2 or later |
| 10 | 10 | License URI: https://www.gnu.org/licenses/gpl-2.0.html |
| 11 | 11 | |
| 12 | 12 | Powerful user profile plugin to create front-end user registration forms, login & user profile forms. Includes user role editor & content restriction. |
| @@ -215,8 +215,33 @@ | ||
| 215 | 215 | 16. User Roles Editor - create custom user roles or edit existing roles and capabilities |
| 216 | 216 | 17. Edit or Add New User Role |
| 217 | 217 | |
| 218 | 218 | == Changelog == |
| 219 | += 4.0.3 = | |
| 220 | +* Fix: Security issue regarding authenticated (Subscriber+) stored cross-site scripting via Avatar and Upload fields. Thanks to the Wordfence team | |
| 221 | +* Fix: Further security hardening for Avatar and Upload fields when using simple upload. Thanks to Jonah Burgess, Tarcísio Luchesi and the Wordfence and Patchstack teams | |
| 222 | +* Enhancement: Disabled browser HTML5 validation on Edit Profile and Recover Password forms so Profile Builder can show all validation errors on a single submit matching how Registration works | |
| 223 | +* Fix: PHP warnings for undefined array keys when Elementor elements without Profile Builder restriction settings pass through content restriction | |
| 224 | + | |
| 225 | += 4.0.2 = | |
| 226 | +* Fix: Issue with some free fields which were not available in the new form fields editor | |
| 227 | +* Fix: Added fallback to the old Form Fields editor when Gutenberg is blocked by the Classic Editor plugin | |
| 228 | +* Fix: reCaptcha failing after Wordfence 2FA | |
| 229 | +* Fix: Placeholder Labels not activating proeprly | |
| 230 | +* Fix: Rework restricted post preview functionality | |
| 231 | +* Misc: Small Colorpicker field display correction | |
| 232 | +* Misc: Don't show success message when the password reset form is submitted with an empty field | |
| 233 | + | |
| 234 | += 4.0.1 = | |
| 235 | +* Fix: Security issue regarding unauthenticated access to the media library. Thanks to the WPScan team | |
| 236 | +* Fix: Security issue regarding unauthenticated stored cross-site scripting through the Unconfirmed Email Addresses list. Thanks to the Wordfence team | |
| 237 | +* Fix: Security issue regarding authenticated (Contributor+) stored cross-site scripting via the format-date shortcode. Thanks to Muni Nitish Kumar Yaddala, WPScan and the Wordfence team | |
| 238 | +* Fix: Security issue regarding PHP object injection during Import and Export. Thanks to Vivien LEBAS and the WPScan team | |
| 239 | +* Fix: Admin Approval user deletion now routes through WordPress's content reassignment screen | |
| 240 | +* Fix: "Failed to initialize plugin: tablepress_tinymce" error when opening the new Form Editor with TablePress active | |
| 241 | +* Fix: Attempt to read property "post_type" on null warnings on some third-party admin screens | |
| 242 | +* Misc: Raised the Avatar field maximum size from 200px to 800px | |
| 243 | + | |
| 219 | 244 | = 4.0.0 = |
| 220 | 245 | * New: Reworked the form builder interface to a more modern one that uses blocks. All existing fields and forms are migrated to the new structure. Go to Profile Builder -> Forms to get started |
| 221 | 246 | * New: The Form Fields page is now called Forms. On this page you can see the Default Registration and Edit Profile forms and open the new form builder |
| 222 | 247 | * Feature: reCaptcha and Turnstile can now be enabled on default WordPress comment forms |
