| @@ -4,9 +4,9 @@ | ||
| 4 | 4 | Tags: user registration, user profile, registration, profile, user registration form |
| 5 | 5 | Requires at least: 3.1 |
| 6 | 6 | Tested up to: 7.1 |
| 7 | 7 | Requires PHP: 7.4 |
| 8 | -Stable tag: 4.0.1 | |
| 8 | +Stable tag: 4.0.3 | |
| 9 | 9 | License: GPLv2 or later |
| 10 | 10 | License URI: https://www.gnu.org/licenses/gpl-2.0.html |
| 11 | 11 | |
| 12 | 12 | Powerful user profile plugin to create front-end user registration forms, login & user profile forms. Includes user role editor & content restriction. |
| @@ -215,8 +215,23 @@ | ||
| 215 | 215 | 16. User Roles Editor - create custom user roles or edit existing roles and capabilities |
| 216 | 216 | 17. Edit or Add New User Role |
| 217 | 217 | |
| 218 | 218 | == Changelog == |
| 219 | += 4.0.3 = | |
| 220 | +* Fix: Security issue regarding authenticated (Subscriber+) stored cross-site scripting via Avatar and Upload fields. Thanks to the Wordfence team | |
| 221 | +* Fix: Further security hardening for Avatar and Upload fields when using simple upload. Thanks to Jonah Burgess, Tarcísio Luchesi and the Wordfence and Patchstack teams | |
| 222 | +* Enhancement: Disabled browser HTML5 validation on Edit Profile and Recover Password forms so Profile Builder can show all validation errors on a single submit matching how Registration works | |
| 223 | +* Fix: PHP warnings for undefined array keys when Elementor elements without Profile Builder restriction settings pass through content restriction | |
| 224 | + | |
| 225 | += 4.0.2 = | |
| 226 | +* Fix: Issue with some free fields which were not available in the new form fields editor | |
| 227 | +* Fix: Added fallback to the old Form Fields editor when Gutenberg is blocked by the Classic Editor plugin | |
| 228 | +* Fix: reCaptcha failing after Wordfence 2FA | |
| 229 | +* Fix: Placeholder Labels not activating proeprly | |
| 230 | +* Fix: Rework restricted post preview functionality | |
| 231 | +* Misc: Small Colorpicker field display correction | |
| 232 | +* Misc: Don't show success message when the password reset form is submitted with an empty field | |
| 233 | + | |
| 219 | 234 | = 4.0.1 = |
| 220 | 235 | * Fix: Security issue regarding unauthenticated access to the media library. Thanks to the WPScan team |
| 221 | 236 | * Fix: Security issue regarding unauthenticated stored cross-site scripting through the Unconfirmed Email Addresses list. Thanks to the Wordfence team |
| 222 | 237 | * Fix: Security issue regarding authenticated (Contributor+) stored cross-site scripting via the format-date shortcode. Thanks to Muni Nitish Kumar Yaddala, WPScan and the Wordfence team |
