| @@ -3,10 +3,10 @@ | ||
| 3 | 3 | Donate link: https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=1947052 |
| 4 | 4 | Tags: member access, user access manager, user management, access |
| 5 | 5 | Requires at least: 4.7 |
| 6 | 6 | Requires PHP: 8.0 |
| 7 | -Tested up to: 7.1 | |
| 8 | -Stable tag: 2.3.20 | |
| 7 | +Tested up to: 6.9 | |
| 8 | +Stable tag: 2.3.4 | |
| 9 | 9 | License: GPLv2 or later |
| 10 | 10 | License URI: https://www.gnu.org/licenses/gpl-2.0.html |
| 11 | 11 | |
| 12 | 12 | With the "User Access Manager"-plugin you can manage the access to your posts, pages and files. |
| @@ -64,58 +64,8 @@ | ||
| 64 | 64 | |
| 65 | 65 | Here you found the changes in each version. |
| 66 | 66 | |
| 67 | 67 | Version Date Changes |
| 68 | - | |
| 69 | - 2.3.20 2026/09/09 Fix the queries failing on MariaDB 12.3, which turned to_date into a reserved word | |
| 70 | - Quote the table and column names in all queries | |
| 71 | - Fix the database update to version 1.0, which failed and left the group assignments unmigrated | |
| 72 | - Migrate the user and role assignments in that update instead of dropping them with their tables | |
| 73 | - | |
| 74 | - 2.3.19 2026/08/14 Fix a reflected cross site scripting issue in the backend request parameters | |
| 75 | - Fix locked documents answering with a 404 page instead of the no rights page | |
| 76 | - | |
| 77 | - 2.3.18 2026/08/03 Fix the missing preview images of protected documents like PDFs in the media library | |
| 78 | - Rework the backend forms and the group assignment UI | |
| 79 | - Fix the assignment time being discarded for users and roles added by the group search | |
| 80 | - Escape the names shown in the group search results | |
| 81 | - | |
| 82 | - 2.3.17 2026/07/31 Fix a fatal type error in the switch_to_blog wrapper during the multisite database update | |
| 83 | - 2.3.16 2026/07/27 Improve performance by loading the object assignments of all user groups with one query | |
| 84 | - Improve performance by loading all user groups with one query instead of one per group | |
| 85 | - Fix the never executed database update of the user group table id column | |
| 86 | - Fix a fatal error on rest requests for hidden objects. Thanks to Erwan Le Rousseau (WPScan) | |
| 87 | - Do not derive the admin panel context from the referer header anymore | |
| 88 | - Fix an unauthenticated arbitrary file read through path traversal in the file delivery | |
| 89 | - | |
| 90 | - 2.3.15 2026/07/22 Fix REST API bypass for clients without an admin referer, like the official WordPress app | |
| 91 | - Deny REST write requests to objects the user has no access to | |
| 92 | - Deny REST requests for revisions and autosaves of restricted objects | |
| 93 | - Add option to append the requested URL as "redirect_to" parameter to the redirect | |
| 94 | - | |
| 95 | - 2.3.14 2026/07/21 Fix REST API content restriction bypass exposing restricted posts to unauthenticated users | |
| 96 | - Add "Redirect to origin" option | |
| 97 | - | |
| 98 | - 2.3.13 2026/07/10 Improve performance | |
| 99 | - Fix security issue CVE-2026-15281 | |
| 100 | - | |
| 101 | - 2.3.12 2026/05/20 Fix deprecation warning | |
| 102 | - Add redis cache provider, improve nginx file handling and fix author access. Thanks to Erik Franzén | |
| 103 | - | |
| 104 | - 2.3.11 2026/01/23 Improve performance | |
| 105 | - Improve styling | |
| 106 | - | |
| 107 | - 2.3.10 2026/01/22 Fix other possible type error | |
| 108 | - | |
| 109 | - 2.3.9 2026/01/19 Fix possible type error | |
| 110 | - | |
| 111 | - 2.3.8 2025/12/12 Adjust logic wp cli command logic to prevent errors | |
| 112 | - | |
| 113 | - 2.3.7 2025/12/10 Fix issue with MapPress | |
| 114 | - | |
| 115 | - 2.3.6 2025/12/10 Improve type compatibility again... | |
| 116 | - | |
| 117 | - 2.3.5 2025/12/10 Improve type compatibility again... | |
| 118 | 68 | |
| 119 | 69 | 2.3.4 2025/12/09 Improve type compatibility again |
| 120 | 70 | |
| 121 | 71 | 2.3.3 2025/12/09 Improve compatibility again |
