PluginProbe
weForms – Easy Drag & Drop Contact Form Builder For WordPress / 1.6.1
weForms – Easy Drag & Drop Contact Form Builder For WordPress v1.6.1
1.6.7 1.6.8 1.6.9 1.6.12 1.6.13 1.6.14 1.6.15 1.6.16 1.6.17 1.6.18 1.6.19 1.6.2 1.6.20 1.6.21 1.6.22 1.6.23 1.6.24 1.6.25 1.6.26 1.6.27 1.6.28 1.6.3 1.6.4 1.6.5 1.6.6 All 74 releases
← All changes | includes/api/class-weforms-forms-controller.php +2 -3 1.6.281.6.1 View file →
@@ -254,9 +254,9 @@
254 254
255 255 $entry_fields = [];
256 256
257 257 foreach ( $form_fields as $key => $field ) {
258 - if ( ! empty( $field['wpuf_cond'] ) && $field['wpuf_cond']['condition_status'] == 'yes' ) {
258 + if ( $field['wpuf_cond']['condition_status'] == 'yes' ) {
259 259 $logic = [];
260 260 $cond_fields = $field['wpuf_cond']['cond_field'];
261 261 $cond_operators = $field['wpuf_cond']['cond_operator'];
262 262 $cond_options = $field['wpuf_cond']['cond_option'];
@@ -1547,10 +1547,9 @@
1547 1547 $metadata = $entry->get_metadata();
1548 1548 $payment = $entry->get_payment_data();
1549 1549
1550 1550 if ( isset( $payment->payment_data ) && is_serialized( $payment->payment_data ) ) {
1551 - // Security fix: Prevent PHP Object Injection by restricting allowed classes
1552 - $payment->payment_data = @unserialize( $payment->payment_data, [ 'allowed_classes' => false ] );
1551 + $payment->payment_data = unserialize( $payment->payment_data );
1553 1552 }
1554 1553
1555 1554 $has_empty = false;
1556 1555 $answers = [];