Changeset 3047088

Timestamp:

03/07/2024 12:44:56 PM (5 months ago)

Author:

sajjad67

Message:

Fixed Plugin settings XSS vulnerability.

Location:

wp-edit-username

Files:

• tags/1.0.5/admin/ajax-handler.php (modified) (1 diff)
• tags/1.0.6 (added)
• tags/1.0.6/assets (added)
• tags/1.0.6/assets/css (added)
• tags/1.0.6/assets/css/bootstrap.css (added)
• tags/1.0.6/assets/css/style.css (added)
• tags/1.0.6/assets/images (added)
• tags/1.0.6/assets/images/icon.png (added)
• tags/1.0.6/assets/images/loading.gif (added)
• tags/1.0.6/assets/js (added)
• tags/1.0.6/assets/js/bootstrap.min.js (added)
• tags/1.0.6/assets/js/popper.min.js (added)
• tags/1.0.6/assets/js/script.js (added)
• tags/1.0.6/languages (added)
• tags/1.0.6/readme.txt (added)
• tags/1.0.6/wp-edit-username.php (added)
• trunk/readme.txt (modified) (1 diff)

wp-edit-username/tags/1.0.5/admin/ajax-handler.php

@@ -118 +118 @@
             $body    = apply_filters( "wp_username_changed_email_body", $body = $options['wpeu_email_body_field'], $old_username, $new_username );
 
-            $user = get_user_by( 'login', $new_username );
+            $user = get_user_by( 'login', $new_username );
     
             if( $user )

wp-edit-username/trunk/readme.txt

@@ -4 +4 @@
 Requires at least: 5.6
 Tested up to: 6.3
-Stable tag: 1.0.5
+Stable tag: 1.0.
 License: GPLv2
 License URI: http://www.gnu.org/licenses/gpl-2.0.html