Changeset 3265445
- Timestamp:
- 04/02/2025 06:36:12 AM (12 months ago)
- Location:
- gtm-kit
- Files:
-
- 16 edited
- 1 copied
-
tags/2.3.2 (copied) (copied from gtm-kit/trunk)
-
tags/2.3.2/changelog.txt (modified) (1 diff)
-
tags/2.3.2/gtm-kit.php (modified) (2 diffs)
-
tags/2.3.2/languages/gtm-kit.pot (modified) (4 diffs)
-
tags/2.3.2/readme.txt (modified) (2 diffs)
-
tags/2.3.2/src/Admin/AbstractOptionsPage.php (modified) (1 diff)
-
tags/2.3.2/src/Admin/AdminAPI.php (modified) (1 diff)
-
tags/2.3.2/src/Common/RestAPIServer.php (modified) (1 diff)
-
tags/2.3.2/vendor/composer/installed.php (modified) (2 diffs)
-
trunk/changelog.txt (modified) (1 diff)
-
trunk/gtm-kit.php (modified) (2 diffs)
-
trunk/languages/gtm-kit.pot (modified) (4 diffs)
-
trunk/readme.txt (modified) (2 diffs)
-
trunk/src/Admin/AbstractOptionsPage.php (modified) (1 diff)
-
trunk/src/Admin/AdminAPI.php (modified) (1 diff)
-
trunk/src/Common/RestAPIServer.php (modified) (1 diff)
-
trunk/vendor/composer/installed.php (modified) (2 diffs)
Legend:
- Unmodified
- Added
- Removed
-
gtm-kit/tags/2.3.2/changelog.txt
r3254521 r3265445 1 1 *** GTM Kit *** 2 3 2025-04-02 - version 2.3.2 4 * Fix: Permission were not checked correct on the admin API. 2 5 3 6 2025-03-12 - version 2.3.1 -
gtm-kit/tags/2.3.2/gtm-kit.php
r3254521 r3265445 4 4 * 5 5 * Plugin Name: GTM Kit 6 * Version: 2.3. 16 * Version: 2.3.2 7 7 * Plugin URI: https://gtmkit.com/ 8 8 * Description: Google Tag Manager implementation focusing on flexibility and pagespeed. … … 28 28 } 29 29 30 const GTMKIT_VERSION = '2.3. 1';30 const GTMKIT_VERSION = '2.3.2'; 31 31 32 32 if ( ! defined( 'GTMKIT_FILE' ) ) { -
gtm-kit/tags/2.3.2/languages/gtm-kit.pot
r3254521 r3265445 3 3 msgid "" 4 4 msgstr "" 5 "Project-Id-Version: GTM Kit 2.3. 1\n"5 "Project-Id-Version: GTM Kit 2.3.2\n" 6 6 "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/gtm-kit\n" 7 7 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n" … … 10 10 "Content-Type: text/plain; charset=UTF-8\n" 11 11 "Content-Transfer-Encoding: 8bit\n" 12 "POT-Creation-Date: 2025-0 3-11T08:57:32+00:00\n"12 "POT-Creation-Date: 2025-04-01T14:54:13+00:00\n" 13 13 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" 14 14 "X-Generator: WP-CLI 2.9.0\n" … … 61 61 msgstr "" 62 62 63 #: src/Admin/AdminAPI.php:96 64 #: src/Common/RestAPIServer.php:33 65 msgid "Only authenticated users can access endpoint." 66 msgstr "" 67 68 #: src/Admin/AdminAPI.php:142 69 #: src/Admin/AdminAPI.php:147 63 #: src/Admin/AdminAPI.php:126 64 #: src/Admin/AdminAPI.php:131 70 65 msgid "The support ticket was not found. Please check that you have entered the correct ticket." 71 66 msgstr "" 72 67 73 #: src/Admin/AdminAPI.php:1 4468 #: src/Admin/AdminAPI.php:128 74 69 msgid "Thank you! We have received the data." 75 70 msgstr "" … … 247 242 msgstr "" 248 243 244 #: src/Common/RestAPIServer.php:33 245 msgid "Only authenticated users can access endpoint." 246 msgstr "" 247 249 248 #: src/Common/Util.php:159 250 249 msgid "Server type:" -
gtm-kit/tags/2.3.2/readme.txt
r3254521 r3265445 4 4 Tags: google tag manager, gtm, woocommerce, analytics, ga4 5 5 Tested up to: 6.7 6 Stable tag: 2.3. 16 Stable tag: 2.3.2 7 7 License: GPLv3 8 8 License URI: https://www.gnu.org/licenses/gpl-3.0.html … … 93 93 == Changelog == 94 94 95 = 2.3.2 = 96 97 Release date: 2025-04-02 98 99 #### Security: 100 * Permissions were not checked correct on the admin API - [CVE-2025-31001](https://www.cve.org/CVERecord?id=CVE-2025-31001). 101 95 102 = 2.3.1 = 96 103 -
gtm-kit/tags/2.3.2/src/Admin/AbstractOptionsPage.php
r3156080 r3265445 198 198 #gtmkit-settings-loader { 199 199 visibility: hidden; 200 animation: loadGTMKitSettingsNoJSView 0s 2s forwards;200 animation: loadGTMKitSettingsNoJSView 0s 5s forwards; 201 201 } 202 202 -
gtm-kit/tags/2.3.2/src/Admin/AdminAPI.php
r3169885 r3265445 82 82 ] 83 83 ); 84 }85 86 /**87 * Permission callback88 *89 * @return true|WP_Error90 */91 public function permission_callback() {92 $capability = is_multisite() ? 'manage_network_options' : 'manage_options';93 $capability = apply_filters( 'gtmkit_admin_capability', $capability );94 95 if ( ! current_user_can( $capability ) ) {96 return new WP_Error( 'rest_forbidden', esc_html__( 'Only authenticated users can access endpoint.', 'gtm-kit' ), [ 'status' => 401 ] );97 }98 99 return true;100 84 } 101 85 -
gtm-kit/tags/2.3.2/src/Common/RestAPIServer.php
r3149785 r3265445 46 46 */ 47 47 public function register_rest_route( string $route, array $args ): void { 48 if ( ! isset( $args['permission s_callback'] ) ) {48 if ( ! isset( $args['permission_callback'] ) ) { 49 49 $args['permission_callback'] = [ $this, 'permission_callback' ]; 50 50 } -
gtm-kit/tags/2.3.2/vendor/composer/installed.php
r3254521 r3265445 4 4 'pretty_version' => 'dev-main', 5 5 'version' => 'dev-main', 6 'reference' => ' 28b39822035526424f406254d41a7060e988065b',6 'reference' => '5e9a5d2b672646a6181354ffc06b6d9352bf36c0', 7 7 'type' => 'wordpress-plugin', 8 8 'install_path' => __DIR__ . '/../../', … … 14 14 'pretty_version' => 'dev-main', 15 15 'version' => 'dev-main', 16 'reference' => ' 28b39822035526424f406254d41a7060e988065b',16 'reference' => '5e9a5d2b672646a6181354ffc06b6d9352bf36c0', 17 17 'type' => 'wordpress-plugin', 18 18 'install_path' => __DIR__ . '/../../', -
gtm-kit/trunk/changelog.txt
r3254521 r3265445 1 1 *** GTM Kit *** 2 3 2025-04-02 - version 2.3.2 4 * Fix: Permission were not checked correct on the admin API. 2 5 3 6 2025-03-12 - version 2.3.1 -
gtm-kit/trunk/gtm-kit.php
r3254521 r3265445 4 4 * 5 5 * Plugin Name: GTM Kit 6 * Version: 2.3. 16 * Version: 2.3.2 7 7 * Plugin URI: https://gtmkit.com/ 8 8 * Description: Google Tag Manager implementation focusing on flexibility and pagespeed. … … 28 28 } 29 29 30 const GTMKIT_VERSION = '2.3. 1';30 const GTMKIT_VERSION = '2.3.2'; 31 31 32 32 if ( ! defined( 'GTMKIT_FILE' ) ) { -
gtm-kit/trunk/languages/gtm-kit.pot
r3254521 r3265445 3 3 msgid "" 4 4 msgstr "" 5 "Project-Id-Version: GTM Kit 2.3. 1\n"5 "Project-Id-Version: GTM Kit 2.3.2\n" 6 6 "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/gtm-kit\n" 7 7 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n" … … 10 10 "Content-Type: text/plain; charset=UTF-8\n" 11 11 "Content-Transfer-Encoding: 8bit\n" 12 "POT-Creation-Date: 2025-0 3-11T08:57:32+00:00\n"12 "POT-Creation-Date: 2025-04-01T14:54:13+00:00\n" 13 13 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" 14 14 "X-Generator: WP-CLI 2.9.0\n" … … 61 61 msgstr "" 62 62 63 #: src/Admin/AdminAPI.php:96 64 #: src/Common/RestAPIServer.php:33 65 msgid "Only authenticated users can access endpoint." 66 msgstr "" 67 68 #: src/Admin/AdminAPI.php:142 69 #: src/Admin/AdminAPI.php:147 63 #: src/Admin/AdminAPI.php:126 64 #: src/Admin/AdminAPI.php:131 70 65 msgid "The support ticket was not found. Please check that you have entered the correct ticket." 71 66 msgstr "" 72 67 73 #: src/Admin/AdminAPI.php:1 4468 #: src/Admin/AdminAPI.php:128 74 69 msgid "Thank you! We have received the data." 75 70 msgstr "" … … 247 242 msgstr "" 248 243 244 #: src/Common/RestAPIServer.php:33 245 msgid "Only authenticated users can access endpoint." 246 msgstr "" 247 249 248 #: src/Common/Util.php:159 250 249 msgid "Server type:" -
gtm-kit/trunk/readme.txt
r3254521 r3265445 4 4 Tags: google tag manager, gtm, woocommerce, analytics, ga4 5 5 Tested up to: 6.7 6 Stable tag: 2.3. 16 Stable tag: 2.3.2 7 7 License: GPLv3 8 8 License URI: https://www.gnu.org/licenses/gpl-3.0.html … … 93 93 == Changelog == 94 94 95 = 2.3.2 = 96 97 Release date: 2025-04-02 98 99 #### Security: 100 * Permissions were not checked correct on the admin API - [CVE-2025-31001](https://www.cve.org/CVERecord?id=CVE-2025-31001). 101 95 102 = 2.3.1 = 96 103 -
gtm-kit/trunk/src/Admin/AbstractOptionsPage.php
r3156080 r3265445 198 198 #gtmkit-settings-loader { 199 199 visibility: hidden; 200 animation: loadGTMKitSettingsNoJSView 0s 2s forwards;200 animation: loadGTMKitSettingsNoJSView 0s 5s forwards; 201 201 } 202 202 -
gtm-kit/trunk/src/Admin/AdminAPI.php
r3169885 r3265445 82 82 ] 83 83 ); 84 }85 86 /**87 * Permission callback88 *89 * @return true|WP_Error90 */91 public function permission_callback() {92 $capability = is_multisite() ? 'manage_network_options' : 'manage_options';93 $capability = apply_filters( 'gtmkit_admin_capability', $capability );94 95 if ( ! current_user_can( $capability ) ) {96 return new WP_Error( 'rest_forbidden', esc_html__( 'Only authenticated users can access endpoint.', 'gtm-kit' ), [ 'status' => 401 ] );97 }98 99 return true;100 84 } 101 85 -
gtm-kit/trunk/src/Common/RestAPIServer.php
r3149785 r3265445 46 46 */ 47 47 public function register_rest_route( string $route, array $args ): void { 48 if ( ! isset( $args['permission s_callback'] ) ) {48 if ( ! isset( $args['permission_callback'] ) ) { 49 49 $args['permission_callback'] = [ $this, 'permission_callback' ]; 50 50 } -
gtm-kit/trunk/vendor/composer/installed.php
r3254521 r3265445 4 4 'pretty_version' => 'dev-main', 5 5 'version' => 'dev-main', 6 'reference' => ' 28b39822035526424f406254d41a7060e988065b',6 'reference' => '5e9a5d2b672646a6181354ffc06b6d9352bf36c0', 7 7 'type' => 'wordpress-plugin', 8 8 'install_path' => __DIR__ . '/../../', … … 14 14 'pretty_version' => 'dev-main', 15 15 'version' => 'dev-main', 16 'reference' => ' 28b39822035526424f406254d41a7060e988065b',16 'reference' => '5e9a5d2b672646a6181354ffc06b6d9352bf36c0', 17 17 'type' => 'wordpress-plugin', 18 18 'install_path' => __DIR__ . '/../../',
Note: See TracChangeset
for help on using the changeset viewer.