Changeset 3428086

Timestamp:

12/27/2025 06:06:00 AM (3 months ago)

Author:

addonify

Message:

Update to version 1.2.16 from GitHub

Location:

addonify-floating-cart

Files:

• tags/1.2.16 (copied) (copied from addonify-floating-cart/trunk)
• tags/1.2.16/README.txt (modified) (2 diffs)
• tags/1.2.16/addonify-floating-cart.php (modified) (2 diffs)
• tags/1.2.16/includes/udp/class-udp-agent.php (modified) (1 diff)
• trunk/README.txt (modified) (2 diffs)
• trunk/addonify-floating-cart.php (modified) (2 diffs)
• trunk/includes/udp/class-udp-agent.php (modified) (1 diff)

addonify-floating-cart/tags/1.2.16/README.txt

@@ -6 +6 @@
 Requires PHP: 7.4
 Tested up to: 6.8
-Stable tag: 1.2.15
+Stable tag: 1.2.16
 License: GPLv2 or later
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
@@ -132 +132 @@
 == Changelog ==
 
+= 1.2.16 - 27 December, 2025 =
+
+- Fixed: Unauthenticated attacker can update option value for "udp_agent_allow_tracking" via "init" hook.
+- Tested: Up to WordPress version 6.9
+
 = 1.2.15 - 20 April, 2025 =
 

addonify-floating-cart/tags/1.2.16/addonify-floating-cart.php

@@ -14 +14 @@
  * Requires at least: 6.0.0
  * Requires PHP:      7.4
- * Tested up to:      6.8
+ * Tested up to:      6.9
  * Author:            Addonify
  * Author URI:        https://addonify.com/
@@ -34 +34 @@
  * Rename this for your plugin and update it as you release new versions.
  */
-define( 'ADDONIFY_FLOATING_CART_VERSION', '1.2.15' );
+define( 'ADDONIFY_FLOATING_CART_VERSION', '1.2.16' );
 define( 'ADDONIFY_FLOATING_CART_BASENAME', plugin_basename( __FILE__ ) );
 define( 'ADDONIFY_FLOATING_CART_PATH', plugin_dir_path( __FILE__ ) );

addonify-floating-cart/tags/1.2.16/includes/udp/class-udp-agent.php

@@ -173 +173 @@
      */
     private function process_user_tracking_choice() {
+        // Check if the user is logged in and has the capability to manage options.
+        if ( ! is_user_logged_in() || ! current_user_can( 'manage_options' ) ) {
+            // Redirect to home page.
+            wp_safe_redirect( home_url() );
+            exit;
+        }
 
         $users_choice = isset( $_GET['udp-agent-allow-access'] ) ? sanitize_text_field( wp_unslash( $_GET['udp-agent-allow-access'] ) ) : ''; //phpcs:ignore

addonify-floating-cart/trunk/README.txt

@@ -6 +6 @@
 Requires PHP: 7.4
 Tested up to: 6.8
-Stable tag: 1.2.15
+Stable tag: 1.2.16
 License: GPLv2 or later
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
@@ -132 +132 @@
 == Changelog ==
 
+= 1.2.16 - 27 December, 2025 =
+
+- Fixed: Unauthenticated attacker can update option value for "udp_agent_allow_tracking" via "init" hook.
+- Tested: Up to WordPress version 6.9
+
 = 1.2.15 - 20 April, 2025 =
 

addonify-floating-cart/trunk/addonify-floating-cart.php

@@ -14 +14 @@
  * Requires at least: 6.0.0
  * Requires PHP:      7.4
- * Tested up to:      6.8
+ * Tested up to:      6.9
  * Author:            Addonify
  * Author URI:        https://addonify.com/
@@ -34 +34 @@
  * Rename this for your plugin and update it as you release new versions.
  */
-define( 'ADDONIFY_FLOATING_CART_VERSION', '1.2.15' );
+define( 'ADDONIFY_FLOATING_CART_VERSION', '1.2.16' );
 define( 'ADDONIFY_FLOATING_CART_BASENAME', plugin_basename( __FILE__ ) );
 define( 'ADDONIFY_FLOATING_CART_PATH', plugin_dir_path( __FILE__ ) );

addonify-floating-cart/trunk/includes/udp/class-udp-agent.php

@@ -173 +173 @@
      */
     private function process_user_tracking_choice() {
+        // Check if the user is logged in and has the capability to manage options.
+        if ( ! is_user_logged_in() || ! current_user_can( 'manage_options' ) ) {
+            // Redirect to home page.
+            wp_safe_redirect( home_url() );
+            exit;
+        }
 
         $users_choice = isset( $_GET['udp-agent-allow-access'] ) ? sanitize_text_field( wp_unslash( $_GET['udp-agent-allow-access'] ) ) : ''; //phpcs:ignore