Changeset 980573

Timestamp:

09/04/2014 09:12:09 PM (12 years ago)

Author:

briancolinger

Message:

Adding a new security hotfix.
Bumping plugin version.

Location:

vaultpress/trunk

Files:

• class.vaultpress-hotfixes.php (modified) (2 diffs)
• readme.txt (modified) (2 diffs)
• vaultpress.php (modified) (2 diffs)

vaultpress/trunk/class.vaultpress-hotfixes.php

@@ -89 +89 @@
         // Protect The MailPoet plugin (wysija-newsletters) from remote file upload. Affects versions <= 2.6.6
         add_action( 'admin_init', array( $this , 'protect_wysija_newsletters_verify_capability' ), 1 );
+
+        // Protect the Revolution Slider plugin (revslider) from local file inclusion. Affects versions < 4.2
+        add_action( 'init', array( $this , 'protect_revslider_lfi' ), 1 );
     }
 
@@ -617 +620 @@
         }
     }
+
+    // Protect the Revolution Slider plugin (revslider) from local file inclusion. Affects versions < 4.2
+    function protect_revslider_lfi() {
+        if ( isset( $_GET['action'] ) && 'revslider_show_image' == $_GET['action'] ) {
+            $img = '';
+            if ( isset( $_GET['img'] ) )
+                $img = $_GET['img'];
+            if ( is_numeric( $img ) )
+                return;
+            $validate = validate_file( $img );
+            if ( 0 !== $validate )
+                die( 'invalid file' );
+            if ( !file_exists( $img ) )
+                die( 'file does not exist' );
+        }
+    }
 }
 

vaultpress/trunk/readme.txt

@@ -4 +4 @@
 Requires at least: 2.9.2
 Tested up to: 4.0
-Stable tag: 1.6.4
+Stable tag: 1.6.5
 License: GPLv2
 
@@ -52 +52 @@
 
 == Changelog ==
+= 1.6.5 =
+* Security: Add a new security hotfix.
+
 = 1.6.4 =
 * Bumping the "Tested up to" tag to 4.0

vaultpress/trunk/vaultpress.php

@@ -4 +4 @@
  * Plugin URI: http://vaultpress.com/?utm_source=plugin-uri&utm_medium=plugin-description&utm_campaign=1.0
  * Description: Protect your content, themes, plugins, and settings with <strong>realtime backup</strong> and <strong>automated security scanning</strong> from <a href="http://vaultpress.com/?utm_source=wp-admin&amp;utm_medium=plugin-description&amp;utm_campaign=1.0" rel="nofollow">VaultPress</a>. Activate, enter your registration key, and never worry again. <a href="http://vaultpress.com/help/?utm_source=wp-admin&amp;utm_medium=plugin-description&amp;utm_campaign=1.0" rel="nofollow">Need some help?</a>
- * Version: 1.6.4
+ * Version: 1.6.5
  * Author: Automattic
  * Author URI: http://vaultpress.com/?utm_source=author-uri&amp;utm_medium=plugin-description&amp;utm_campaign=1.0
@@ -19 +19 @@
     var $option_name    = 'vaultpress';
     var $db_version     = 3;
-    var $plugin_version = '1.6.4';
+    var $plugin_version = '1.6.5';
 
     function __construct() {