Spam protection, AntiSpam, FireWall by CleanTalk - Version 5.136.3

Version Description

April 7 2020 = * Security: Possible XSS vulnerability.

Download this release

Release Info

Developer Safronik
Plugin Icon 128x128 Spam protection, AntiSpam, FireWall by CleanTalk
Version 5.136.3
Comparing to
See all releases

Code changes from version 5.136.2 to 5.136.3

Files changed (3) hide show
  1. cleantalk.php +1 -1
  2. inc/cleantalk-settings.php +1 -1
  3. readme.txt +4 -1
cleantalk.php CHANGED
@@ -3,7 +3,7 @@
3
  Plugin Name: Anti-Spam by CleanTalk
4
  Plugin URI: https://cleantalk.org
5
  Description: Max power, all-in-one, no Captcha, premium anti-spam plugin. No comment spam, no registration spam, no contact spam, protects any WordPress forms.
6
- Version: 5.136.2
7
  Author: СleanTalk <welcome@cleantalk.org>
8
  Author URI: https://cleantalk.org
9
  Text Domain: cleantalk
3
  Plugin Name: Anti-Spam by CleanTalk
4
  Plugin URI: https://cleantalk.org
5
  Description: Max power, all-in-one, no Captcha, premium anti-spam plugin. No comment spam, no registration spam, no contact spam, protects any WordPress forms.
6
+ Version: 5.136.3
7
  Author: СleanTalk <welcome@cleantalk.org>
8
  Author URI: https://cleantalk.org
9
  Text Domain: cleantalk
inc/cleantalk-settings.php CHANGED
@@ -1443,7 +1443,7 @@ function apbct_settings__sanitize__exclusions($exclusions, $regexp = false){
1443
  if( ! empty( $exclusions ) ){
1444
  $exclusions = explode( ',', $exclusions );
1445
  foreach ( $exclusions as $exclusion ){
1446
- $sanitized_exclusion = trim( $exclusion );
1447
  if ( ! empty( $sanitized_exclusion ) ) {
1448
  if( $regexp && ! apbct_is_regexp( $exclusion ) )
1449
  return false;
1443
  if( ! empty( $exclusions ) ){
1444
  $exclusions = explode( ',', $exclusions );
1445
  foreach ( $exclusions as $exclusion ){
1446
+ $sanitized_exclusion = preg_replace( '/[<"\'>]/', '', trim( $exclusion ) );
1447
  if ( ! empty( $sanitized_exclusion ) ) {
1448
  if( $regexp && ! apbct_is_regexp( $exclusion ) )
1449
  return false;
readme.txt CHANGED
@@ -4,7 +4,7 @@ Tags: spam, antispam, woocommerce, comments, firewall
4
  Requires at least: 3.0
5
  Tested up to: 5.4
6
  Requires PHP: 5.4
7
- Stable tag: 5.136.2
8
  License: GPLv2
9
 
10
  Spam protection, anti-spam, firewall, premium plugin. No spam comments & users, no spam contact form & WooCommerce anti-spam.
@@ -566,6 +566,9 @@ If your website has forms that send data to external sources, you can enable opt
566
 
567
  == Changelog ==
568
 
 
 
 
569
  = 5.136.2 April 7 2020 =
570
  * Mod: bbPress is using role exclusions now.
571
  * Mod: Show info on SpamFirewall block page.
4
  Requires at least: 3.0
5
  Tested up to: 5.4
6
  Requires PHP: 5.4
7
+ Stable tag: 5.136.3
8
  License: GPLv2
9
 
10
  Spam protection, anti-spam, firewall, premium plugin. No spam comments & users, no spam contact form & WooCommerce anti-spam.
566
 
567
  == Changelog ==
568
 
569
+ = 5.136.3 April 7 2020 =
570
+ * Security: Possible XSS vulnerability.
571
+
572
  = 5.136.2 April 7 2020 =
573
  * Mod: bbPress is using role exclusions now.
574
  * Mod: Show info on SpamFirewall block page.