One User Avatar | User Profile Picture - Version 2.3.7

Version Description

  • Fix XSS vulnerability
Download this release

Release Info

Developer onedesigns
Plugin Icon 128x128 One User Avatar | User Profile Picture
Version 2.3.7
Comparing to
See all releases

Code changes from version 2.3.6 to 2.3.7

Files changed (32) hide show
  1. README.md +3 -0
  2. assets/css/tinymce-window.css +1 -1
  3. assets/css/wp-user-avatar.css +1 -1
  4. assets/js/tinymce-editor_plugin.js +2 -2
  5. assets/js/tinymce-window.js +1 -1
  6. assets/js/wp-user-avatar-admin.js +1 -1
  7. assets/js/wp-user-avatar-user.js +1 -1
  8. assets/js/wp-user-avatar.js +1 -1
  9. includes/class-wp-user-avatar-admin.php +2 -2
  10. includes/class-wp-user-avatar-functions.php +1 -1
  11. includes/class-wp-user-avatar-list-table.php +1 -1
  12. includes/class-wp-user-avatar-resource-manager.php +1 -1
  13. includes/class-wp-user-avatar-setup.php +2 -2
  14. includes/class-wp-user-avatar-shortcode.php +16 -10
  15. includes/class-wp-user-avatar-subscriber.php +1 -1
  16. includes/class-wp-user-avatar-update.php +1 -1
  17. includes/class-wp-user-avatar-widget.php +1 -1
  18. includes/class-wp-user-avatar.php +1 -1
  19. includes/wpua-functions.php +1 -1
  20. includes/wpua-globals.php +1 -1
  21. includes/wpua-media-page.php +1 -1
  22. includes/wpua-options-page.php +4 -4
  23. includes/wpua-tinymce-window.php +1 -1
  24. includes/wpua-tinymce.php +1 -1
  25. languages/nl_NL.po +1 -1
  26. languages/one-user-avatar.pot +1 -1
  27. languages/pt_BR.po +1 -1
  28. languages/pt_PT.po +1 -1
  29. languages/ro_RO.po +1 -1
  30. one-user-avatar.php +1 -1
  31. readme.txt +4 -1
  32. uninstall.php +1 -1
README.md CHANGED
@@ -378,6 +378,9 @@ This would output:
378
 
379
  ## Changelog
380
 
 
 
 
381
  ### 2.3.6
382
  * Add option to replace custom avatar functionality in Ultimate Member plugin
383
 
378
 
379
  ## Changelog
380
 
381
+ ### 2.3.7
382
+ * Fix XSS vulnerability
383
+
384
  ### 2.3.6
385
  * Add option to replace custom avatar functionality in Ultimate Member plugin
386
 
assets/css/tinymce-window.css CHANGED
@@ -1,4 +1,4 @@
1
- /*! One User Avatar - 2.3.6
2
  * Copyright One Designs
3
  * Copyright ProfilePress
4
  * Copyright Flippercode
1
+ /*! One User Avatar - 2.3.7
2
  * Copyright One Designs
3
  * Copyright ProfilePress
4
  * Copyright Flippercode
assets/css/wp-user-avatar.css CHANGED
@@ -1,4 +1,4 @@
1
- /*! One User Avatar - 2.3.6
2
  * Copyright One Designs
3
  * Copyright ProfilePress
4
  * Copyright Flippercode
1
+ /*! One User Avatar - 2.3.7
2
  * Copyright One Designs
3
  * Copyright ProfilePress
4
  * Copyright Flippercode
assets/js/tinymce-editor_plugin.js CHANGED
@@ -1,4 +1,4 @@
1
- /*! One User Avatar - 2.3.6
2
  * Copyright One Designs
3
  * Copyright ProfilePress
4
  * Copyright Flippercode
@@ -44,7 +44,7 @@
44
  author: 'One Designs',
45
  authorurl: 'https://onedesigns.com/',
46
  infourl: 'https://onedesigns.com/plugins/one-user-avatar/',
47
- version: '2.3.6',
48
  };
49
  },
50
  });
1
+ /*! One User Avatar - 2.3.7
2
  * Copyright One Designs
3
  * Copyright ProfilePress
4
  * Copyright Flippercode
44
  author: 'One Designs',
45
  authorurl: 'https://onedesigns.com/',
46
  infourl: 'https://onedesigns.com/plugins/one-user-avatar/',
47
+ version: '2.3.7',
48
  };
49
  },
50
  });
assets/js/tinymce-window.js CHANGED
@@ -1,4 +1,4 @@
1
- /*! One User Avatar - 2.3.6
2
  * Copyright One Designs
3
  * Copyright ProfilePress
4
  * Copyright Flippercode
1
+ /*! One User Avatar - 2.3.7
2
  * Copyright One Designs
3
  * Copyright ProfilePress
4
  * Copyright Flippercode
assets/js/wp-user-avatar-admin.js CHANGED
@@ -1,4 +1,4 @@
1
- /*! One User Avatar - 2.3.6
2
  * Copyright One Designs
3
  * Copyright ProfilePress
4
  * Copyright Flippercode
1
+ /*! One User Avatar - 2.3.7
2
  * Copyright One Designs
3
  * Copyright ProfilePress
4
  * Copyright Flippercode
assets/js/wp-user-avatar-user.js CHANGED
@@ -1,4 +1,4 @@
1
- /*! One User Avatar - 2.3.6
2
  * Copyright One Designs
3
  * Copyright ProfilePress
4
  * Copyright Flippercode
1
+ /*! One User Avatar - 2.3.7
2
  * Copyright One Designs
3
  * Copyright ProfilePress
4
  * Copyright Flippercode
assets/js/wp-user-avatar.js CHANGED
@@ -1,4 +1,4 @@
1
- /*! One User Avatar - 2.3.6
2
  * Copyright One Designs
3
  * Copyright ProfilePress
4
  * Copyright Flippercode
1
+ /*! One User Avatar - 2.3.7
2
  * Copyright One Designs
3
  * Copyright ProfilePress
4
  * Copyright Flippercode
includes/class-wp-user-avatar-admin.php CHANGED
@@ -11,7 +11,7 @@
11
  * @copyright 2014-2020 Flippercode
12
  * @copyright 2020-2021 ProfilePress
13
  * @copyright 2021 One Designs
14
- * @version 2.3.6
15
  */
16
 
17
  class WP_User_Avatar_Admin {
@@ -559,7 +559,7 @@ class WP_User_Avatar_Admin {
559
  $is_wpua = isset( $post->ID ) ? get_post_custom_values( '_wp_attachment_wp_user_avatar', $post->ID ) : '';
560
 
561
  if ( ! empty( $is_wpua ) ) {
562
- $states[] = __( 'Profile Picture','one-user-avatar' );
563
  }
564
 
565
  if ( ! empty ( $wpua_avatar_default ) && isset( $post->ID ) && ( $wpua_avatar_default == $post->ID ) ) {
11
  * @copyright 2014-2020 Flippercode
12
  * @copyright 2020-2021 ProfilePress
13
  * @copyright 2021 One Designs
14
+ * @version 2.3.7
15
  */
16
 
17
  class WP_User_Avatar_Admin {
559
  $is_wpua = isset( $post->ID ) ? get_post_custom_values( '_wp_attachment_wp_user_avatar', $post->ID ) : '';
560
 
561
  if ( ! empty( $is_wpua ) ) {
562
+ $states[] = __( 'Profile Picture', 'one-user-avatar' );
563
  }
564
 
565
  if ( ! empty ( $wpua_avatar_default ) && isset( $post->ID ) && ( $wpua_avatar_default == $post->ID ) ) {
includes/class-wp-user-avatar-functions.php CHANGED
@@ -11,7 +11,7 @@
11
  * @copyright 2014-2020 Flippercode
12
  * @copyright 2020-2021 ProfilePress
13
  * @copyright 2021 One Designs
14
- * @version 2.3.6
15
  */
16
 
17
  class WP_User_Avatar_Functions {
11
  * @copyright 2014-2020 Flippercode
12
  * @copyright 2020-2021 ProfilePress
13
  * @copyright 2021 One Designs
14
+ * @version 2.3.7
15
  */
16
 
17
  class WP_User_Avatar_Functions {
includes/class-wp-user-avatar-list-table.php CHANGED
@@ -11,7 +11,7 @@
11
  * @copyright 2014-2020 Flippercode
12
  * @copyright 2020-2021 ProfilePress
13
  * @copyright 2021 One Designs
14
- * @version 2.3.6
15
  */
16
 
17
  class WP_User_Avatar_List_Table extends WP_List_Table {
11
  * @copyright 2014-2020 Flippercode
12
  * @copyright 2020-2021 ProfilePress
13
  * @copyright 2021 One Designs
14
+ * @version 2.3.7
15
  */
16
 
17
  class WP_User_Avatar_List_Table extends WP_List_Table {
includes/class-wp-user-avatar-resource-manager.php CHANGED
@@ -12,7 +12,7 @@
12
  * @copyright 2014-2020 Flippercode
13
  * @copyright 2020-2021 ProfilePress
14
  * @copyright 2021 One Designs
15
- * @version 2.3.6
16
  */
17
 
18
  class WP_User_Avatar_Resource_Manager {
12
  * @copyright 2014-2020 Flippercode
13
  * @copyright 2020-2021 ProfilePress
14
  * @copyright 2021 One Designs
15
+ * @version 2.3.7
16
  */
17
 
18
  class WP_User_Avatar_Resource_Manager {
includes/class-wp-user-avatar-setup.php CHANGED
@@ -11,7 +11,7 @@
11
  * @copyright 2014-2020 Flippercode
12
  * @copyright 2020-2021 ProfilePress
13
  * @copyright 2021 One Designs
14
- * @version 2.3.6
15
  */
16
 
17
  class WP_User_Avatar_Setup {
@@ -30,7 +30,7 @@ class WP_User_Avatar_Setup {
30
  * @since 1.9.2
31
  */
32
  private function _define_constants() {
33
- define( 'WPUA_VERSION', '2.3.6' );
34
  define( 'WPUA_FOLDER', basename( dirname( One_User_Avatar::plugin_file_path() ) ) );
35
  define( 'WPUA_DIR', One_User_Avatar::plugin_dir_path() );
36
  define( 'WPUA_INC', WPUA_DIR . 'includes' . '/' );
11
  * @copyright 2014-2020 Flippercode
12
  * @copyright 2020-2021 ProfilePress
13
  * @copyright 2021 One Designs
14
+ * @version 2.3.7
15
  */
16
 
17
  class WP_User_Avatar_Setup {
30
  * @since 1.9.2
31
  */
32
  private function _define_constants() {
33
+ define( 'WPUA_VERSION', '2.3.7' );
34
  define( 'WPUA_FOLDER', basename( dirname( One_User_Avatar::plugin_file_path() ) ) );
35
  define( 'WPUA_DIR', One_User_Avatar::plugin_dir_path() );
36
  define( 'WPUA_INC', WPUA_DIR . 'includes' . '/' );
includes/class-wp-user-avatar-shortcode.php CHANGED
@@ -11,7 +11,7 @@
11
  * @copyright 2014-2020 Flippercode
12
  * @copyright 2020-2021 ProfilePress
13
  * @copyright 2021 One Designs
14
- * @version 2.3.6
15
  */
16
 
17
  class WP_User_Avatar_Shortcode {
@@ -119,10 +119,10 @@ class WP_User_Avatar_Shortcode {
119
  // CSS class is same as link type, except for URL
120
  $link_class = $link;
121
 
122
- if( 'file' == $link ) {
123
  // Get image src
124
  $link = get_wp_user_avatar_src( $id_or_email, 'original' );
125
- } elseif($link == 'attachment') {
126
  // Get attachment URL
127
  $link = get_attachment_link( get_the_author_meta( $wpdb->get_blog_prefix( $blog_id ) . 'user_avatar', $id_or_email ) );
128
  } else {
@@ -131,12 +131,12 @@ class WP_User_Avatar_Shortcode {
131
  }
132
 
133
  // Open in new window
134
- $target_link = ! empty( $target ) ? sprintf( ' target="%s"', $target ) : '';
135
 
136
  // Wrap the avatar inside the link
137
  $html = sprintf(
138
  '<a href="%s" class="wp-user-avatar-link wp-user-avatar-%s"%s>%s</a>',
139
- esc_attr( $link ),
140
  esc_attr( $link_class ),
141
  $target_link,
142
  get_wp_user_avatar( $id_or_email, $get_size, $align )
@@ -146,20 +146,20 @@ class WP_User_Avatar_Shortcode {
146
  }
147
 
148
  // Check if caption is set
149
- if(!empty($content)) {
150
  // Get attachment ID
151
  $wpua = get_user_meta( $id_or_email, $wpdb->get_blog_prefix( $blog_id ) . 'user_avatar', true );
152
 
153
  // Clean up caption
154
- $content = trim($content);
155
  $content = preg_replace( '/\r|\n/', '', $content );
156
  $content = preg_replace( '/<\/p><p>/', '', $content, 1 );
157
  $content = preg_replace( '/<\/p><p>$/', '', $content );
158
  $content = str_replace( '</p><p>', '<br /><br />', $content );
159
 
160
- $avatar = do_shortcode(image_add_caption($html, $wpua, $content, $title="", $align, $link, $get_size, $alt=""));
161
  } else {
162
- $avatar = $html;
163
  }
164
 
165
  return $avatar;
@@ -230,7 +230,13 @@ class WP_User_Avatar_Shortcode {
230
  // Show form only for valid user
231
  if ( $valid_user ) {
232
  // Save
233
- if ( isset( $_POST['submit'] ) && $_POST['submit'] && 'update' == $_POST['wpua_action'] ) {
 
 
 
 
 
 
234
  do_action( 'wpua_update', $valid_user->ID );
235
 
236
  // Check for errors
11
  * @copyright 2014-2020 Flippercode
12
  * @copyright 2020-2021 ProfilePress
13
  * @copyright 2021 One Designs
14
+ * @version 2.3.7
15
  */
16
 
17
  class WP_User_Avatar_Shortcode {
119
  // CSS class is same as link type, except for URL
120
  $link_class = $link;
121
 
122
+ if ( 'file' == $link ) {
123
  // Get image src
124
  $link = get_wp_user_avatar_src( $id_or_email, 'original' );
125
+ } elseif ( $link == 'attachment' ) {
126
  // Get attachment URL
127
  $link = get_attachment_link( get_the_author_meta( $wpdb->get_blog_prefix( $blog_id ) . 'user_avatar', $id_or_email ) );
128
  } else {
131
  }
132
 
133
  // Open in new window
134
+ $target_link = ! empty( $target ) ? sprintf( ' target="%s"', esc_attr( $target ) ) : '';
135
 
136
  // Wrap the avatar inside the link
137
  $html = sprintf(
138
  '<a href="%s" class="wp-user-avatar-link wp-user-avatar-%s"%s>%s</a>',
139
+ esc_url( $link ),
140
  esc_attr( $link_class ),
141
  $target_link,
142
  get_wp_user_avatar( $id_or_email, $get_size, $align )
146
  }
147
 
148
  // Check if caption is set
149
+ if ( ! empty( $content ) ) {
150
  // Get attachment ID
151
  $wpua = get_user_meta( $id_or_email, $wpdb->get_blog_prefix( $blog_id ) . 'user_avatar', true );
152
 
153
  // Clean up caption
154
+ $content = trim( $content );
155
  $content = preg_replace( '/\r|\n/', '', $content );
156
  $content = preg_replace( '/<\/p><p>/', '', $content, 1 );
157
  $content = preg_replace( '/<\/p><p>$/', '', $content );
158
  $content = str_replace( '</p><p>', '<br /><br />', $content );
159
 
160
+ $avatar = do_shortcode( image_add_caption( $html, $wpua, $content, $title = '', $align, $link, $get_size, $alt = ''));
161
  } else {
162
+ $avatar = $html;
163
  }
164
 
165
  return $avatar;
230
  // Show form only for valid user
231
  if ( $valid_user ) {
232
  // Save
233
+ if (
234
+ ( isset( $_POST['submit'] ) && $_POST['submit'] )
235
+ &&
236
+ ( isset( $_POST['wpua_action'] ) && 'update' == $_POST['wpua_action'] )
237
+ &&
238
+ ( isset( $_POST[ '_wpnonce'] ) && wp_verify_nonce( $_POST[ '_wpnonce'], 'update-user_' . $valid_user->ID ) )
239
+ ) {
240
  do_action( 'wpua_update', $valid_user->ID );
241
 
242
  // Check for errors
includes/class-wp-user-avatar-subscriber.php CHANGED
@@ -11,7 +11,7 @@
11
  * @copyright 2014-2020 Flippercode
12
  * @copyright 2020-2021 ProfilePress
13
  * @copyright 2021 One Designs
14
- * @version 2.3.6
15
  */
16
 
17
  class WP_User_Avatar_Subscriber {
11
  * @copyright 2014-2020 Flippercode
12
  * @copyright 2020-2021 ProfilePress
13
  * @copyright 2021 One Designs
14
+ * @version 2.3.7
15
  */
16
 
17
  class WP_User_Avatar_Subscriber {
includes/class-wp-user-avatar-update.php CHANGED
@@ -11,7 +11,7 @@
11
  * @copyright 2014-2020 Flippercode
12
  * @copyright 2020-2021 ProfilePress
13
  * @copyright 2021 One Designs
14
- * @version 2.3.6
15
  */
16
 
17
  class WP_User_Avatar_Update {
11
  * @copyright 2014-2020 Flippercode
12
  * @copyright 2020-2021 ProfilePress
13
  * @copyright 2021 One Designs
14
+ * @version 2.3.7
15
  */
16
 
17
  class WP_User_Avatar_Update {
includes/class-wp-user-avatar-widget.php CHANGED
@@ -11,7 +11,7 @@
11
  * @copyright 2014-2020 Flippercode
12
  * @copyright 2020-2021 ProfilePress
13
  * @copyright 2021 One Designs
14
- * @version 2.3.6
15
  */
16
 
17
  class WP_User_Avatar_Profile_Widget extends WP_Widget {
11
  * @copyright 2014-2020 Flippercode
12
  * @copyright 2020-2021 ProfilePress
13
  * @copyright 2021 One Designs
14
+ * @version 2.3.7
15
  */
16
 
17
  class WP_User_Avatar_Profile_Widget extends WP_Widget {
includes/class-wp-user-avatar.php CHANGED
@@ -11,7 +11,7 @@
11
  * @copyright 2014-2020 Flippercode
12
  * @copyright 2020-2021 ProfilePress
13
  * @copyright 2021 One Designs
14
- * @version 2.3.6
15
  */
16
 
17
  class WP_User_Avatar {
11
  * @copyright 2014-2020 Flippercode
12
  * @copyright 2020-2021 ProfilePress
13
  * @copyright 2021 One Designs
14
+ * @version 2.3.7
15
  */
16
 
17
  class WP_User_Avatar {
includes/wpua-functions.php CHANGED
@@ -11,7 +11,7 @@
11
  * @copyright 2014-2020 Flippercode
12
  * @copyright 2020-2021 ProfilePress
13
  * @copyright 2021 One Designs
14
- * @version 2.3.6
15
  */
16
 
17
  /**
11
  * @copyright 2014-2020 Flippercode
12
  * @copyright 2020-2021 ProfilePress
13
  * @copyright 2021 One Designs
14
+ * @version 2.3.7
15
  */
16
 
17
  /**
includes/wpua-globals.php CHANGED
@@ -11,7 +11,7 @@
11
  * @copyright 2014-2020 Flippercode
12
  * @copyright 2020-2021 ProfilePress
13
  * @copyright 2021 One Designs
14
- * @version 2.3.6
15
  */
16
 
17
  /**
11
  * @copyright 2014-2020 Flippercode
12
  * @copyright 2020-2021 ProfilePress
13
  * @copyright 2021 One Designs
14
+ * @version 2.3.7
15
  */
16
 
17
  /**
includes/wpua-media-page.php CHANGED
@@ -11,7 +11,7 @@
11
  * @copyright 2014-2020 Flippercode
12
  * @copyright 2020-2021 ProfilePress
13
  * @copyright 2021 One Designs
14
- * @version 2.3.6
15
  */
16
 
17
  /**
11
  * @copyright 2014-2020 Flippercode
12
  * @copyright 2020-2021 ProfilePress
13
  * @copyright 2021 One Designs
14
+ * @version 2.3.7
15
  */
16
 
17
  /**
includes/wpua-options-page.php CHANGED
@@ -11,7 +11,7 @@
11
  * @copyright 2014-2020 Flippercode
12
  * @copyright 2020-2021 ProfilePress
13
  * @copyright 2021 One Designs
14
- * @version 2.3.6
15
  */
16
 
17
  /**
@@ -83,11 +83,11 @@ $wpua_options_page_title = apply_filters( 'wpua_options_page_title', $wpua_optio
83
  <table>
84
  <tr valign="top">
85
  <td align="top">
86
- <form method="post" action="<?php echo admin_url('options.php'); ?>">
87
 
88
- <?php settings_fields('wpua-settings-group'); ?>
89
 
90
- <?php do_settings_fields('wpua-settings-group', ""); ?>
91
 
92
  <table class="form-table">
93
  <?php
11
  * @copyright 2014-2020 Flippercode
12
  * @copyright 2020-2021 ProfilePress
13
  * @copyright 2021 One Designs
14
+ * @version 2.3.7
15
  */
16
 
17
  /**
83
  <table>
84
  <tr valign="top">
85
  <td align="top">
86
+ <form method="post" action="<?php echo admin_url( 'options.php' ); ?>">
87
 
88
+ <?php settings_fields( 'wpua-settings-group' ); ?>
89
 
90
+ <?php do_settings_fields( 'wpua-settings-group', '' ); ?>
91
 
92
  <table class="form-table">
93
  <?php
includes/wpua-tinymce-window.php CHANGED
@@ -11,7 +11,7 @@
11
  * @copyright 2014-2020 Flippercode
12
  * @copyright 2020-2021 ProfilePress
13
  * @copyright 2021 One Designs
14
- * @version 2.3.6
15
  */
16
 
17
  /**
11
  * @copyright 2014-2020 Flippercode
12
  * @copyright 2020-2021 ProfilePress
13
  * @copyright 2021 One Designs
14
+ * @version 2.3.7
15
  */
16
 
17
  /**
includes/wpua-tinymce.php CHANGED
@@ -11,7 +11,7 @@
11
  * @copyright 2014-2020 Flippercode
12
  * @copyright 2020-2021 ProfilePress
13
  * @copyright 2021 One Designs
14
- * @version 2.3.6
15
  */
16
 
17
  /**
11
  * @copyright 2014-2020 Flippercode
12
  * @copyright 2020-2021 ProfilePress
13
  * @copyright 2021 One Designs
14
+ * @version 2.3.7
15
  */
16
 
17
  /**
languages/nl_NL.po CHANGED
@@ -2,7 +2,7 @@
2
  # This file is distributed under the same license as the One User Avatar plugin.
3
  msgid ""
4
  msgstr ""
5
- "Project-Id-Version: One User Avatar 2.3.6\n"
6
  "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/one-user-avatar\n"
7
  "POT-Creation-Date: 2021-08-05T19:36:27+00:00\n"
8
  "PO-Revision-Date: 2021-08-05 21:38+0200\n"
2
  # This file is distributed under the same license as the One User Avatar plugin.
3
  msgid ""
4
  msgstr ""
5
+ "Project-Id-Version: One User Avatar 2.3.7\n"
6
  "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/one-user-avatar\n"
7
  "POT-Creation-Date: 2021-08-05T19:36:27+00:00\n"
8
  "PO-Revision-Date: 2021-08-05 21:38+0200\n"
languages/one-user-avatar.pot CHANGED
@@ -2,7 +2,7 @@
2
  # This file is distributed under the GPLv2.
3
  msgid ""
4
  msgstr ""
5
- "Project-Id-Version: One User Avatar 2.3.6\n"
6
  "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/one-user-avatar\n"
7
  "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
8
  "Language-Team: LANGUAGE <LL@li.org>\n"
2
  # This file is distributed under the GPLv2.
3
  msgid ""
4
  msgstr ""
5
+ "Project-Id-Version: One User Avatar 2.3.7\n"
6
  "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/one-user-avatar\n"
7
  "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
8
  "Language-Team: LANGUAGE <LL@li.org>\n"
languages/pt_BR.po CHANGED
@@ -2,7 +2,7 @@
2
  # This file is distributed under the GPLv2.
3
  msgid ""
4
  msgstr ""
5
- "Project-Id-Version: One User Avatar 2.3.6\n"
6
  "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/one-user-avatar\n"
7
  "POT-Creation-Date: 2021-08-05T19:36:27+00:00\n"
8
  "PO-Revision-Date: 2021-08-05 21:42+0200\n"
2
  # This file is distributed under the GPLv2.
3
  msgid ""
4
  msgstr ""
5
+ "Project-Id-Version: One User Avatar 2.3.7\n"
6
  "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/one-user-avatar\n"
7
  "POT-Creation-Date: 2021-08-05T19:36:27+00:00\n"
8
  "PO-Revision-Date: 2021-08-05 21:42+0200\n"
languages/pt_PT.po CHANGED
@@ -2,7 +2,7 @@
2
  # This file is distributed under the GPLv2.
3
  msgid ""
4
  msgstr ""
5
- "Project-Id-Version: One User Avatar 2.3.6\n"
6
  "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/one-user-avatar\n"
7
  "POT-Creation-Date: 2021-08-05T19:36:27+00:00\n"
8
  "PO-Revision-Date: 2021-08-05 21:43+0200\n"
2
  # This file is distributed under the GPLv2.
3
  msgid ""
4
  msgstr ""
5
+ "Project-Id-Version: One User Avatar 2.3.7\n"
6
  "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/one-user-avatar\n"
7
  "POT-Creation-Date: 2021-08-05T19:36:27+00:00\n"
8
  "PO-Revision-Date: 2021-08-05 21:43+0200\n"
languages/ro_RO.po CHANGED
@@ -2,7 +2,7 @@
2
  # This file is distributed under the same license as the One User Avatar plugin.
3
  msgid ""
4
  msgstr ""
5
- "Project-Id-Version: One User Avatar 2.3.6\n"
6
  "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/one-user-avatar\n"
7
  "POT-Creation-Date: 2021-08-05T19:36:27+00:00\n"
8
  "PO-Revision-Date: 2021-08-05 21:44+0200\n"
2
  # This file is distributed under the same license as the One User Avatar plugin.
3
  msgid ""
4
  msgstr ""
5
+ "Project-Id-Version: One User Avatar 2.3.7\n"
6
  "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/one-user-avatar\n"
7
  "POT-Creation-Date: 2021-08-05T19:36:27+00:00\n"
8
  "PO-Revision-Date: 2021-08-05 21:44+0200\n"
one-user-avatar.php CHANGED
@@ -5,7 +5,7 @@ Plugin URI: https://onedesigns.com/plugins/one-user-avatar/
5
  Description: Use any image from your WordPress Media Library as a custom user avatar. Add your own Default Avatar. Fork of WP User Avatar v2.2.16.
6
  Author: One Designs
7
  Author URI: https://onedesigns.com/
8
- Version: 2.3.6
9
  Text Domain: one-user-avatar
10
  Domain Path: /languages/
11
 
5
  Description: Use any image from your WordPress Media Library as a custom user avatar. Add your own Default Avatar. Fork of WP User Avatar v2.2.16.
6
  Author: One Designs
7
  Author URI: https://onedesigns.com/
8
+ Version: 2.3.7
9
  Text Domain: one-user-avatar
10
  Domain Path: /languages/
11
 
readme.txt CHANGED
@@ -4,7 +4,7 @@ Contributors: onedesigns, properfraction, collizo4sky
4
  Tags: user profile, avatar, gravatar, author image, author photo, author avatar, bbPress, profile avatar, profile image, user avatar, user image, user photo, widget
5
  Requires at least: 4.0
6
  Tested up to: 5.8
7
- Stable tag: 2.3.6
8
  License: GPLv2 or later
9
  License URI: http://www.gnu.org/licenses/gpl-2.0.html
10
 
@@ -391,6 +391,9 @@ This would output:
391
 
392
  == Changelog ==
393
 
 
 
 
394
  = 2.3.6 =
395
  * Add option to replace custom avatar functionality in Ultimate Member plugin
396
 
4
  Tags: user profile, avatar, gravatar, author image, author photo, author avatar, bbPress, profile avatar, profile image, user avatar, user image, user photo, widget
5
  Requires at least: 4.0
6
  Tested up to: 5.8
7
+ Stable tag: 2.3.7
8
  License: GPLv2 or later
9
  License URI: http://www.gnu.org/licenses/gpl-2.0.html
10
 
391
 
392
  == Changelog ==
393
 
394
+ = 2.3.7 =
395
+ * Fix XSS vulnerability
396
+
397
  = 2.3.6 =
398
  * Add option to replace custom avatar functionality in Ultimate Member plugin
399
 
uninstall.php CHANGED
@@ -11,7 +11,7 @@
11
  * @copyright 2014-2020 Flippercode
12
  * @copyright 2020-2021 ProfilePress
13
  * @copyright 2021 One Designs
14
- * @version 2.3.6
15
  */
16
 
17
  /**
11
  * @copyright 2014-2020 Flippercode
12
  * @copyright 2020-2021 ProfilePress
13
  * @copyright 2021 One Designs
14
+ * @version 2.3.7
15
  */
16
 
17
  /**