Photo Gallery by WD – Responsive Photo Gallery - Version 1.5.74

Version Description

  • Fixed: XSS vulnerability.
Download this release

Release Info

Developer 10web
Plugin Icon 128x128 Photo Gallery by WD – Responsive Photo Gallery
Version 1.5.74
Comparing to
See all releases

Code changes from version 1.5.73 to 1.5.74

Files changed (4) hide show
  1. admin/views/AddTags.php +1 -1
  2. filemanager/view.php +3 -3
  3. photo-gallery.php +3 -3
  4. readme.txt +4 -1
admin/views/AddTags.php CHANGED
@@ -44,7 +44,7 @@ class AddTagsView_bwg extends AdminView_bwg {
44
  ?>
45
  <div class="wd-table-container">
46
  <?php
47
- $image_id = WDWLibrary::get('image_id', 0);
48
  echo $this->title( array(
49
  'title' => $params['page_title'],
50
  'title_class' => 'wd-header',
44
  ?>
45
  <div class="wd-table-container">
46
  <?php
47
+ $image_id = WDWLibrary::get('image_id', 0, 'intval');
48
  echo $this->title( array(
49
  'title' => $params['page_title'],
50
  'title_class' => 'wd-header',
filemanager/view.php CHANGED
@@ -76,7 +76,7 @@ class FilemanagerView {
76
  var root = "<?php echo addslashes($this->controller->get_uploads_dir()); ?>";
77
  var dir = "<?php echo (isset($_REQUEST['dir']) ? WDWLibrary::get('dir','','sanitize_text_field','REQUEST') : ''); ?>";
78
  var dirUrl = "<?php echo $this->controller->get_uploads_url() . (isset($_REQUEST['dir']) ? WDWLibrary::get('dir','','sanitize_text_field','REQUEST') . '/' : ''); ?>";
79
- var callback = "<?php echo (isset($_REQUEST['callback']) ? WDWLibrary::get('callback','','sanitize_text_field','REQUEST') : ''); ?>";
80
  var sortBy = "<?php echo $sort_by; ?>";
81
  var sortOrder = "<?php echo $sort_order; ?>";
82
  var page_per = "<?php echo $page_per; ?>";
@@ -271,8 +271,8 @@ class FilemanagerView {
271
  </div>
272
  </div>
273
  <input type="hidden" name="task" value="" />
274
- <input type="hidden" name="extensions" value="<?php echo (isset($_REQUEST['extensions']) ? WDWLibrary::get('extensions','','sanitize_text_field','REQUEST') : '*'); ?>" />
275
- <input type="hidden" name="callback" value="<?php echo (isset($_REQUEST['callback']) ? WDWLibrary::get('callback','','sanitize_text_field','REQUEST') : ''); ?>" />
276
  <input type="hidden" name="sort_by" value="<?php echo $sort_by; ?>" />
277
  <input type="hidden" name="sort_order" value="<?php echo $sort_order; ?>" />
278
  <input type="hidden" name="items_view" value="<?php echo $items_view; ?>" />
76
  var root = "<?php echo addslashes($this->controller->get_uploads_dir()); ?>";
77
  var dir = "<?php echo (isset($_REQUEST['dir']) ? WDWLibrary::get('dir','','sanitize_text_field','REQUEST') : ''); ?>";
78
  var dirUrl = "<?php echo $this->controller->get_uploads_url() . (isset($_REQUEST['dir']) ? WDWLibrary::get('dir','','sanitize_text_field','REQUEST') . '/' : ''); ?>";
79
+ var callback = "<?php echo (isset($_REQUEST['callback']) ? WDWLibrary::get('callback','','esc_js','REQUEST') : ''); ?>";
80
  var sortBy = "<?php echo $sort_by; ?>";
81
  var sortOrder = "<?php echo $sort_order; ?>";
82
  var page_per = "<?php echo $page_per; ?>";
271
  </div>
272
  </div>
273
  <input type="hidden" name="task" value="" />
274
+ <input type="hidden" name="extensions" value="jpg,jpeg,png,gif,svg" />
275
+ <input type="hidden" name="callback" value="<?php echo (isset($_REQUEST['callback']) ? WDWLibrary::get('callback','','esc_attr','REQUEST') : ''); ?>" />
276
  <input type="hidden" name="sort_by" value="<?php echo $sort_by; ?>" />
277
  <input type="hidden" name="sort_order" value="<?php echo $sort_order; ?>" />
278
  <input type="hidden" name="items_view" value="<?php echo $items_view; ?>" />
photo-gallery.php CHANGED
@@ -3,7 +3,7 @@
3
  * Plugin Name: Photo Gallery
4
  * Plugin URI: https://10web.io/plugins/wordpress-photo-gallery/?utm_source=photo_gallery&utm_medium=free_plugin
5
  * Description: This plugin is a fully responsive gallery plugin with advanced functionality. It allows having different image galleries for your posts and pages. You can create unlimited number of galleries, combine them into albums, and provide descriptions and tags.
6
- * Version: 1.5.73
7
  * Author: Photo Gallery Team
8
  * Author URI: https://10web.io/plugins/?utm_source=photo_gallery&utm_medium=free_plugin
9
  * License: GNU/GPLv3 http://www.gnu.org/licenses/gpl-3.0.html
@@ -105,8 +105,8 @@ final class BWG {
105
  $this->plugin_url = plugins_url(plugin_basename(dirname(__FILE__)));
106
  $this->front_url = $this->plugin_url;
107
  $this->main_file = plugin_basename(__FILE__);
108
- $this->plugin_version = '1.5.73';
109
- $this->db_version = '1.5.73';
110
  $this->prefix = 'bwg';
111
  $this->nicename = __('Photo Gallery', $this->prefix);
112
  require_once($this->plugin_dir . '/framework/WDWLibrary.php');
3
  * Plugin Name: Photo Gallery
4
  * Plugin URI: https://10web.io/plugins/wordpress-photo-gallery/?utm_source=photo_gallery&utm_medium=free_plugin
5
  * Description: This plugin is a fully responsive gallery plugin with advanced functionality. It allows having different image galleries for your posts and pages. You can create unlimited number of galleries, combine them into albums, and provide descriptions and tags.
6
+ * Version: 1.5.74
7
  * Author: Photo Gallery Team
8
  * Author URI: https://10web.io/plugins/?utm_source=photo_gallery&utm_medium=free_plugin
9
  * License: GNU/GPLv3 http://www.gnu.org/licenses/gpl-3.0.html
105
  $this->plugin_url = plugins_url(plugin_basename(dirname(__FILE__)));
106
  $this->front_url = $this->plugin_url;
107
  $this->main_file = plugin_basename(__FILE__);
108
+ $this->plugin_version = '1.5.74';
109
+ $this->db_version = '1.5.74';
110
  $this->prefix = 'bwg';
111
  $this->nicename = __('Photo Gallery', $this->prefix);
112
  require_once($this->plugin_dir . '/framework/WDWLibrary.php');
readme.txt CHANGED
@@ -3,7 +3,7 @@ Contributors: webdorado,wdsupport,photogallerysupport,10web
3
  Tags: gallery, photo gallery, image gallery, responsive gallery, wordpress gallery plugin, photo albums, gallery slider, gallery lightbox, wordpress photo gallery plugin, fullscreen gallery, watermarking, video gallery
4
  Requires at least: 4.6
5
  Tested up to: 5.7
6
- Stable tag: 1.5.73
7
  License: GPLv2 or later
8
  License URI: http://www.gnu.org/licenses/gpl-2.0.html
9
 
@@ -282,6 +282,9 @@ Choose whether to display random or the first/last specific number of images.
282
 
283
  == Changelog ==
284
 
 
 
 
285
  = 1.5.73 =
286
  * Fixed: Conflicts with some themes which added width/height attributes to img tags.
287
  * Fixed: Tags filter dropdown.
3
  Tags: gallery, photo gallery, image gallery, responsive gallery, wordpress gallery plugin, photo albums, gallery slider, gallery lightbox, wordpress photo gallery plugin, fullscreen gallery, watermarking, video gallery
4
  Requires at least: 4.6
5
  Tested up to: 5.7
6
+ Stable tag: 1.5.74
7
  License: GPLv2 or later
8
  License URI: http://www.gnu.org/licenses/gpl-2.0.html
9
 
282
 
283
  == Changelog ==
284
 
285
+ = 1.5.74 =
286
+ * Fixed: XSS vulnerability.
287
+
288
  = 1.5.73 =
289
  * Fixed: Conflicts with some themes which added width/height attributes to img tags.
290
  * Fixed: Tags filter dropdown.