VaultPress - Version 1.7.8

Version Description

  • 15 Oct 2015 =
  • Security: Hotfix for Akismet < 3.1.5.
Download this release

Release Info

Developer thingalon
Plugin Icon 128x128 VaultPress
Version 1.7.8
Comparing to
See all releases

Code changes from version 1.7.7 to 1.7.8

Files changed (4) hide show
  1. class.vaultpress-filesystem.php +3 -0
  2. class.vaultpress-hotfixes.php +8 -0
  3. readme.txt +5 -2
  4. vaultpress.php +2 -2
class.vaultpress-filesystem.php CHANGED
@@ -116,6 +116,9 @@ class VaultPress_Filesystem {
116
  }
117
 
118
  function stat( $file, $md5=true, $sha1=true ) {
 
 
 
119
  $rval = array();
120
  foreach ( stat( $file ) as $i => $v ) {
121
  if ( is_numeric( $i ) )
116
  }
117
 
118
  function stat( $file, $md5=true, $sha1=true ) {
119
+ if ( ! file_exists( $file ) )
120
+ return false;
121
+
122
  $rval = array();
123
  foreach ( stat( $file ) as $i => $v ) {
124
  if ( is_numeric( $i ) )
class.vaultpress-hotfixes.php CHANGED
@@ -113,6 +113,9 @@ class VaultPress_Hotfixes {
113
  add_shortcode( 'wp_caption', array( $this, 'filtered_caption_shortcode' ) );
114
  add_shortcode( 'caption', array( $this, 'filtered_caption_shortcode' ) );
115
  }
 
 
 
116
  }
117
 
118
  function filter_long_comment_xss( $commentdata ) {
@@ -706,6 +709,11 @@ EOD;
706
 
707
  return img_caption_shortcode( $attr, $content );
708
  }
 
 
 
 
 
709
  }
710
 
711
  global $wp_version;
113
  add_shortcode( 'wp_caption', array( $this, 'filtered_caption_shortcode' ) );
114
  add_shortcode( 'caption', array( $this, 'filtered_caption_shortcode' ) );
115
  }
116
+
117
+ // Protect Akismet < 3.1.5 from stored XSS in admin page
118
+ add_filter( 'init', array( $this, 'protect_akismet_comment_xss' ), 50 );
119
  }
120
 
121
  function filter_long_comment_xss( $commentdata ) {
709
 
710
  return img_caption_shortcode( $attr, $content );
711
  }
712
+
713
+ // Protect Akismet < 3.1.5 from stored XSS in admin page
714
+ function protect_akismet_comment_xss() {
715
+ remove_filter( 'comment_text', array( 'Akismet_Admin', 'text_add_link_class' ) );
716
+ }
717
  }
718
 
719
  global $wp_version;
readme.txt CHANGED
@@ -2,8 +2,8 @@
2
  Contributors: automattic, apokalyptik, briancolinger, josephscott, shaunandrews, xknown, thingalon
3
  Tags: security, malware, virus, archive, back up, back ups, backup, backups, scanning, restore, wordpress backup, site backup, website backup
4
  Requires at least: 2.9.2
5
- Tested up to: 4.3
6
- Stable tag: 1.7.7
7
  License: GPLv2
8
 
9
  VaultPress is a subscription service offering realtime backup, automated security scanning, and support from WordPress experts.
@@ -51,6 +51,9 @@ A VaultPress subscription is for a single WordPress site. You can purchase addit
51
  Yes, VaultPress supports Multisite installs. Each site will require its own subscription.
52
 
53
  == Changelog ==
 
 
 
54
  = 1.7.7 - 15 Sep 2015 =
55
  * Security: Add a new security hotfix.
56
 
2
  Contributors: automattic, apokalyptik, briancolinger, josephscott, shaunandrews, xknown, thingalon
3
  Tags: security, malware, virus, archive, back up, back ups, backup, backups, scanning, restore, wordpress backup, site backup, website backup
4
  Requires at least: 2.9.2
5
+ Tested up to: 4.4
6
+ Stable tag: 1.7.8
7
  License: GPLv2
8
 
9
  VaultPress is a subscription service offering realtime backup, automated security scanning, and support from WordPress experts.
51
  Yes, VaultPress supports Multisite installs. Each site will require its own subscription.
52
 
53
  == Changelog ==
54
+ = 1.7.8 - 15 Oct 2015 =
55
+ * Security: Hotfix for Akismet < 3.1.5.
56
+
57
  = 1.7.7 - 15 Sep 2015 =
58
  * Security: Add a new security hotfix.
59
 
vaultpress.php CHANGED
@@ -3,7 +3,7 @@
3
  * Plugin Name: VaultPress
4
  * Plugin URI: http://vaultpress.com/?utm_source=plugin-uri&amp;utm_medium=plugin-description&amp;utm_campaign=1.0
5
  * Description: Protect your content, themes, plugins, and settings with <strong>realtime backup</strong> and <strong>automated security scanning</strong> from <a href="http://vaultpress.com/?utm_source=wp-admin&amp;utm_medium=plugin-description&amp;utm_campaign=1.0" rel="nofollow">VaultPress</a>. Activate, enter your registration key, and never worry again. <a href="http://vaultpress.com/help/?utm_source=wp-admin&amp;utm_medium=plugin-description&amp;utm_campaign=1.0" rel="nofollow">Need some help?</a>
6
- * Version: 1.7.7
7
  * Author: Automattic
8
  * Author URI: http://vaultpress.com/?utm_source=author-uri&amp;utm_medium=plugin-description&amp;utm_campaign=1.0
9
  * License: GPL2+
@@ -17,7 +17,7 @@ defined( 'ABSPATH' ) or die();
17
  class VaultPress {
18
  var $option_name = 'vaultpress';
19
  var $db_version = 4;
20
- var $plugin_version = '1.7.7';
21
 
22
  function __construct() {
23
  register_activation_hook( __FILE__, array( $this, 'activate' ) );
3
  * Plugin Name: VaultPress
4
  * Plugin URI: http://vaultpress.com/?utm_source=plugin-uri&amp;utm_medium=plugin-description&amp;utm_campaign=1.0
5
  * Description: Protect your content, themes, plugins, and settings with <strong>realtime backup</strong> and <strong>automated security scanning</strong> from <a href="http://vaultpress.com/?utm_source=wp-admin&amp;utm_medium=plugin-description&amp;utm_campaign=1.0" rel="nofollow">VaultPress</a>. Activate, enter your registration key, and never worry again. <a href="http://vaultpress.com/help/?utm_source=wp-admin&amp;utm_medium=plugin-description&amp;utm_campaign=1.0" rel="nofollow">Need some help?</a>
6
+ * Version: 1.7.8
7
  * Author: Automattic
8
  * Author URI: http://vaultpress.com/?utm_source=author-uri&amp;utm_medium=plugin-description&amp;utm_campaign=1.0
9
  * License: GPL2+
17
  class VaultPress {
18
  var $option_name = 'vaultpress';
19
  var $db_version = 4;
20
+ var $plugin_version = '1.7.8';
21
 
22
  function __construct() {
23
  register_activation_hook( __FILE__, array( $this, 'activate' ) );