Product Feed PRO for WooCommerce - Version 11.2.2

Version Description

Fixed a XSS vulnerability issue

Download this release

Release Info

Developer jorisverwater
Plugin Icon 128x128 Product Feed PRO for WooCommerce
Version 11.2.2
Comparing to
See all releases

Code changes from version 11.2.1 to 11.2.2

Files changed (3) hide show
  1. js/woosea_key.js +1 -1
  2. readme.txt +7 -1
  3. woocommerce-sea.php +28 -23
js/woosea_key.js CHANGED
@@ -26,7 +26,7 @@ jQuery(document).ready(function($) {
26
  var license_key = $('#license-key').val();
27
 
28
  jQuery.ajax({
29
- url: 'https://www.adtribes.io/check/license.php?key=' + license_key + '&email=' + license_email + '&domain=' + root_domain + '&version=11.2.1',
30
  jsonp: 'callback',
31
  dataType: 'jsonp',
32
  type: 'GET',
26
  var license_key = $('#license-key').val();
27
 
28
  jQuery.ajax({
29
+ url: 'https://www.adtribes.io/check/license.php?key=' + license_key + '&email=' + license_email + '&domain=' + root_domain + '&version=11.2.2',
30
  jsonp: 'callback',
31
  dataType: 'jsonp',
32
  type: 'GET',
readme.txt CHANGED
@@ -5,7 +5,7 @@ License URI: http://www.gnu.org/licenses/gpl.html
5
  Tags: Google Shopping Feed, WooCommerce Product Feed, Facebook Product Feed, Bing Shopping Feed, Bing Product Feed, Google Merchant Feed, Skroutz, Google Product Feed, Pinterest, Idealo, Facebook Pixel, Facebook Conversion API
6
  Requires at least: 4.5
7
  Tested up to: 5.9
8
- Stable tag: 11.2.1
9
 
10
  == Description ==
11
 
@@ -337,6 +337,9 @@ Questions left or unanswered? Please do not hesitate to contact us at support@ad
337
 
338
  === Changelog ===
339
 
 
 
 
340
  = 11.2.1 (2022-01-30) =
341
  * Fixed an issue for individually priced bundled products that had a discount configured, it was not adding the VAT to those prices.
342
 
@@ -3581,6 +3584,9 @@ Questions left or unanswered? Please do not hesitate to contact us at support@ad
3581
 
3582
  == Upgrade Notice ==
3583
 
 
 
 
3584
  = 11.2.1 =
3585
  Fixed an issue for individually priced bundled products that had a discount configured, it was not adding the VAT to those prices.
3586
 
5
  Tags: Google Shopping Feed, WooCommerce Product Feed, Facebook Product Feed, Bing Shopping Feed, Bing Product Feed, Google Merchant Feed, Skroutz, Google Product Feed, Pinterest, Idealo, Facebook Pixel, Facebook Conversion API
6
  Requires at least: 4.5
7
  Tested up to: 5.9
8
+ Stable tag: 11.2.2
9
 
10
  == Description ==
11
 
337
 
338
  === Changelog ===
339
 
340
+ = 11.2.2 (2022-01-31) =
341
+ * Fixed a XSS vulnerability issue
342
+
343
  = 11.2.1 (2022-01-30) =
344
  * Fixed an issue for individually priced bundled products that had a discount configured, it was not adding the VAT to those prices.
345
 
3584
 
3585
  == Upgrade Notice ==
3586
 
3587
+ = 11.2.2 =
3588
+ Fixed a XSS vulnerability issue
3589
+
3590
  = 11.2.1 =
3591
  Fixed an issue for individually priced bundled products that had a discount configured, it was not adding the VAT to those prices.
3592
 
woocommerce-sea.php CHANGED
@@ -1,7 +1,7 @@
1
  <?php
2
  /**
3
  * Plugin Name: Product Feed PRO for WooCommerce
4
- * Version: 11.2.1
5
  * Plugin URI: https://www.adtribes.io/support/?utm_source=wpadmin&utm_medium=plugin&utm_campaign=woosea_product_feed_pro
6
  * Description: Configure and maintain your WooCommerce product feeds for Google Shopping, Facebook, Remarketing, Bing, Skroutz, Yandex, Comparison shopping websites and over a 100 channels more.
7
  * Author: AdTribes.io
@@ -48,7 +48,7 @@ if (!defined('ABSPATH')) {
48
  * Plugin versionnumber, please do not override.
49
  * Define some constants
50
  */
51
- define( 'WOOCOMMERCESEA_PLUGIN_VERSION', '11.2.1' );
52
  define( 'WOOCOMMERCESEA_PLUGIN_NAME', 'woocommerce-product-feed-pro' );
53
  define( 'WOOCOMMERCESEA_PLUGIN_NAME_SHORT', 'woo-product-feed-pro' );
54
 
@@ -941,32 +941,37 @@ add_action( 'wp_ajax_woosea_ajax', 'woosea_ajax' );
941
  * Get a list of categories for the drop-down
942
  */
943
  function woosea_categories_dropdown() {
944
- $rowCount = sanitize_text_field($_POST['rowCount']);
 
 
 
945
 
946
- $orderby = 'name';
947
- $order = 'asc';
948
- $hide_empty = false ;
949
- $cat_args = array(
950
- 'orderby' => $orderby,
951
- 'order' => $order,
952
- 'hide_empty' => $hide_empty,
953
- );
 
954
 
955
- $categories_dropdown = "<select name=\"rules[$rowCount][criteria]\">";
956
- $product_categories = get_terms( 'product_cat', $cat_args );
957
 
958
- foreach ($product_categories as $key => $category) {
959
- $categories_dropdown .= "<option value=\"$category->name\">$category->name ($category->slug)</option>";
960
 
961
- }
962
- $categories_dropdown .= "</select>";
963
 
964
- $data = array (
965
- 'rowCount' => $rowCount,
966
- 'dropdown' => $categories_dropdown
967
- );
968
- echo json_encode($data);
969
- wp_die();
 
970
  }
971
  add_action( 'wp_ajax_woosea_categories_dropdown', 'woosea_categories_dropdown' );
972
 
1
  <?php
2
  /**
3
  * Plugin Name: Product Feed PRO for WooCommerce
4
+ * Version: 11.2.2
5
  * Plugin URI: https://www.adtribes.io/support/?utm_source=wpadmin&utm_medium=plugin&utm_campaign=woosea_product_feed_pro
6
  * Description: Configure and maintain your WooCommerce product feeds for Google Shopping, Facebook, Remarketing, Bing, Skroutz, Yandex, Comparison shopping websites and over a 100 channels more.
7
  * Author: AdTribes.io
48
  * Plugin versionnumber, please do not override.
49
  * Define some constants
50
  */
51
+ define( 'WOOCOMMERCESEA_PLUGIN_VERSION', '11.2.2' );
52
  define( 'WOOCOMMERCESEA_PLUGIN_NAME', 'woocommerce-product-feed-pro' );
53
  define( 'WOOCOMMERCESEA_PLUGIN_NAME_SHORT', 'woo-product-feed-pro' );
54
 
941
  * Get a list of categories for the drop-down
942
  */
943
  function woosea_categories_dropdown() {
944
+ $rowCount = esc_attr(sanitize_text_field($_POST['rowCount']));
945
+
946
+ $user = wp_get_current_user();
947
+ $allowed_roles = array( 'administrator','editor','author' );
948
 
949
+ if ( array_intersect( $allowed_roles, $user->roles ) ) {
950
+ $orderby = 'name';
951
+ $order = 'asc';
952
+ $hide_empty = false ;
953
+ $cat_args = array(
954
+ 'orderby' => $orderby,
955
+ 'order' => $order,
956
+ 'hide_empty' => $hide_empty,
957
+ );
958
 
959
+ $categories_dropdown = "<select name=\"rules[$rowCount][criteria]\">";
960
+ $product_categories = get_terms( 'product_cat', $cat_args );
961
 
962
+ foreach ($product_categories as $key => $category) {
963
+ $categories_dropdown .= "<option value=\"$category->name\">$category->name ($category->slug)</option>";
964
 
965
+ }
966
+ $categories_dropdown .= "</select>";
967
 
968
+ $data = array (
969
+ 'rowCount' => $rowCount,
970
+ 'dropdown' => $categories_dropdown
971
+ );
972
+ echo json_encode($data);
973
+ wp_die();
974
+ }
975
  }
976
  add_action( 'wp_ajax_woosea_categories_dropdown', 'woosea_categories_dropdown' );
977