change the background tooltip and text color<\/a><\/p><\/dd>\n\n<\/dl>\n\n\nFor more information, see Releases<\/a>.<\/p>\n\n1.3.0 - 12\/12\/2025<\/h4>\n\n\n- SECURITY: Fix Stored Cross-Site Scripting (XSS) vulnerability in hotspot_content custom field meta (CVE-2025-14445)<\/li>\n
- SECURITY: Add re-sanitization of data points when loaded from database to prevent XSS attacks<\/li>\n
- SECURITY: Enhance input sanitization for all data point fields (content, URLs, text fields, numeric values)<\/li>\n
- SECURITY: Add capability check (edit_posts) to AJAX handler for clone point functionality<\/li>\n
- SECURITY: Add wp_unslash() to all $_POST and $_REQUEST inputs before sanitization<\/li>\n
- SECURITY: Add sanitization callback for register_setting() to validate and sanitize plugin options<\/li>\n
- CODE: Rename functions to follow WordPress naming conventions (add plugin prefix)<\/li>\n
- CODE: Fix WordPress Coding Standards violations (function prefixes, hook names, input sanitization)<\/li>\n
- CODE: Improve code quality and compliance with WordPress Plugin Check requirements<\/li>\n
- CODE: Add proper escaping and sanitization throughout the plugin<\/li>\n<\/ul>\n\n
1.2.9 - 16\/07\/2025<\/h4>\n\n\n- Add ALT to main image<\/li>\n<\/ul>\n\n
1.2.8 - 26\/09\/2024<\/h4>\n\n\n- Fix shortcode in content pin.<\/li>\n
- Enable iframe in content pin.<\/li>\n<\/ul>\n\n
1.2.7 - 26\/08\/2024<\/h4>\n\n\n- Update JS to be compatible with lazy load<\/li>\n
- Update .pot file (Thanks to Alex Lion (\u963f\u529b\u7345) feedback)<\/li>\n<\/ul>\n\n
1.2.6 - 23\/08\/2024<\/h4>\n\n\n- Add allowed_classes => false to unserialize. As suggested by \"Michelle Porter - Wordfence Web Application Vulnerability Analyst\". Many thanks to Michelle Porter<\/li>\n
- Add ALT tag to point<\/li>\n<\/ul>\n\n
1.2.5 - 16\/08\/2024<\/h4>\n\n\n- Fix serious error in version 1.2.4<\/li>\n<\/ul>\n\n
1.2.4 - 16\/08\/2024<\/h4>\n\n\n- Fix Authenticated (Author+) PHP Object Injection. Thanks to Lucio S\u00e1<\/li>\n
- Add editor JS and TinyMCE JS<\/li>\n<\/ul>\n\n
1.2.2 - 05\/03\/2022<\/h4>\n\n\n- Add option for popup full screen or normal on mobile<\/li>\n
- Fix css close button<\/li>\n<\/ul>\n\n
1.2.1 - 14\/12\/2020<\/h4>\n\n\n- Fix with WordPress 5.6<\/li>\n<\/ul>\n\n
1.2.0 - 03\/04\/2020<\/h4>\n\n\n- Fix: CSS RTL<\/li>\n<\/ul>\n\n
1.1.9 - 28\/03\/2020<\/h4>\n\n\n- Fix: Stop video when close tooltips<\/li>\n<\/ul>\n\n
1.1.8<\/h4>\n\n\n- PHP Compatibility: compatible with PHP >= 7.2<\/li>\n<\/ul>\n\n
1.1.7<\/h4>\n\n\n- Fix: compatibility with WordPress 5.x.x<\/li>\n<\/ul>\n\n
1.1.6<\/h4>\n\n\n- Fix: text domain from
devvn<\/code> to devvn-image-hotspot<\/code><\/li>\n<\/ul>\n\n1.1.5<\/h4>\n\n\n- Fix: potential theme CSS conflict<\/li>\n<\/ul>\n\n
1.1.4<\/h4>\n\n\n- Fix: Edit link in popup<\/li>\n<\/ul>\n\n
1.1.3<\/h4>\n\n\n- Fix: some CSS styles<\/li>\n<\/ul>\n\n
1.1.2<\/h4>\n\n\n- Fix: some CSS styles in admin panel<\/li>\n<\/ul>\n\n
1.1.1<\/h4>\n\n\n- Update: some CSS styles<\/li>\n<\/ul>\n\n
1.1.0<\/h4>\n\n\n- Add: target for link pins<\/li>\n<\/ul>\n\n
1.0.9<\/h4>\n\n\n- Fix: conflict with some themes<\/li>\n<\/ul>\n\n
1.0.8<\/h4>\n\n\n- Update responsive for popup<\/li>\n<\/ul>\n\n
1.0.7<\/h4>\n\n\n- Fixed: conflict with Avada theme<\/li>\n
- Don't load modal Bootstrap if it exists or is loaded<\/li>\n<\/ul>\n\n
1.0.6<\/h4>\n\n\n- Add: ID and Class for pins<\/li>\n<\/ul>\n\n
1.0.5<\/h4>\n\n\n- Add: Select Placement for each Pin<\/li>\n
- Update PowerTip: PowerTip 1.3.0<\/li>\n<\/ul>\n\n
1.0.4<\/h4>\n\n\n- Edit: Don't show tooltip when empty content<\/li>\n<\/ul>\n\n
1.0.3<\/h4>\n\n\n- Add Pulse to pins<\/li>\n
- Edit style<\/li>\n<\/ul>\n\n
1.0.2<\/h4>\n\n\n- Edit css<\/li>\n
- Compress css and js in frontend<\/li>\n
- Add donate button in side<\/li>\n<\/ul>\n\n
1.0.1<\/h4>\n\n\n- [ADD] Link to pins<\/li>\n
- [ADD] Custom different icons and different hover icons.<\/li>\n<\/ul>\n\n
1.0<\/h4>\n\n\n- Update new plugin<\/li>\n<\/ul>","raw_excerpt":"Image Hotspot by DevVN helps you add hotspots to your images.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/pl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/51180","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/pl.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/pl.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=51180"}],"author":[{"embeddable":true,"href":"https:\/\/pl.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/levantoan"}],"wp:attachment":[{"href":"https:\/\/pl.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=51180"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/pl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=51180"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/pl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=51180"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/pl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=51180"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/pl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=51180"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/pl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=51180"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}