WordPress.org
Get WordPress

Plugin Directory

Changeset 3372404


Ignore:
Timestamp:
10/03/2025 02:04:14 PM (3 months ago)
Author:
tijmensmit
Message:

PHP Object Injection vulnerability fix

Location:
wp-store-locator/trunk
Files:
3 edited

Legend:

Unmodified
Added
Removed

  • wp-store-locator/trunk/frontend/class-frontend.php

    r3310487 r3372404  
    356356                                break;
    357357                            case 'hours':
    358                                 $meta_data = $this->get_opening_hours( $custom_fields[$meta_key][0], apply_filters( 'wpsl_hide_closed_hours', false ) );
     358                                $hours = get_post_meta( $store->ID, 'wpsl_hours' );
     359                                $meta_data = '';
     360
     361                                if ( $hours ) {
     362                                    $meta_data = $this->get_opening_hours( $hours[0], apply_filters( 'wpsl_hide_closed_hours', false ) );
     363                                }
     364
    359365                                break;
    360366                            case 'wp_editor':
    … …  
    522528        public function get_opening_hours( $hours, $hide_closed ) {
    523529
    524             $hours = maybe_unserialize( $hours );
    525 
    526530            /*
    527531             * If the hours are set through the dropdown then we create a table for the opening hours.

  • wp-store-locator/trunk/readme.txt

    r3372315 r3372404  
    55Requires at least: 3.7
    66Tested up to: 6.8.3
    7 Stable tag: 2.2.260
     7Stable tag: 2.2.261
    88License: GPLv3
    99License URI: http://www.gnu.org/licenses/gpl.html
    … …  
    7575
    7676== Frequently Asked Questions ==
     77
     78= How do I add the store locator to a page? =
     79
     80Add this [shortcode](https://wpstorelocator.co/document/shortcodes/) [wpsl] to the page where you want to display the store locator.
     81
     82= Oops! Something went wrong =
     83
     84You can fix this by setting the [browser](https://wpstorelocator.co/document/configure-wp-store-locator/#google-maps-api) key on the settings page.
     85
     86= There are weird characters in the search results, how do I remove them? =
     87
     88This is most likely caused by a plugin like W3 Total Cache that tried to minify the HTML output on the store locator page. You can fix this by excluding the store locator from being minified on the settings page of the caching plugin you're using. In W3 Total Cache this is done by going to Minify -> Advanced -> Never minify the following pages, and fill in the page you don't want to have minified. So if your store locator is used on mydomain.com/store-locator, then fill in 'store-locator'.
     89
     90= Can I use different markers for category or individual store locations? =
     91
     92How to use custom markers is described [here](https://wpstorelocator.co/document/use-custom-markers/), you can also only use [different markers](https://wpstorelocator.co/document/use-custom-markers/) for a few locations, or just for the [categories](https://wpstorelocator.co/document/set-unique-category-markers/).
     93
     94= The map doesn't display properly. It's either broken in half or doesn't load at all. =
     95
     96Make sure you have defined a start point for the map under settings -> Map Settings.
     97
     98= The map doesn't work anymore after installing the latest update =
     99
     100If you use a caching plugin, or a service like Cloudflare, then make sure to flush the cache.
     101
     102= I can't dismiss the pop up asking me to join the mailing list, how do I fix this? =
     103
     104There is probably a JS error in the WP Admin area that prevents the pop up from being dismissed. Try for a second to switch back to a default WP theme, disable all other plugins, and then try to dismiss the newsletter pop up again.
     105
     106= Why does it show the location I searched for in the wrong country? =
     107
     108Some location names exist in more then one country, and Google will guess which one you mean. This can be fixed by setting the correct 'Map Region' on the settings page -> API Settings.
     109
     110= The store locator doesn't load, it only shows the number 1? =
     111
     112This is most likely caused by your theme using ajax navigation ( the loading of content without reloading the page ), or a conflict with another plugin. Try to disable the ajax navigation in the theme settings, or deactivate the plugin that enables it to see if that solves the problem.
     113
     114If you don't use ajax navigation, but do see the number 1 it's probably a conflict with another plugin. Try to disable the plugins one by one to see if one of them is causing a conflict.
     115
     116If you find a plugin or theme that causes a conflict, please report it on the [support page](http://wordpress.org/support/plugin/wp-store-locator).
     117
     118> You can find the full documentation [here](https://wpstorelocator.co/documentation/).
     119
    77120= Where do I report security bugs found in this plugin? =
    78121Please report security bugs found in the source code of the WP Store Locator plugin through the [Patchstack Vulnerability Disclosure Program](https://patchstack.com/database/vdp/dd3fdc38-66c5-4e80-ae86-96da0e63f2ba). The Patchstack team will assist you with verification, CVE assignment, and notify the developers of this plugin.
    79 
    80 = How do I add the store locator to a page? =
    81 
    82 Add this [shortcode](https://wpstorelocator.co/document/shortcodes/) [wpsl] to the page where you want to display the store locator.
    83 
    84 = Oops! Something went wrong =
    85 
    86 You can fix this by setting the [browser](https://wpstorelocator.co/document/configure-wp-store-locator/#google-maps-api) key on the settings page.
    87 
    88 = There are weird characters in the search results, how do I remove them? =
    89 
    90 This is most likely caused by a plugin like W3 Total Cache that tried to minify the HTML output on the store locator page. You can fix this by excluding the store locator from being minified on the settings page of the caching plugin you're using. In W3 Total Cache this is done by going to Minify -> Advanced -> Never minify the following pages, and fill in the page you don't want to have minified. So if your store locator is used on mydomain.com/store-locator, then fill in 'store-locator'.
    91 
    92 = Can I use different markers for category or individual store locations? =
    93 
    94 How to use custom markers is described [here](https://wpstorelocator.co/document/use-custom-markers/), you can also only use [different markers](https://wpstorelocator.co/document/use-custom-markers/) for a few locations, or just for the [categories](https://wpstorelocator.co/document/set-unique-category-markers/).
    95 
    96 = The map doesn't display properly. It's either broken in half or doesn't load at all. =
    97 
    98 Make sure you have defined a start point for the map under settings -> Map Settings.
    99 
    100 = The map doesn't work anymore after installing the latest update =
    101 
    102 If you use a caching plugin, or a service like Cloudflare, then make sure to flush the cache.
    103 
    104 = I can't dismiss the pop up asking me to join the mailing list, how do I fix this? =
    105 
    106 There is probably a JS error in the WP Admin area that prevents the pop up from being dismissed. Try for a second to switch back to a default WP theme, disable all other plugins, and then try to dismiss the newsletter pop up again.
    107 
    108 = Why does it show the location I searched for in the wrong country? =
    109 
    110 Some location names exist in more then one country, and Google will guess which one you mean. This can be fixed by setting the correct 'Map Region' on the settings page -> API Settings.
    111 
    112 = The store locator doesn't load, it only shows the number 1? =
    113 
    114 This is most likely caused by your theme using ajax navigation ( the loading of content without reloading the page ), or a conflict with another plugin. Try to disable the ajax navigation in the theme settings, or deactivate the plugin that enables it to see if that solves the problem.
    115 
    116 If you don't use ajax navigation, but do see the number 1 it's probably a conflict with another plugin. Try to disable the plugins one by one to see if one of them is causing a conflict.
    117 
    118 If you find a plugin or theme that causes a conflict, please report it on the [support page](http://wordpress.org/support/plugin/wp-store-locator).
    119 
    120 > You can find the full documentation [here](https://wpstorelocator.co/documentation/).
    121122
    122123== Screenshots ==
    … …  
    128129
    129130== Changelog ==
     131
     132= 2.2.261 =
     133* Fixed: PHP Object Injection vulnerability.
    130134
    131135= 2.2.260

  • wp-store-locator/trunk/wp-store-locator.php

    r3310487 r3372404  
    55Author: Tijmen Smit
    66Author URI: https://wpstorelocator.co/
    7 Version: 2.2.260
     7Version: 2.2.261
    88Text Domain: wpsl
    99Domain Path: /languages/
    … …  
    9595
    9696            if ( !defined( 'WPSL_VERSION_NUM' ) )
    97                 define( 'WPSL_VERSION_NUM', '2.2.260' );
     97                define( 'WPSL_VERSION_NUM', '2.2.261' );
    9898
    9999            if ( !defined( 'WPSL_URL' ) )
Note: See TracChangeset for help on using the changeset viewer.