WordPress.org
Get WordPress

Plugin Directory

Changeset 3448022


Ignore:
Timestamp:
01/27/2026 04:05:38 PM (6 weeks ago)
Author:
fullworks
Message:

Update to version 6.5.7 from GitHub

Location:
widget-for-eventbrite-api
Files:
12 edited
1 copied

Legend:

Unmodified
Added
Removed

  • widget-for-eventbrite-api/tags/6.5.7/changelog.txt

    r3445634 r3448022  
     1= 6.5.7 =
     2* Improve security for block editor and Elementor widget controls
     3
    14= 6.5.6 =
    25* Fix webhook payload URL not persisting after generation (Pro Only)

  • widget-for-eventbrite-api/tags/6.5.7/includes/class-core.php

    r3445634 r3448022  
    171171        add_filter( 'site_status_tests', array($plugin_admin, 'site_status_tests') );
    172172        add_action( 'wp_ajax_update_widget_content', array($widget_helpers, 'update_elementor_widget_content') );
    173         add_action( 'wp_ajax_nopriv_update_widget_content', array($widget_helpers, 'update_elementor_widget_content') );
    174173        add_action( 'wp_ajax_fetch_organizations_for_key', array($widget_helpers, 'get_organizations_for_key') );
    175         add_action( 'wp_ajax_nopriv_fetch_organizations_for_key', array($widget_helpers, 'get_organizations_for_key') );
    176174        add_action( 'wp_ajax_fetch_events_for_key', array($widget_helpers, 'send_events_for_key') );
    177         add_action( 'wp_ajax_nopriv_fetch_events_for_key', array($widget_helpers, 'send_events_for_key') );
    178175        add_action( 'wp_ajax_fetch_organizers_for_key', array($widget_helpers, 'send_organizers_for_key') );
    179         add_action( 'wp_ajax_nopriv_fetch_organizers_for_key', array($widget_helpers, 'send_organizers_for_key') );
    180176        add_action( 'wp_ajax_fetch_venues_options', array($widget_helpers, 'send_venues_options') );
    181         add_action( 'wp_ajax_nopriv_fetch_venues_options', array($widget_helpers, 'send_venues_options') );
    182177        add_action( 'wp_ajax_fetch_api_key_options', array($widget_helpers, 'send_api_key_options') );
    183         add_action( 'wp_ajax_nopriv_fetch_api_key_options', array($widget_helpers, 'send_api_key_options') );
    184178        add_action( 'wp_ajax_validate_date', array($widget_helpers, 'validate_date') );
    185         add_action( 'wp_ajax_nopriv_validate_date', array($widget_helpers, 'validate_date') );
    186179        add_action( 'init', function () {
    187180            new \WidgetForEventbriteAPI\Includes\Widgets();

  • widget-for-eventbrite-api/tags/6.5.7/includes/vendor/composer/installed.php

    r3445634 r3448022  
    22    'root' => array(
    33        'name' => 'fullworks/widget-for-eventbrite-api',
    4         'pretty_version' => '6.5.6',
    5         'version' => '6.5.6.0',
    6         'reference' => 'e261b24b8e3d4393aad9d26fbc4dc3d8c5974fab',
     4        'pretty_version' => '6.5.7',
     5        'version' => '6.5.7.0',
     6        'reference' => '68c0ccba6be41d8f18f7cc0ebb931b1a6eb2bd64',
    77        'type' => 'wordpress-plugin',
    88        'install_path' => __DIR__ . '/../../../',
    … …  
    7070        ),
    7171        'fullworks/widget-for-eventbrite-api' => array(
    72             'pretty_version' => '6.5.6',
    73             'version' => '6.5.6.0',
    74             'reference' => 'e261b24b8e3d4393aad9d26fbc4dc3d8c5974fab',
     72            'pretty_version' => '6.5.7',
     73            'version' => '6.5.7.0',
     74            'reference' => '68c0ccba6be41d8f18f7cc0ebb931b1a6eb2bd64',
    7575            'type' => 'wordpress-plugin',
    7676            'install_path' => __DIR__ . '/../../../',

  • widget-for-eventbrite-api/tags/6.5.7/includes/widgets/elementor/class-eventbrite-widget-elementor-helpers.php

    r3273977 r3448022  
    192192
    193193    public function get_organizations_for_key() {
    194         // phpcs:ignore WordPress.Security.NonceVerification.Missing -- just a look up
     194        check_ajax_referer( 'wfea-nonce', 'nonce' );
     195        if ( !current_user_can( 'edit_posts' ) ) {
     196            wp_die( -1 );
     197        }
    195198        $token = ( !empty( $_POST['token'] ) ? sanitize_text_field( wp_unslash( $_POST['token'] ) ) : '' );
    196199        $token = $this->utilities->map_api_index_to_key( $token );
    … …  
    199202
    200203    public function send_events_for_key() {
    201         // phpcs:ignore WordPress.Security.NonceVerification.Missing -- just a look up
     204        check_ajax_referer( 'wfea-nonce', 'nonce' );
     205        if ( !current_user_can( 'edit_posts' ) ) {
     206            wp_die( -1 );
     207        }
    202208        $token = ( !empty( $_POST['token'] ) ? sanitize_text_field( wp_unslash( $_POST['token'] ) ) : $this->get_default_api_key() );
    203209        $token = $this->utilities->map_api_index_to_key( $token );
    … …  
    205211            'token' => $token,
    206212        );
    207         // phpcs:ignore WordPress.Security.NonceVerification.Missing -- just a look up
    208213        if ( !empty( $_POST['organizationID'] ) ) {
    209             // phpcs:ignore WordPress.Security.NonceVerification.Missing -- just a look up
    210214            $args['organization_id'] = sanitize_text_field( wp_unslash( $_POST['organizationID'] ) );
    211215        }
    212         // phpcs:ignore WordPress.Security.NonceVerification.Missing -- just a look up
    213         //if ( ! empty( $_POST['organizerID'] ) ) {
    214         //"{"status_code":400,"error_description":"There are errors with your arguments: organizer_id - Unknown parameter","error":"ARGUMENTS_ERROR"}"
    215         // $args['organizer_id'] = sanitize_text_field( $_POST['organizerID'] );
    216         //}
    217         // phpcs:ignore WordPress.Security.NonceVerification.Missing -- just a look up
    218         //if ( ! empty( $_POST['venueID'] ) ) {
    219         //"{"status_code":400,"error_description":"There are errors with your arguments: organizer_id - Unknown parameter","error":"ARGUMENTS_ERROR"}"
    220         // $args['venue_id'] = sanitize_text_field( $_POST['venueID'] );
    221         //}
    222216        //"{"status_code":400,"error_description":"There are errors with your arguments: organizer_id - Unknown parameter","error":"ARGUMENTS_ERROR"}"
    223217        $events = Eventbrite_Manager::$instance->get_organizations_events( $args, false );
    … …  
    229223
    230224    public function send_organizers_for_key() {
     225        check_ajax_referer( 'wfea-nonce', 'nonce' );
     226        if ( !current_user_can( 'edit_posts' ) ) {
     227            wp_die( -1 );
     228        }
    231229        $organizers_options = $this->get_options( 'organizer' );
    232230        wp_send_json( $organizers_options );
    … …  
    235233
    236234    private function get_options( $option_type ) {
    237         // phpcs:ignore WordPress.Security.NonceVerification.Missing -- just a look up
     235        // phpcs:ignore WordPress.Security.NonceVerification.Missing -- nonce verified in calling public methods (send_organizers_for_key, send_venues_options).
    238236        $token = ( !empty( $_POST['token'] ) ? sanitize_text_field( wp_unslash( $_POST['token'] ) ) : '' );
    239237        $token = $this->utilities->map_api_index_to_key( $token );
    … …  
    242240            $args['token'] = $token;
    243241        }
    244         // phpcs:ignore WordPress.Security.NonceVerification.Missing -- just a look up
     242        // phpcs:ignore WordPress.Security.NonceVerification.Missing -- nonce verified in calling public methods.
    245243        if ( !empty( $_POST['organizationID'] ) ) {
    246             // phpcs:ignore WordPress.Security.NonceVerification.Missing -- just a look up
     244            // phpcs:ignore WordPress.Security.NonceVerification.Missing -- nonce verified in calling public methods.
    247245            $args['organization_id'] = sanitize_text_field( wp_unslash( $_POST['organizationID'] ) );
    248246        }
    … …  
    262260
    263261    public function send_venues_options() {
     262        check_ajax_referer( 'wfea-nonce', 'nonce' );
     263        if ( !current_user_can( 'edit_posts' ) ) {
     264            wp_die( -1 );
     265        }
    264266        $venue_options = $this->get_options( 'venue' );
    265267        wp_send_json( $venue_options );
    … …  
    268270
    269271    public function send_api_key_options() {
     272        check_ajax_referer( 'wfea-nonce', 'nonce' );
     273        if ( !current_user_can( 'edit_posts' ) ) {
     274            wp_die( -1 );
     275        }
    270276        wp_send_json( $this->get_api_key_options() );
    271277    }
    … …  
    590596    public function update_elementor_widget_content() {
    591597        check_ajax_referer( 'wfea-nonce', 'nonce' );
     598        if ( !current_user_can( 'edit_posts' ) ) {
     599            wp_die( -1 );
     600        }
    592601        // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- $this->utilities->sanitize_text_or_array_field() sanitizes the input
    593602        $params = ( isset( $_POST['params'] ) ? $this->utilities->sanitize_text_or_array_field( wp_unslash( $_POST['params'] ) ) : array() );
    … …  
    652661    public function validate_date() {
    653662        check_ajax_referer( 'wfea-nonce', 'nonce' );
     663        if ( !current_user_can( 'edit_posts' ) ) {
     664            wp_die( -1 );
     665        }
    654666        if ( isset( $_POST['wfea_date_value'] ) ) {
    655667            $date = sanitize_text_field( wp_unslash( $_POST['wfea_date_value'] ) );

  • widget-for-eventbrite-api/tags/6.5.7/readme.txt

    r3445634 r3448022  
    33Tags: eventbrite, widget, events, eventbrite widget, eventbrite shortcode
    44Tested up to: 6.9
    5 Stable tag: 6.5.6
     5Stable tag: 6.5.7
    66Requires PHP: 7.4
    77License: GPL-2.0-or-later

  • widget-for-eventbrite-api/tags/6.5.7/widget-for-eventbrite-api.php

    r3445634 r3448022  
    77 * Plugin URI:        https://fullworksplugins.com/products/widget-for-eventbrite/
    88 * Description:       Easily display Eventbrite events on your WordPress site
    9  * Version:           6.5.6
     9 * Version:           6.5.7
    1010 * Requires at least: 5.6
    1111 * Requires PHP:      7.4
    … …  
    4343define( 'WIDGET_FOR_EVENTBRITE_API_PLUGIN_URL', plugin_dir_url( __FILE__ ) );
    4444define( 'WIDGET_FOR_EVENTBRITE_API_PLUGINS_TOP_DIR', plugin_dir_path( __DIR__ ) );
    45 define( 'WIDGET_FOR_EVENTBRITE_API_PLUGIN_VERSION', '6.5.6' );
     45define( 'WIDGET_FOR_EVENTBRITE_API_PLUGIN_VERSION', '6.5.7' );
    4646// Include the plugin autoloader, so we can dynamically include the classes.
    4747require_once WIDGET_FOR_EVENTBRITE_API_PLUGIN_DIR . 'includes/vendor/autoload.php';

  • widget-for-eventbrite-api/trunk/changelog.txt

    r3445634 r3448022  
     1= 6.5.7 =
     2* Improve security for block editor and Elementor widget controls
     3
    14= 6.5.6 =
    25* Fix webhook payload URL not persisting after generation (Pro Only)

  • widget-for-eventbrite-api/trunk/includes/class-core.php

    r3445634 r3448022  
    171171        add_filter( 'site_status_tests', array($plugin_admin, 'site_status_tests') );
    172172        add_action( 'wp_ajax_update_widget_content', array($widget_helpers, 'update_elementor_widget_content') );
    173         add_action( 'wp_ajax_nopriv_update_widget_content', array($widget_helpers, 'update_elementor_widget_content') );
    174173        add_action( 'wp_ajax_fetch_organizations_for_key', array($widget_helpers, 'get_organizations_for_key') );
    175         add_action( 'wp_ajax_nopriv_fetch_organizations_for_key', array($widget_helpers, 'get_organizations_for_key') );
    176174        add_action( 'wp_ajax_fetch_events_for_key', array($widget_helpers, 'send_events_for_key') );
    177         add_action( 'wp_ajax_nopriv_fetch_events_for_key', array($widget_helpers, 'send_events_for_key') );
    178175        add_action( 'wp_ajax_fetch_organizers_for_key', array($widget_helpers, 'send_organizers_for_key') );
    179         add_action( 'wp_ajax_nopriv_fetch_organizers_for_key', array($widget_helpers, 'send_organizers_for_key') );
    180176        add_action( 'wp_ajax_fetch_venues_options', array($widget_helpers, 'send_venues_options') );
    181         add_action( 'wp_ajax_nopriv_fetch_venues_options', array($widget_helpers, 'send_venues_options') );
    182177        add_action( 'wp_ajax_fetch_api_key_options', array($widget_helpers, 'send_api_key_options') );
    183         add_action( 'wp_ajax_nopriv_fetch_api_key_options', array($widget_helpers, 'send_api_key_options') );
    184178        add_action( 'wp_ajax_validate_date', array($widget_helpers, 'validate_date') );
    185         add_action( 'wp_ajax_nopriv_validate_date', array($widget_helpers, 'validate_date') );
    186179        add_action( 'init', function () {
    187180            new \WidgetForEventbriteAPI\Includes\Widgets();

  • widget-for-eventbrite-api/trunk/includes/vendor/composer/installed.php

    r3445634 r3448022  
    22    'root' => array(
    33        'name' => 'fullworks/widget-for-eventbrite-api',
    4         'pretty_version' => '6.5.6',
    5         'version' => '6.5.6.0',
    6         'reference' => 'e261b24b8e3d4393aad9d26fbc4dc3d8c5974fab',
     4        'pretty_version' => '6.5.7',
     5        'version' => '6.5.7.0',
     6        'reference' => '68c0ccba6be41d8f18f7cc0ebb931b1a6eb2bd64',
    77        'type' => 'wordpress-plugin',
    88        'install_path' => __DIR__ . '/../../../',
    … …  
    7070        ),
    7171        'fullworks/widget-for-eventbrite-api' => array(
    72             'pretty_version' => '6.5.6',
    73             'version' => '6.5.6.0',
    74             'reference' => 'e261b24b8e3d4393aad9d26fbc4dc3d8c5974fab',
     72            'pretty_version' => '6.5.7',
     73            'version' => '6.5.7.0',
     74            'reference' => '68c0ccba6be41d8f18f7cc0ebb931b1a6eb2bd64',
    7575            'type' => 'wordpress-plugin',
    7676            'install_path' => __DIR__ . '/../../../',

  • widget-for-eventbrite-api/trunk/includes/widgets/elementor/class-eventbrite-widget-elementor-helpers.php

    r3273977 r3448022  
    192192
    193193    public function get_organizations_for_key() {
    194         // phpcs:ignore WordPress.Security.NonceVerification.Missing -- just a look up
     194        check_ajax_referer( 'wfea-nonce', 'nonce' );
     195        if ( !current_user_can( 'edit_posts' ) ) {
     196            wp_die( -1 );
     197        }
    195198        $token = ( !empty( $_POST['token'] ) ? sanitize_text_field( wp_unslash( $_POST['token'] ) ) : '' );
    196199        $token = $this->utilities->map_api_index_to_key( $token );
    … …  
    199202
    200203    public function send_events_for_key() {
    201         // phpcs:ignore WordPress.Security.NonceVerification.Missing -- just a look up
     204        check_ajax_referer( 'wfea-nonce', 'nonce' );
     205        if ( !current_user_can( 'edit_posts' ) ) {
     206            wp_die( -1 );
     207        }
    202208        $token = ( !empty( $_POST['token'] ) ? sanitize_text_field( wp_unslash( $_POST['token'] ) ) : $this->get_default_api_key() );
    203209        $token = $this->utilities->map_api_index_to_key( $token );
    … …  
    205211            'token' => $token,
    206212        );
    207         // phpcs:ignore WordPress.Security.NonceVerification.Missing -- just a look up
    208213        if ( !empty( $_POST['organizationID'] ) ) {
    209             // phpcs:ignore WordPress.Security.NonceVerification.Missing -- just a look up
    210214            $args['organization_id'] = sanitize_text_field( wp_unslash( $_POST['organizationID'] ) );
    211215        }
    212         // phpcs:ignore WordPress.Security.NonceVerification.Missing -- just a look up
    213         //if ( ! empty( $_POST['organizerID'] ) ) {
    214         //"{"status_code":400,"error_description":"There are errors with your arguments: organizer_id - Unknown parameter","error":"ARGUMENTS_ERROR"}"
    215         // $args['organizer_id'] = sanitize_text_field( $_POST['organizerID'] );
    216         //}
    217         // phpcs:ignore WordPress.Security.NonceVerification.Missing -- just a look up
    218         //if ( ! empty( $_POST['venueID'] ) ) {
    219         //"{"status_code":400,"error_description":"There are errors with your arguments: organizer_id - Unknown parameter","error":"ARGUMENTS_ERROR"}"
    220         // $args['venue_id'] = sanitize_text_field( $_POST['venueID'] );
    221         //}
    222216        //"{"status_code":400,"error_description":"There are errors with your arguments: organizer_id - Unknown parameter","error":"ARGUMENTS_ERROR"}"
    223217        $events = Eventbrite_Manager::$instance->get_organizations_events( $args, false );
    … …  
    229223
    230224    public function send_organizers_for_key() {
     225        check_ajax_referer( 'wfea-nonce', 'nonce' );
     226        if ( !current_user_can( 'edit_posts' ) ) {
     227            wp_die( -1 );
     228        }
    231229        $organizers_options = $this->get_options( 'organizer' );
    232230        wp_send_json( $organizers_options );
    … …  
    235233
    236234    private function get_options( $option_type ) {
    237         // phpcs:ignore WordPress.Security.NonceVerification.Missing -- just a look up
     235        // phpcs:ignore WordPress.Security.NonceVerification.Missing -- nonce verified in calling public methods (send_organizers_for_key, send_venues_options).
    238236        $token = ( !empty( $_POST['token'] ) ? sanitize_text_field( wp_unslash( $_POST['token'] ) ) : '' );
    239237        $token = $this->utilities->map_api_index_to_key( $token );
    … …  
    242240            $args['token'] = $token;
    243241        }
    244         // phpcs:ignore WordPress.Security.NonceVerification.Missing -- just a look up
     242        // phpcs:ignore WordPress.Security.NonceVerification.Missing -- nonce verified in calling public methods.
    245243        if ( !empty( $_POST['organizationID'] ) ) {
    246             // phpcs:ignore WordPress.Security.NonceVerification.Missing -- just a look up
     244            // phpcs:ignore WordPress.Security.NonceVerification.Missing -- nonce verified in calling public methods.
    247245            $args['organization_id'] = sanitize_text_field( wp_unslash( $_POST['organizationID'] ) );
    248246        }
    … …  
    262260
    263261    public function send_venues_options() {
     262        check_ajax_referer( 'wfea-nonce', 'nonce' );
     263        if ( !current_user_can( 'edit_posts' ) ) {
     264            wp_die( -1 );
     265        }
    264266        $venue_options = $this->get_options( 'venue' );
    265267        wp_send_json( $venue_options );
    … …  
    268270
    269271    public function send_api_key_options() {
     272        check_ajax_referer( 'wfea-nonce', 'nonce' );
     273        if ( !current_user_can( 'edit_posts' ) ) {
     274            wp_die( -1 );
     275        }
    270276        wp_send_json( $this->get_api_key_options() );
    271277    }
    … …  
    590596    public function update_elementor_widget_content() {
    591597        check_ajax_referer( 'wfea-nonce', 'nonce' );
     598        if ( !current_user_can( 'edit_posts' ) ) {
     599            wp_die( -1 );
     600        }
    592601        // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- $this->utilities->sanitize_text_or_array_field() sanitizes the input
    593602        $params = ( isset( $_POST['params'] ) ? $this->utilities->sanitize_text_or_array_field( wp_unslash( $_POST['params'] ) ) : array() );
    … …  
    652661    public function validate_date() {
    653662        check_ajax_referer( 'wfea-nonce', 'nonce' );
     663        if ( !current_user_can( 'edit_posts' ) ) {
     664            wp_die( -1 );
     665        }
    654666        if ( isset( $_POST['wfea_date_value'] ) ) {
    655667            $date = sanitize_text_field( wp_unslash( $_POST['wfea_date_value'] ) );

  • widget-for-eventbrite-api/trunk/readme.txt

    r3445634 r3448022  
    33Tags: eventbrite, widget, events, eventbrite widget, eventbrite shortcode
    44Tested up to: 6.9
    5 Stable tag: 6.5.6
     5Stable tag: 6.5.7
    66Requires PHP: 7.4
    77License: GPL-2.0-or-later

  • widget-for-eventbrite-api/trunk/widget-for-eventbrite-api.php

    r3445634 r3448022  
    77 * Plugin URI:        https://fullworksplugins.com/products/widget-for-eventbrite/
    88 * Description:       Easily display Eventbrite events on your WordPress site
    9  * Version:           6.5.6
     9 * Version:           6.5.7
    1010 * Requires at least: 5.6
    1111 * Requires PHP:      7.4
    … …  
    4343define( 'WIDGET_FOR_EVENTBRITE_API_PLUGIN_URL', plugin_dir_url( __FILE__ ) );
    4444define( 'WIDGET_FOR_EVENTBRITE_API_PLUGINS_TOP_DIR', plugin_dir_path( __DIR__ ) );
    45 define( 'WIDGET_FOR_EVENTBRITE_API_PLUGIN_VERSION', '6.5.6' );
     45define( 'WIDGET_FOR_EVENTBRITE_API_PLUGIN_VERSION', '6.5.7' );
    4646// Include the plugin autoloader, so we can dynamically include the classes.
    4747require_once WIDGET_FOR_EVENTBRITE_API_PLUGIN_DIR . 'includes/vendor/autoload.php';
Note: See TracChangeset for help on using the changeset viewer.