Skip to content

Commit 55724cf

Browse files
v4.8.6
1 parent 00de22e commit 55724cf

File tree

2 files changed

+14
-1
lines changed

2 files changed

+14
-1
lines changed

CHANGELOG.md

Lines changed: 12 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,23 @@
11
Changelog
22
=========
33

4+
#### 4.8.6 - Jun 24, 2021
5+
6+
- Add nonce field to button for dismissing notice asking for plugin review.
7+
- Add strings from config/ directory to POT file.
8+
- Add nonce check to AJAX endpoint for refreshing cached Mailchimp lists.
9+
- Add capability check to AJAX endpoint for retrieving list details.
10+
- Schedule event to refresh cached Mailchimp list upon plugin activation.
11+
12+
Thanks to the team over at [pluginvulnerabilities.com](https://www.pluginvulnerabilities.com/) for bringing some of these changes to our attention.
13+
14+
415
#### 4.8.5 - Jun 1, 2021
516

617
Add nonce verification to all URL's using _mc4wp_action query parameter.
718
This fixes a CSRF vulnerability where a malicious website could trick a logged-in admin user in performing unwanted actions.
819

9-
Thanks to Erwan from [WPScan](https://wpscan.com/) for bringing this issue to our attention.
20+
A special thanks to Erwan from [WPScan](https://wpscan.com/) for bringing this issue to our attention.
1021

1122

1223
#### 4.8.4 - May 7, 2021

includes/forms/class-form-previewer.php

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -31,6 +31,8 @@ public function load_preview() {
3131

3232
$form_id = (int) $_GET['mc4wp_preview_form'];
3333
status_header( 200 );
34+
35+
var_dump( is_singular() );
3436
require __DIR__ . '/views/preview.php';
3537
exit;
3638
}

0 commit comments

Comments
 (0)