Merge pull request #97 from oceanwp/rc-2.2.7

Rc 2.2.7

changelog.txt

@@ -1,5 +1,8 @@
 == Changelog ==
 
+= 2.2.7 - APR 08 2024 =
+- Fixed: Potential vulnerability patched: Wordfence report from Apr 3rd 2024. A special thanks goes towards the Wordfence team for doublechecking everything as always.
+
 = 2.2.6 - MAR 12 2024 =
 - Added: Shortcode: [oceanwp_icon]: New shortcode parameter "location" to differentiate the use of specific icon libraries.  https://docs.oceanwp.org/article/779-oceanwp-icon-shortcode
 - Fixed: Theme: Lightbox feature remains enabled on Gutenberg Gallery block even if disabled via Customize > General Options > Performance. Requires the latest version of the OceanWP theme.

includes/adobe-font.php

@@ -257,11 +257,14 @@ public function render_customizer_group() {
 		 *
 		 * @param array $fonts Add Adobe Fonts to the list of available fonts.
 		 */
+
 		public function add_elementor_fonts( $fonts ) {
 			$fonts_list   = get_option( 'oe-adobe-fonts' );
-			$all_fonts    = $fonts_list['oe-adobe-fonts-list'];
 			$custom_fonts = array();
-			if ( ! empty( $all_fonts ) ) {
+
+			// Check if $fonts_list is an array and if 'oe-adobe-fonts-list' key exists.
+			if ( is_array( $fonts_list ) && ! empty( $fonts_list['oe-adobe-fonts-list'] ) ) {
+				$all_fonts = $fonts_list['oe-adobe-fonts-list'];
 				foreach ( $all_fonts as $font_family_name => $fonts_url ) {
 					$font_slug                 = isset( $fonts_url['slug'] ) ? $fonts_url['slug'] : '';
 					$font_css                  = isset( $fonts_url['css_names'][0] ) ? $fonts_url['css_names'][0] : $font_slug;

includes/widgets/social-share.php

@@ -260,18 +260,18 @@ public function widget( $args, $instance ) {
 						if ( ! isset( $social_array[ $social_key ] ) ) {
 							continue;
 						}
-						$name    = $social_array[$social_key]['name'];
-						$title   = $social_array[$social_key]['title'];
-						$url     = $social_array[$social_key]['url'];
+						$name    = esc_html($social_array[$social_key]['name']);
+						$title   = esc_attr($social_array[$social_key]['title']);
+						$url     = esc_url($social_array[$social_key]['url']);
 						$icon    = $social_array[$social_key]['icon'];
 
 						if ( $social_key == 'twitter' && !empty( $twitter_username ) ) {
-							$url = $url . '&via='.$twitter_username;
+							$url = esc_url($url . '&via=' . $twitter_username);
 						}
 
 						echo '<li class="'. esc_attr( $social_key ) .'">';
 
-							echo '<a href="'. $url .'" title="'. esc_attr( $title ) .'" '. wp_kses_post( $add_style ) . ' onclick="owpShareOnClick( this.href );return false;">';
+							echo '<a href="'. esc_url($url) .'" title="'. esc_attr( $title ) .'" '. wp_kses_post( $add_style ) . ' onclick="owpShareOnClick( this.href );return false;">';
 
 								echo '<span class="owp-icon-wrap">';
 									echo $icon;

includes/widgets/social.php

@@ -341,7 +341,7 @@ public function widget( $args, $instance ) {
 
 							echo '<li class="oceanwp-'. esc_attr( $key ) .'">';
 
-								echo '<a href="'. $link .'" aria-label="'. esc_attr( $name ) .'" '. wp_kses_post( $add_style ) . ' target="_'. esc_attr( $target ) .'" '. $link_rel .'>';
+								echo '<a href="'. esc_url( $link ) .'" aria-label="'. esc_attr( $name ) .'" '. wp_kses_post( $add_style ) . ' target="_'. esc_attr( $target ) .'" '. $link_rel .'>';
 
 									Ocean_Extra::oe_svg_icon( $icon );
 

languages/ocean-extra.pot

@@ -2,14 +2,14 @@
 # This file is distributed under the same license as the Ocean Extra plugin.
 msgid ""
 msgstr ""
-"Project-Id-Version: Ocean Extra 2.2.6\n"
+"Project-Id-Version: Ocean Extra 2.2.7\n"
 "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/ocean-extra\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <[email protected]>\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"POT-Creation-Date: 2024-03-12T05:58:13+00:00\n"
+"POT-Creation-Date: 2024-04-08T05:29:46+00:00\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "X-Generator: WP-CLI 2.9.0\n"
 "X-Domain: ocean-extra\n"

ocean-extra.php

@@ -3,7 +3,7 @@
  * Plugin Name:         Ocean Extra
  * Plugin URI:          https://oceanwp.org/extension/ocean-extra/
  * Description:         Add extra features and flexibility to your OceanWP theme for a turbocharged premium experience and full control over every aspect of your website.
- * Version:             2.2.6
+ * Version:             2.2.7
  * Author:              OceanWP
  * Author URI:          https://oceanwp.org/
  * Requires at least:   5.6

readme.txt

@@ -3,7 +3,7 @@ Contributors: oceanwp, apprimit, wpfleek
 Tags: widgets, meta box, metaboxes, metabox, oceanwp
 Requires at least: 5.6
 Tested up to: 6.5
-Stable tag: 2.2.6
+Stable tag: 2.2.7
 Requires PHP: 7.2
 License: GPLv2 or later
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
@@ -216,6 +216,9 @@ You can report problems on [this support forum](https://wordpress.org/support/pl
 
 == Changelog ==
 
+= 2.2.7 - APR 08 2024 =
+- Fixed: Potential vulnerability patched: Wordfence report from Apr 3rd 2024. A special thanks goes towards the Wordfence team for doublechecking everything as always.
+
 = 2.2.6 - MAR 12 2024 =
 - Added: Shortcode: [oceanwp_icon]: New shortcode parameter "location" to differentiate the use of specific icon libraries.  https://docs.oceanwp.org/article/779-oceanwp-icon-shortcode
 - Fixed: Theme: Lightbox feature remains enabled on Gutenberg Gallery block even if disabled via Customize > General Options > Performance. Requires the latest version of the OceanWP theme.