Merge pull request #466 from WPChill/security-update

3.1.17

admin/class-strong-testimonials-debug.php

@@ -53,7 +53,10 @@ public static function get_instance() {
 	 * @since 3.1.15
 	 */
 	public function wpmtst_export_testimonial(){
-
+		// Check if the user is allowed to edit posts.
+		if ( ! current_user_can( 'edit_posts' ) ) {
+			return;
+		}
 		if ( isset( $_GET['wpmtst_single_download'] ) ){
 
 			// WXR_VERSION is declared here

changelog.txt

@@ -1,3 +1,6 @@
+= 3.1.17 - 29.08.2024 -
+- Fixed: Security issue regarding Testimonial debug export
+
 = 3.1.16 - 14.08.2024 -
 - Fixed: Missing submodule files.
 

package.json

@@ -1,7 +1,7 @@
 {
   "name": "strong-testimonials",
   "author": "WPChill",
-  "version": "3.1.16",
+  "version": "3.1.17",
   "license": "GPL v3",
   "scripts": {
     "build": "webpack",

readme.txt

@@ -4,7 +4,7 @@ Tags: testimonials, testimonial slider, testimonial form, star ratings
 Requires at least: 5.2
 Requires PHP: 5.6
 Tested up to: 6.6
-Stable tag: 3.1.16
+Stable tag: 3.1.17
 License: GPLv3 or later
 License URI: http://www.gnu.org/licenses/gpl-3.0.html
 
@@ -199,6 +199,9 @@ No. If you already have testimonials in another plugin or theme, you will have t
 8. View editor
 
 == Changelog ==
+= 3.1.17 - 29.08.2024 -
+- Fixed: Security issue regarding Testimonial debug export
+
 = 3.1.16 - 14.08.2024 -
 - Fixed: Missing submodule files.
 

strong-testimonials.php

@@ -5,7 +5,7 @@
  * Description: Collect and display your testimonials or reviews.
  * Author: WPChill
  * Author URI: https://wpchill.com/
- * Version: 3.1.16
+ * Version: 3.1.17
  * Text Domain: strong-testimonials
  * Domain Path: /languages
  * Requires: 4.6 or higher
@@ -45,7 +45,7 @@
 	exit;
 }
 
-define( 'WPMTST_VERSION', '3.1.16' );
+define( 'WPMTST_VERSION', '3.1.17' );
 
 define( 'WPMTST_PLUGIN', plugin_basename( __FILE__ ) ); // strong-testimonials/strong-testimonials.php
 define( 'WPMTST', dirname( WPMTST_PLUGIN ) );           // strong-testimonials