On October 7th, 2011, ClassiPress 3.1.5 (our WordPress classifieds theme) was released. This is an important security and bug release to primarily fix a potential XSS vulnerability reported by one of our customers, Paul Loftness. Upgrading is highly recommended to close this potential hole. Fixed 12 tickets total. A breakdown of tickets can be found below.
Upgrade Information
To download v3.1.5, visit AppThemes and login to your customer account. Existing customers can download the patch or the full version.
Fixes
- facebook connect loop issue
- category selector missing go button issue
- links on the profile page displayed html instead of link
- header logo now properly links to the home page
- potential XSS vulnerabilities in the Facebook and Twitter widgets
- bug when saving ad pack on front-end form display
- logging out redirect to root on wordpress sub-directory installs
- issue when adding new coupons after upgrading from 3.1.3
- issue with popular blog posts sidebar widget not showing correct number
Changes
- enhanced the ajax category selector to handle unlimited categories
- can now delete website logo from options page
- includes new AppThemes framework
Files Modified
Modified style.css Modified author.php Modified README-FIRST.txt Deleted includes/timthumb.php Modified includes/gateways/process.php Modified includes/theme-header.php Modified includes/sidebar-popular.php Modified includes/forms/step1.php Modified includes/forms/step3-membership.php Modified includes/theme-profile.php Modified includes/admin/admin-updates.php Modified includes/admin/admin-addons.php Modified includes/admin/admin-options.php Modified includes/admin/admin-scripts.js Modified includes/admin/admin-values.php Modified includes/admin/install-script.php Modified includes/theme-widgets.php Modified includes/theme-functions.php Modified includes/theme-comments.php Modified single-ad_listing.php Modified header.php Modified classipress.pot Modified classipress-no-admin.pot Modified functions.php Modified changelog.txt Deleted classipress.po Deleted classipress-no-admin.po Added framework/ |