diff --git a/README.md b/README.md index 138e3f934..dfd1d7a27 100644 --- a/README.md +++ b/README.md @@ -147,6 +147,13 @@ https://www.youtube.com/watch?v=dJrykKQGDcs ## Changelog ## +### 4.7.15 + +* FIXED + * Fixed media ownership verification for activity updates with attached media. + * Fixed media ownership verification for comments on activities and single media. + * Fixed activity ownership verification and input sanitization on media upload endpoint. + ### 4.7.14 * FIXED diff --git a/changelog.txt b/changelog.txt index aa271b3c2..753f122a0 100644 --- a/changelog.txt +++ b/changelog.txt @@ -1,5 +1,13 @@ == Changelog == += 4.7.15 [October 13, 2026] = + +* FIXED + * Fixed media ownership verification for activity updates with attached media. + * Fixed media ownership verification for comments on activities and single media. + * Fixed activity ownership verification and input sanitization on media upload endpoint. + + = 4.7.14 [October 06, 2026] = * FIXED diff --git a/index.php b/index.php index 49d8c439e..a1da0a583 100644 --- a/index.php +++ b/index.php @@ -3,7 +3,7 @@ * Plugin Name: rtMedia for WordPress, BuddyPress and bbPress * Plugin URI: https://rtmedia.io/?utm_source=dashboard&utm_medium=plugin&utm_campaign=buddypress-media * Description: This plugin adds missing media rich features like photos, videos and audio uploading to BuddyPress which are essential if you are building social network, seriously! - * Version: 4.7.14 + * Version: 4.7.15 * Requires at least: 4.9.6 * Text Domain: buddypress-media * Author: rtCamp @@ -26,7 +26,7 @@ /** * The version of the plugin */ - define( 'RTMEDIA_VERSION', '4.7.14' ); + define( 'RTMEDIA_VERSION', '4.7.15' ); } if ( ! defined( 'RTMEDIA_PATH' ) ) { diff --git a/languages/buddpress-media.pot b/languages/buddpress-media.pot index f50f35459..2f97e1f3f 100644 --- a/languages/buddpress-media.pot +++ b/languages/buddpress-media.pot @@ -2,14 +2,14 @@ # This file is distributed under the GPLv2 or later. msgid "" msgstr "" -"Project-Id-Version: rtMedia for WordPress, BuddyPress and bbPress 4.7.14\n" +"Project-Id-Version: rtMedia for WordPress, BuddyPress and bbPress 4.7.15\n" "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/buddypress-media\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" -"POT-Creation-Date: 2026-10-01T07:41:26+00:00\n" +"POT-Creation-Date: 2026-10-13T06:23:39+00:00\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "X-Generator: WP-CLI 2.12.0\n" "X-Domain: buddypress-media\n" @@ -2220,7 +2220,7 @@ msgstr "" #. translators: 1: Username, 2: Number of medias, 3: Media slug. #: app/main/controllers/activity/RTMediaBuddyPressActivity.php:988 #: app/main/controllers/activity/RTMediaBuddyPressActivity.php:991 -#: app/main/controllers/upload/RTMediaUploadEndpoint.php:283 +#: app/main/controllers/upload/RTMediaUploadEndpoint.php:294 #, php-format msgid "%1$s added %2$d %3$s" msgstr "" @@ -3019,18 +3019,18 @@ msgstr "" msgid "Invalid attribute passed for rtmedia_gallery shortcode." msgstr "" -#: app/main/controllers/template/RTMediaTemplate.php:472 -#: app/main/controllers/template/RTMediaTemplate.php:612 -#: app/main/controllers/template/RTMediaTemplate.php:735 -#: app/main/controllers/template/RTMediaTemplate.php:975 +#: app/main/controllers/template/RTMediaTemplate.php:486 +#: app/main/controllers/template/RTMediaTemplate.php:627 +#: app/main/controllers/template/RTMediaTemplate.php:750 +#: app/main/controllers/template/RTMediaTemplate.php:995 msgid "Ooops !!! Invalid access. No nonce was found !!" msgstr "" -#: app/main/controllers/template/RTMediaTemplate.php:482 +#: app/main/controllers/template/RTMediaTemplate.php:496 msgid "Media updated Successfully" msgstr "" -#: app/main/controllers/template/RTMediaTemplate.php:501 +#: app/main/controllers/template/RTMediaTemplate.php:515 msgid "Error in updating Media" msgstr "" diff --git a/languages/buddypress-media.pot b/languages/buddypress-media.pot index f50f35459..2f97e1f3f 100644 --- a/languages/buddypress-media.pot +++ b/languages/buddypress-media.pot @@ -2,14 +2,14 @@ # This file is distributed under the GPLv2 or later. msgid "" msgstr "" -"Project-Id-Version: rtMedia for WordPress, BuddyPress and bbPress 4.7.14\n" +"Project-Id-Version: rtMedia for WordPress, BuddyPress and bbPress 4.7.15\n" "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/buddypress-media\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" -"POT-Creation-Date: 2026-10-01T07:41:26+00:00\n" +"POT-Creation-Date: 2026-10-13T06:23:39+00:00\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "X-Generator: WP-CLI 2.12.0\n" "X-Domain: buddypress-media\n" @@ -2220,7 +2220,7 @@ msgstr "" #. translators: 1: Username, 2: Number of medias, 3: Media slug. #: app/main/controllers/activity/RTMediaBuddyPressActivity.php:988 #: app/main/controllers/activity/RTMediaBuddyPressActivity.php:991 -#: app/main/controllers/upload/RTMediaUploadEndpoint.php:283 +#: app/main/controllers/upload/RTMediaUploadEndpoint.php:294 #, php-format msgid "%1$s added %2$d %3$s" msgstr "" @@ -3019,18 +3019,18 @@ msgstr "" msgid "Invalid attribute passed for rtmedia_gallery shortcode." msgstr "" -#: app/main/controllers/template/RTMediaTemplate.php:472 -#: app/main/controllers/template/RTMediaTemplate.php:612 -#: app/main/controllers/template/RTMediaTemplate.php:735 -#: app/main/controllers/template/RTMediaTemplate.php:975 +#: app/main/controllers/template/RTMediaTemplate.php:486 +#: app/main/controllers/template/RTMediaTemplate.php:627 +#: app/main/controllers/template/RTMediaTemplate.php:750 +#: app/main/controllers/template/RTMediaTemplate.php:995 msgid "Ooops !!! Invalid access. No nonce was found !!" msgstr "" -#: app/main/controllers/template/RTMediaTemplate.php:482 +#: app/main/controllers/template/RTMediaTemplate.php:496 msgid "Media updated Successfully" msgstr "" -#: app/main/controllers/template/RTMediaTemplate.php:501 +#: app/main/controllers/template/RTMediaTemplate.php:515 msgid "Error in updating Media" msgstr "" diff --git a/readme.txt b/readme.txt index bfa5e285a..431b0d80b 100644 --- a/readme.txt +++ b/readme.txt @@ -5,7 +5,7 @@ License: GPLv2 or later License URI: http://www.gnu.org/licenses/gpl-2.0.html Requires at least: 4.9.6 Tested up to: 7.0 -Stable tag: 4.7.14 +Stable tag: 4.7.15 Add albums, photo, audio/video upload, privacy, sharing, front-end uploads & more. All this works on mobile/tablets devices. @@ -128,6 +128,13 @@ http://www.youtube.com/watch?v=dJrykKQGDcs == Changelog == += 4.7.15 [October 13, 2026] = + +* FIXED + * Fixed media ownership verification for activity updates with attached media. + * Fixed media ownership verification for comments on activities and single media. + * Fixed activity ownership verification and input sanitization on media upload endpoint. + = 4.7.14 [October 06, 2026] = * FIXED @@ -1034,6 +1041,9 @@ http://www.youtube.com/watch?v=dJrykKQGDcs == Upgrade Notice == += 4.7.15 = +This release includes important security improvements for media ownership verification and upload endpoint activity authorization. We strongly recommend upgrading. + = 4.7.14 = This release includes important security improvements for media uploads, file extension validation and media edit authorization. We strongly recommend upgrading.