Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 7 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -147,6 +147,13 @@ https://www.youtube.com/watch?v=dJrykKQGDcs

## Changelog ##

### 4.7.15

* FIXED
* Fixed media ownership verification for activity updates with attached media.
* Fixed media ownership verification for comments on activities and single media.
* Fixed activity ownership verification and input sanitization on media upload endpoint.

### 4.7.14

* FIXED
Expand Down
8 changes: 8 additions & 0 deletions changelog.txt
Original file line number Diff line number Diff line change
@@ -1,5 +1,13 @@
== Changelog ==

= 4.7.15 [October 13, 2026] =

* FIXED
* Fixed media ownership verification for activity updates with attached media.
* Fixed media ownership verification for comments on activities and single media.
* Fixed activity ownership verification and input sanitization on media upload endpoint.


= 4.7.14 [October 06, 2026] =

* FIXED
Expand Down
4 changes: 2 additions & 2 deletions index.php
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
* Plugin Name: rtMedia for WordPress, BuddyPress and bbPress
* Plugin URI: https://rtmedia.io/?utm_source=dashboard&utm_medium=plugin&utm_campaign=buddypress-media
* Description: This plugin adds missing media rich features like photos, videos and audio uploading to BuddyPress which are essential if you are building social network, seriously!
* Version: 4.7.14
* Version: 4.7.15
* Requires at least: 4.9.6
* Text Domain: buddypress-media
* Author: rtCamp
Expand All @@ -26,7 +26,7 @@
/**
* The version of the plugin
*/
define( 'RTMEDIA_VERSION', '4.7.14' );
define( 'RTMEDIA_VERSION', '4.7.15' );
}

if ( ! defined( 'RTMEDIA_PATH' ) ) {
Expand Down
18 changes: 9 additions & 9 deletions languages/buddpress-media.pot
Original file line number Diff line number Diff line change
Expand Up @@ -2,14 +2,14 @@
# This file is distributed under the GPLv2 or later.
msgid ""
msgstr ""
"Project-Id-Version: rtMedia for WordPress, BuddyPress and bbPress 4.7.14\n"
"Project-Id-Version: rtMedia for WordPress, BuddyPress and bbPress 4.7.15\n"
"Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/buddypress-media\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
"POT-Creation-Date: 2026-10-01T07:41:26+00:00\n"
"POT-Creation-Date: 2026-10-13T06:23:39+00:00\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"X-Generator: WP-CLI 2.12.0\n"
"X-Domain: buddypress-media\n"
Expand Down Expand Up @@ -2220,7 +2220,7 @@ msgstr ""
#. translators: 1: Username, 2: Number of medias, 3: Media slug.
#: app/main/controllers/activity/RTMediaBuddyPressActivity.php:988
#: app/main/controllers/activity/RTMediaBuddyPressActivity.php:991
#: app/main/controllers/upload/RTMediaUploadEndpoint.php:283
#: app/main/controllers/upload/RTMediaUploadEndpoint.php:294
#, php-format
msgid "%1$s added %2$d %3$s"
msgstr ""
Expand Down Expand Up @@ -3019,18 +3019,18 @@ msgstr ""
msgid "Invalid attribute passed for rtmedia_gallery shortcode."
msgstr ""

#: app/main/controllers/template/RTMediaTemplate.php:472
#: app/main/controllers/template/RTMediaTemplate.php:612
#: app/main/controllers/template/RTMediaTemplate.php:735
#: app/main/controllers/template/RTMediaTemplate.php:975
#: app/main/controllers/template/RTMediaTemplate.php:486
#: app/main/controllers/template/RTMediaTemplate.php:627
#: app/main/controllers/template/RTMediaTemplate.php:750
#: app/main/controllers/template/RTMediaTemplate.php:995
msgid "Ooops !!! Invalid access. No nonce was found !!"
msgstr ""

#: app/main/controllers/template/RTMediaTemplate.php:482
#: app/main/controllers/template/RTMediaTemplate.php:496
msgid "Media updated Successfully"
msgstr ""

#: app/main/controllers/template/RTMediaTemplate.php:501
#: app/main/controllers/template/RTMediaTemplate.php:515
msgid "Error in updating Media"
msgstr ""

Expand Down
18 changes: 9 additions & 9 deletions languages/buddypress-media.pot
Original file line number Diff line number Diff line change
Expand Up @@ -2,14 +2,14 @@
# This file is distributed under the GPLv2 or later.
msgid ""
msgstr ""
"Project-Id-Version: rtMedia for WordPress, BuddyPress and bbPress 4.7.14\n"
"Project-Id-Version: rtMedia for WordPress, BuddyPress and bbPress 4.7.15\n"
"Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/buddypress-media\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
"POT-Creation-Date: 2026-10-01T07:41:26+00:00\n"
"POT-Creation-Date: 2026-10-13T06:23:39+00:00\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"X-Generator: WP-CLI 2.12.0\n"
"X-Domain: buddypress-media\n"
Expand Down Expand Up @@ -2220,7 +2220,7 @@ msgstr ""
#. translators: 1: Username, 2: Number of medias, 3: Media slug.
#: app/main/controllers/activity/RTMediaBuddyPressActivity.php:988
#: app/main/controllers/activity/RTMediaBuddyPressActivity.php:991
#: app/main/controllers/upload/RTMediaUploadEndpoint.php:283
#: app/main/controllers/upload/RTMediaUploadEndpoint.php:294
#, php-format
msgid "%1$s added %2$d %3$s"
msgstr ""
Expand Down Expand Up @@ -3019,18 +3019,18 @@ msgstr ""
msgid "Invalid attribute passed for rtmedia_gallery shortcode."
msgstr ""

#: app/main/controllers/template/RTMediaTemplate.php:472
#: app/main/controllers/template/RTMediaTemplate.php:612
#: app/main/controllers/template/RTMediaTemplate.php:735
#: app/main/controllers/template/RTMediaTemplate.php:975
#: app/main/controllers/template/RTMediaTemplate.php:486
#: app/main/controllers/template/RTMediaTemplate.php:627
#: app/main/controllers/template/RTMediaTemplate.php:750
#: app/main/controllers/template/RTMediaTemplate.php:995
msgid "Ooops !!! Invalid access. No nonce was found !!"
msgstr ""

#: app/main/controllers/template/RTMediaTemplate.php:482
#: app/main/controllers/template/RTMediaTemplate.php:496
msgid "Media updated Successfully"
msgstr ""

#: app/main/controllers/template/RTMediaTemplate.php:501
#: app/main/controllers/template/RTMediaTemplate.php:515
msgid "Error in updating Media"
msgstr ""

Expand Down
12 changes: 11 additions & 1 deletion readme.txt
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ License: GPLv2 or later
License URI: http://www.gnu.org/licenses/gpl-2.0.html
Requires at least: 4.9.6
Tested up to: 7.0
Stable tag: 4.7.14
Stable tag: 4.7.15

Add albums, photo, audio/video upload, privacy, sharing, front-end uploads & more. All this works on mobile/tablets devices.

Expand Down Expand Up @@ -128,6 +128,13 @@ http://www.youtube.com/watch?v=dJrykKQGDcs

== Changelog ==

= 4.7.15 [October 13, 2026] =

* FIXED
* Fixed media ownership verification for activity updates with attached media.
* Fixed media ownership verification for comments on activities and single media.
* Fixed activity ownership verification and input sanitization on media upload endpoint.

= 4.7.14 [October 06, 2026] =

* FIXED
Expand Down Expand Up @@ -1034,6 +1041,9 @@ http://www.youtube.com/watch?v=dJrykKQGDcs

== Upgrade Notice ==

= 4.7.15 =
This release includes important security improvements for media ownership verification and upload endpoint activity authorization. We strongly recommend upgrading.

= 4.7.14 =
This release includes important security improvements for media uploads, file extension validation and media edit authorization. We strongly recommend upgrading.

Expand Down
Loading