3.4
Resolved security issue for patchstack in Unfold Widget.
3.3
Resolved Icon Box Widget Issue.
3.2
Fixed the wrong escaping issue, which the reviewer pointed out.
3.1
Resolved security issue for patchstack
- wp-content\plugins\skt-addons-for-elementor\widgets\archive\widget.php
line no 215
- wp-content\plugins\skt-addons-for-elementor\widgets\site-title\widget.php
line no 210
- wp-content\plugins\skt-addons-for-elementor\widgets\card\widget.php
line no 1158
- wp-content\plugins\skt-addons-for-elementor\widgets\edd-category-carousel\widget.php
line no 1498
- wp-content\plugins\skt-addons-for-elementor\widgets\edd-single-product\widget.php
Line no 2694
Line no 2772
Line no 2841
- wp-content\plugins\skt-addons-for-elementor\widgets\fun-factor\widget.php
Line no 320
Line no 876
- wp-content\plugins\skt-addons-for-elementor\widgets\gardient-heading\widget.php
changes
- wp-content\plugins\skt-addons-for-elementor\widgets\horizontal-timeline\widget.php
Line no 1153
- wp-content\plugins\skt-addons-for-elementor\widgets\icon-box\widget.php
line no 752
- wp-content\plugins\skt-addons-for-elementor\widgets\image-hover-effect\widget.php
line no 1022
- wp-content\plugins\skt-addons-for-elementor\widgets\post-list\widget.php
Line no 1126
- wp-content\plugins\skt-addons-for-elementor\widgets\post-tab\widget.php
Line no 966
- wp-content\plugins\skt-addons-for-elementor\widgets\smart-post-list\widget.php
Line no 2819
- wp-content\plugins\skt-addons-for-elementor\widgets\taxonomy-list\widget.php
Line no 792
- wp-content\plugins\skt-addons-for-elementor\widgets\timeline\widget.php
Line no 1334
- wp-content\plugins\skt-addons-for-elementor\widgets\unfold\widget.php
Line no 953
3.0
Note: a) 1034, modified and removed code[ Here 1034 is line no]
- skt-addons-for-elementor\widgets\accordion\widget.php
a)line no 370 to fix phpcs:ignore WordPressVIPMinimum.Performance.WPQueryParams.PostNotIn_exclude issue
b)line no 407 to fix phpcs:ignore WordPressVIPMinimum.Performance.WPQueryParams.PostNotIn_exclude issue
c)line no 608 to fix WordPress.Security.EscapeOutput.OutputNotEscaped issued
- skt-addons-for-elementor\widgets\advanced-data-table\widget.php
a) 1034, modified and removed code
b) 1052, modified and removed code
c) 1057, modified and removed code
d) 1112, modified and removed code
e) 1118, modified and removed code
f) 1198, modified and removed code
- skt-addons-for-elementor\widgets\advanced-heading\widget.php
a) line no 346 to fix phpcs:ignore WordPressVIPMinimum.Performance.WPQueryParams.PostNotIn_exclude issue
b) 470, modified and removed code
c) 601, modified and removed code
- skt-addons-for-elementor\widgets\advanced-tabs\widget.php
a) 579, modified and removed code
b) 526, modified and removed code
c) 869, modified and removed code
d) 126, modified and removed code
- skt-addons-for-elementor\widgets\age-gate\widget.php
a) 686, modified and removed code
b) 1021, modified and removed code
- skt-addons-for-elementor\widgets\animated-text\widget.php
a) 648, modified and removed code
b) 161, font_size, line_height, modified and removed code
c) 365, line_height, modified and removed code
d) 473, font_size, line_height, modified and removed code
e) 519, font_size, line_height, modified and removed code
f) 654, 'exclude' => ['font_size','line_height',], modified and removed code
- skt-addons-for-elementor\widgets\author-list\widget.php
a) 412, image, box_shadow_position, modified and removed code
b) 483, box_shadow_position, modified and removed code
c) 535, line_height, modified and removed code
d) 609, line_height, modified and removed code
e) 674, line_height, modified and removed code
f) 739, line_height, modified and removed code
- skt-addons-for-elementor\widgets\author-meta\widget.php
a) 491, image, modified and removed code
b) 522, image, modified and removed code
- skt-addons-for-elementor\widgets\breadcrumbs\widget.php
a) 476, font_family,font_size,text_transform,font_style,line_height,letter_spacing, modified and removed code
b) 473, font_family,font_size,text_transform,font_style,line_height,letter_spacing, modified and removed code
- skt-addons-for-elementor\widgets\calderaform\widget.php
a) 246, box_shadow_position, modified and removed code
b) 571, escaping issued solved
- skt-addons-for-elementor\widgets\card\widget.php
a) 580, box_shadow_position, modified and removed code
b) 835, box_shadow_position, modified and removed code
b) 845, line_height, modified and removed code
- skt-addons-for-elementor\widgets\carousel\widget.php
a) 151, custom, modified and removed code
b) 425, image, modified and removed code
- skt-addons-for-elementor\widgets\cf7\widget.php
a) 309, box_shadow_position, modified and removed code
- skt-addons-for-elementor\widgets\comparison-table\widget.php
a) 436, custom, modified and removed code
b) 768, image, modified and removed code
- skt-addons-for-elementor\widgets\content-switcher\widget.php
a)line 55
Old : $args = [
'tax_query' => [
[
'taxonomy' => 'elementor_library_type',
'field' => 'slug',
'terms' => $type,
],
],
'post_type' => 'elementor_library',
'posts_per_page' => -1,
];
New: $args = [
'post_type' => 'elementor_library',
'posts_per_page' => -1,
'elementor_library_type' => $type, // Query directly by taxonomy slug
];
Not solved
- skt-addons-for-elementor\widgets\countdown\widget.php
a) 600, line_height, modified and removed code
b) 625, line_height, modified and removed code
c) 704, line_height, modified and removed code
d) 729, line_height, modified and removed code
e) 786, line_height, modified and removed code
f) 811, line_height, modified and removed code
g) 867, line_height, modified and removed code
h) 892, line_height, modified and removed code
i) 948, line_height, modified and removed code
j) 973, line_height, modified and removed code
- skt-addons-for-elementor\widgets\data-table\widget.php
a) 442, custom, modified and removed code
b) 684, image, modified and removed code
- skt-addons-for-elementor\widgets\edd-cart\widget.php
a) 1162, modified and removed code
b) 1163, modified and removed code
c) 1308, modified and removed code
- skt-addons-for-elementor\widgets\edd-category-carousel\widget.php
a) 71,
Old: $args = array(
'parent' => 0,
);
$parent_cats = get_terms( 'download_category', $args );
New: $args = array(
'taxonomy' => 'download_category',
'parent' => 0,
);
$parent_cats = get_terms( $args );
b) 198, 'exclude' => ['custom',], modified and removed code
c) 622 'exclude' => [ 'image' ], modified and removed code
d) 792 'exclude' => [ 'image' ], modified and removed code
e) 93
Old:
$args = [
'orderby' => 'name',
'order' => 'DESC',
];
$cats = get_terms( 'download_category', $args );
New:
$args = [
'taxonomy' => 'download_category',
'orderby' => 'name',
'order' => 'DESC',
];
$cats = get_terms( $args );
20. skt-addons-for-elementor\widgets\edd-category-grid\widget.php
a) 59
Old:
$args = array(
'parent' => 0,
);
$parent_cats = get_terms( 'download_category', $args );
New:
$args = array(
'taxonomy' => 'download_category',
'parent' => 0,
);
$parent_cats = get_terms( $args );
- skt-addons-for-elementor\widgets\edd-checkout\widget.php
a) 225 'exclude' => ['image'], modified and removed code
b) 1001 'exclude' => ['image'], modified and removed code
c) 1809 'exclude' => [ 'image' ], modified and removed code
d) 1847 'exclude' => [ 'image' ], modified and removed code
- skt-addons-for-elementor\widgets\edd-download\widget.php
a) skt-addons-for-elementor\inc\function.php on line no 26 $tag = esc_attr($tag);
- skt-addons-for-elementor\widgets\edd-login\widget.php
a) 583, 'exclude' => [ 'image' ], modified and removed code
b) 619, 'exclude' => [ 'image' ], modified and removed code
- skt-addons-for-elementor\widgets\edd-register\widget.php
a) 510 'exclude' => [ 'image' ], modified and removed code
b) 547 'exclude' => [ 'image' ], modified and removed code
- skt-addons-for-elementor\widgets\edd-single-product\widget.php
a) 159, 'exclude' => [ 'custom' ], modified and removed code
b) 462, 'exclude' => [ 'image' ], modified and removed code
c) 739, 'exclude' => [ 'line_height' ], modified and removed code
d) 892, 'exclude' => [ 'line_height' ], modified and removed code
e) 1264
Old: $this->add_group_control(
Group_Control_Border::get_type(),
[
'name' => 'cat_border',
'label' => __( 'Border', 'skt-addons-for-elementor' ),
'exclude' => [
'color',
],
'selector' => '{{WRAPPER}} .skt-edd-single-product__category a',
'condition' => [
'show_cat' => 'yes',
],
]
);
New:
$this->add_group_control(
Group_Control_Border::get_type(),
[
'name' => 'cat_border_test',
'label' => __( 'Border', 'skt-addons-for-elementor' ),
'selector' => '{{WRAPPER}} .skt-edd-single-product__category a',
'condition' => [
'show_cat' => 'yes',
],
]
);
f) 1338, 'exclude' => [ 'image' ], modified and removed code
g) 1338, 'exclude' => [ 'image' ], modified and removed code
h) 2783, 2778, 2704, 2700
i) 1338 'exclude' => [ 'image' ], modified and removed code
- skt-addons-for-elementor\widgets\event-calendar\widget.php
a) 270, custom, modified and removed code
b) 1022, font_family, modified and removed code
c) 1176, font_family, modified and removed code
d) 1085, color, modified and removed code
e) 1143, font_family, modified and removed code
f) 1490, font_family, modified and removed code
g) 1521, font_family, modified and removed code
h) 1700, font_family, modified and removed code
- skt-addons-for-elementor\widgets\flip-box\widget.php
a) 150, full,shop_catalog,shop_single, modified and removed code
b) 293, full,shop_catalog,shop_single, modified and removed code
- skt-addons-for-elementor\widgets\fluent-form\widget.php
a) 265, box_shadow_position, modified and removed code
- skt-addons-for-elementor\widgets\fun-factor\widget.php
a) 116, 'full, custom, large, shop_catalog, shop_single, shop_thumbnail, modified and removed code
b) 877, modified and removed code
- skt-addons-for-elementor\widgets\gradient-heading\widget.php
a) 247, modified and removed code
- skt-addons-for-elementor\widgets\gravityforms\widget.php
a) translate taxt, modified and removed code
- skt-addons-for-elementor\widgets\horizontal-timeline\widget.php
a) 112, custom, modified and removed code
b) 1158, 1168 , modified and removed code
- skt-addons-for-elementor\widgets\hotspots\widget.php
A) 565
'exclude' => [
'box_shadow_position',
], modified and removed code
- skt-addons-for-elementor\widgets\hover-box\widget.php
a) 650, modified and removed code
- skt-addons-for-elementor\widgets\icon-box\widget.php
a) 293, box_shadow_position, modified and removed code
b) 634, box_shadow_position, modified and removed code
c) 643, font_family, line_height, modified and removed code
- skt-addons-for-elementor\widgets\image-accordion\widget.php
a) 642, image, modified and removed code
b) 673, image, modified and removed code
c) 705, image, modified and removed code
d) 1059, image, modified and removed code
e) 1091, image, modified and removed code
f) 1450, modified and removed code
- skt-addons-for-elementor\widgets\image-compare\widget.php
a) 258, color, modified and removed code
- skt-addons-for-elementor\widgets\image-grid\widget.php
a) 131, image, modified and removed code
b) 250, custom, modified and removed code
c) 519, box_shadow_position, modified and removed code
d) 1059, image, modified and removed code
- skt-addons-for-elementor\widgets\image-hover-effect\widget.php
a) 404, image, modified and removed code
b) 425, image, modified and removed code
c) 451
- skt-addons-for-elementor\widgets\image-scroller\widget.php
a) 89, custom, modified and removed code
b) 676, box_shadow_position, modified and removed code
c) 684, line_height, modified and removed code
- skt-addons-for-elementor\widgets\image-stack-group\widget.php
a) 200, image,modified and removed code
b) 415, image,modified and removed code
- skt-addons-for-elementor\widgets\infobox\widget.php
a) 1022, modified and removed code
- skt-addons-for-elementor\widgets\justified-gallery\widget.php
a) 123, custom, modified and removed code
b) 274, custom, modified and removed code
c) 593, box_shadow_position, modified and removed code
- skt-addons-for-elementor\widgets\list-group\widget.php
a) 1293, box_shadow_position, modified and removed code
b) 1305, line_height, modified and removed code
- skt-addons-for-elementor\widgets\logo-carousel\widget.php
a) 153, custom, modified and removed code
b) 421, image, modified and removed code
- skt-addons-for-elementor\widgets\logo-grid\widget.php
a) 223, custom, modified and removed code
b) 499, image, modified and removed code
c) 642, modified and removed code
- skt-addons-for-elementor\widgets\lordicon\widget.php
a) 223, box_shadow_position, modified and removed code
- skt-addons-for-elementor\widgets\mailchimp\widget.php
a) 788, image, modified and removed code
b) 1023, image, modified and removed code
c) 1289, image, modified and removed code
d) 1323, image, modified and removed code
- skt-addons-for-elementor\widgets\member\widget.php
a) 1695, modified and removed code
b) 1773, modified and removed code
- skt-addons-for-elementor\widgets\mini-cart\widget.php
a) 304, image, modified and removed code
b) 345, image, modified and removed code
c) 1341, image, modified and removed code
d) 1372, image, modified and removed code
e) 1485, image, modified and removed code
f) 1516, image, modified and removed code
- skt-addons-for-elementor\widgets\news-ticker\widget.php
a) 515, modified and removed code
- skt-addons-for-elementor\widgets\off-canvas\widget.php
a) 1567, image, modified and removed code
b) 1717, image, modified and removed code
c) 1780, image, modified and removed code
d) 1811, image, modified and removed code
- skt-addons-for-elementor\widgets\one-page-nav\widget.php
a) 1085, modified and removed code
- skt-addons-for-elementor\widgets\page-title \widget.php
a) 233, modified and removed code
- skt-addons-for-elementor\widgets\post-carousel\widget.php
a) 77, image, modified and removed code
b) 1717, image, modified and removed code
c) 1780, image, modified and removed code
d) 1811, image, modified and removed code
- skt-addons-for-elementor\widgets\post-comments\widget.php
a) 530, image, modified and removed code
b) 560, image, modified and removed code
- skt-addons-for-elementor\widgets\post-grid\widget.php
a) 404, custom, modified and removed code
b) 842, image, modified and removed code
c) 1163, color, modified and removed code
f) 1219, image, modified and removed code
h) 1263, image, modified and removed code
i) 1843, color, modified and removed code
j) 1901, color, modified and removed code
k) 1972, image, modified and removed code
l) 2016, image, modified and removed code
m) 2225, modified and removed code
n) 2199, modified and removed code
Old: if ( wp_verify_nonce( wp_unslash($_GET['preview_nonce'])), 'your_nonce_action' ) {
New: if ( wp_verify_nonce( sanitize_text_field(wp_unslash($_GET['preview_nonce'])), 'your_nonce_action' ) ) {
Old code
if ( is_preview() ) {
if ( ( 'draft' !== $post->post_status ) && isset( $_GET['preview_id'], $_GET['preview_nonce'] ) ) {
$query_args['preview_id'] = sanitize_text_field( wp_unslash( $_GET['preview_id'] ) );
$query_args['preview_nonce'] = sanitize_text_field( wp_unslash( $_GET['preview_nonce'] ) );
}
rl = get_preview_post_link( $post, $query_args, $url );
}
New Code
if ( is_preview() ) {
if ( ( 'draft' !== $post->post_status ) && isset( $_GET['preview_id'], $_GET['preview_nonce'] ) ) {
if ( wp_verify_nonce( $_GET['preview_nonce'], 'your_nonce_action' ) ) {
$query_args['preview_id'] = sanitize_text_field( wp_unslash( $_GET['preview_id'] ) );
$query_args['preview_nonce'] = sanitize_text_field( wp_unslash( $_GET['preview_nonce'] ) );
}
}else{
$query_args['preview_id'] = sanitize_text_field( wp_unslash( $_GET['preview_id'] ) );
$query_args['preview_nonce'] = sanitize_text_field( wp_unslash( $_GET['preview_nonce'] ) );
}
$url = get_preview_post_link( $post, $query_args, $url );
}
n) 1152
Old:
$this->add_group_control(
Group_Control_Border::get_type(),
[
'name' => 'badge_border',
'label' => __( 'Border', 'skt-addons-elementor' ),
'exclude' => [
'color'
],
'selector' => '{{WRAPPER}} .skt-pg-item .skt-pg-badge a',
]
);
New:
$this->add_group_control(
Group_Control_Border::get_type(),
[
'name' => 'badge_border_test',
'label' => __( 'Border', 'skt-addons-elementor' ),
'selector' => '{{WRAPPER}} .skt-pg-item .skt-pg-badge a',
]
);
o) 1878
Old: $this->add_group_control(
Group_Control_Border::get_type(),
[
'name' => 'readmore_border',
'label' => __( 'Border', 'skt-addons-elementor' ),
'exclude' => [
'color',
],
'selector' => '{{WRAPPER}} .skt-pg-readmore a',
// 'condition' => [
// $this->get_control_id( 'read_more!' ) => '',
// ],
]
);
New:
$this->add_group_control(
Group_Control_Border::get_type(),
[
'name' => 'readmore_border_test',
'label' => __( 'Border', 'skt-addons-elementor' ),
'selector' => '{{WRAPPER}} .skt-pg-readmore a',
// 'condition' => [
// $this->get_control_id( 'read_more!' ) => '',
// ],
]
);
- skt-addons-for-elementor\widgets\post-info\widget.php
a) 1043, modified and removed code
- skt-addons-for-elementor\widgets\post-list\widget.php
a) 253, custom, modified and removed code
b) 1172, modified and removed code
c) 1183, modified and removed code
- skt-addons-for-elementor\widgets\post-navigation\widget.php
a) 334, line_height, modified and removed code
b) 253, custom, modified and removed code
- skt-addons-for-elementor\widgets\post-tab\widget.php
a) 964, modified and removed code
b) 991, modified and removed code
c) 893, modified and removed code
- skt-addons-for-elementor\widgets\post-tiles\widget.php
a) 301, image, modified and removed code
b) 335, image, modified and removed code
c) 531, box_shadow_position, modified and removed code
f) 540, line_height, font_size, modified and removed code
h) 577, line_height, font_size, modified and removed code
i) 636, font_size, modified and removed code
g) 714, line_height, font_size, modified and removed code
- skt-addons-for-elementor\widgets\post-title\widget.php
a) 236, modified and removed code
- skt-addons-for-elementor\widgets\price-menu\widget.php
a) 604, letter_spacing, modified and removed code
b) 706, letter_spacing, text_transform, modified and removed code
c) 662, box_shadow_position , modified and removed code
- skt-addons-for-elementor\widgets\pricing-table\widget.php
a) 148, custom, modified and removed code
b) 1319, image, modified and removed code
- skt-addons-for-elementor\widgets\product-carousel-new\widget.php
a) 164, custom, modified and removed code
b) 584, image, modified and removed code
- skt-addons-for-elementor\widgets\product-category-carousel-new\widget.php
a) 69
Old: $args = array(
'parent' => 0
);
$parent_cats = get_terms( 'product_cat', $args ); // phpcs:ignore WordPress.WP.DeprecatedParameters.Get_termsParam2Found
New: $args = array(
'taxonomy' => 'product_cat',
'parent' => 0,
);
$parent_cats = get_terms( $args );
b) 168 'exclude' => ['custom'], modified and removed code
c) 586 'exclude' => [ 'image' ], modified and removed code
d) 765 'exclude' => [ 'image' ], modified and removed code
e) 90
Old: $args = [
'orderby' => 'name',
'order' => 'DESC',
];
$cats = get_terms( 'product_cat', $args );
New: $args = [
'taxonomy' => 'product_cat',
'orderby' => 'name',
'order' => 'DESC',
];
$cats = get_terms( $args );
- skt-addons-for-elementor\widgets\product-category-grid-new\widget.php
a) 60
Old: $args = array(
'parent' => 0
);
$parent_cats = get_terms( 'product_cat', $args );
New: $args = array(
'taxonomy' => 'product_cat',
'parent' => 0,
);
b) 81
Old: $args = [
'orderby' => 'name',
'order' => 'DESC',
];
$cats = get_terms( 'product_cat', $args ); // phpcs:ignore WordPress.WP.DeprecatedParameters.Get_termsParam2Found
c) 191 'exclude' => ['custom'], modified and removed code
d) 590 'exclude' => [ 'image' ], modified and removed code
e) 760 'exclude' => [ 'image' ], modified and removed code
New:
$args = [
'taxonomy' => 'product_cat',
'orderby' => 'name',
'order' => 'DESC',
];
$cats = get_terms( $args );
- skt-addons-for-elementor\widgets\product-grid-new\widget.php
a)631, modified and removed code
b)493, modified and removed code
c)165, modified and removed code
- skt-addons-for-elementor\widgets\review\widget.php
a) 702, box_shadow_position, modified and removed code
b) 748, modified and removed code
- skt-addons-for-elementor\widgets\scrolling-image\widget.php
a) 205, custom, modified and removed code
- skt-addons-for-elementor\widgets\single-product-new\widget.php
Note: Notice: Function Elementor\Controls_Manager::add_control_to_stack was called incorrectly. Cannot redeclare control with same name "cat_border_color". Please see Debugging in WordPress for more information. (This message was added in version 1.0.0.) in D:\xampp\htdocs\skt_addons_elementor\wp-includes\functions.php on line 6085
a) 159, 'exclude' => [ 'custom' ], modified and removed code
b) 448, 'exclude' => [ 'image' ], modified and removed code
c) 726, 'exclude' => ['line_height'], modified and removed code
d) 878, 'exclude' => ['line_height'], modified and removed code
e) Old:
$this->add_group_control(
Group_Control_Border::get_type(),
[
'name' => 'cat_border',
'label' => __( 'Border', 'skt-addons-for-elementor' ),
'exclude' => [ // phpcs:ignore WordPressVIPMinimum.Performance.WPQueryParams.PostNotIn_exclude
'color'
],
'selector' => '{{WRAPPER}} .skt-single-product__category a',
'condition' => [
'show_cat' => 'yes',
],
]
);
New: $this->add_group_control(
Group_Control_Border::get_type(),
[
'name' => 'cat_border_test',
'label' => __( 'Border', 'skt-addons-for-elementor' ),
'selector' => '{{WRAPPER}} .skt-single-product__category a',
'condition' => [
'show_cat' => 'yes',
],
]
);
f) 1325, 'exclude' => [ 'image'], modified and removed code
g) 1366, 'exclude' => [ 'image'], modified and removed code
h) 1363 'exclude' => [ 'image'], modified and removed code
- skt-addons-for-elementor\widgets\site-logo\widget.php
a) 260, modified and removed code
- skt-addons-for-elementor\widgets\site-title\widget.php
A) 211, modified and removed code
- skt-addons-for-elementor\widgets\skills\widget.php
a) 272, box_shadow_position, modified and removed code
- skt-addons-for-elementor\widgets\slider\widget.php
a) 151, custom, modified and removed code
a) 388, image, modified and removed code
- skt-addons-for-elementor\widgets\social-share\widget.php
a) 783, modified and removed code
b) 794, modified and removed code
- skt-addons-for-elementor\widgets\step-flow\widget.php
a) 773, modified and removed code
- skt-addons-for-elementor\widgets\table-of-contents\widget.php
a) 826, 'types' => [ 'classic', 'gradient' ], modified and removed code
- skt-addons-for-elementor\widgets\taxonomy-list\widget.php
a) 793, modified and removed code
- skt-addons-for-elementor\widgets\team-carousel\widget.php
a) 205 remove custom option, modified and removed code
- skt-addons-for-elementor\widgets\testimonial\widget.php
a) 163, custom, modified and removed code
- skt-addons-for-elementor\widgets\testimonial-carousel\widget.php
a) 630, modified and removed code
b) 1574, modified and removed code
C) 1603, modified and removed code
d) 1614, modified and removed code
e) 1627, modified and removed code
f) 1641, modified and removed code
e) 1654, modified and removed code
g) 1666, modified and removed code
h) 1679, modified and removed code
- skt-addons-for-elementor\widgets\timeline\widget.php
a) 197, custom, modified and removed code
b) 564, image, modified and removed code
c) 1335, modified and removed code
d) 1340, modified and removed code
e) 1358, modified and removed code
- skt-addons-for-elementor\widgets\toggle\widget.php
a) 367, image, modified and removed code
b) 404, image, modified and removed code
- skt-addons-for-elementor\widgets\unfold\widget.php
a) 953, modified and removed code
b) 965, modified and removed code
- skt-addons-for-elementor\widgets\wc-cart\widget.php
a) 1841, modified and removed code
- skt-addons-for-elementor\widgets\weforms\widget.php
b) 225, modified and removed code
c) 290 ,'exclude' => ['box_shadow_position',], modified and removed code
- skt-addons-for-elementor\widgets\wpforms\widget.php
a) 670, modified and removed code
Old:
if ( ! empty( $settings['form_id'] ) ) {
echo skt_addons_elementor_do_shortcode( 'wpforms', [ // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
'id' => $settings['form_id'],
] );
}
New:
if ( ! empty( $settings['form_id'] ) ) {
$shortcode_output = skt_addons_elementor_do_shortcode( 'wpforms', [
'id' => $settings['form_id'],
] );
$allowed_html = [
'form' => [
'action' => [],
'method' => [],
'id' => [],
'class' => [],
],
'input' => [
'type' => [],
'name' => [],
'value' => [],
'class' => [],
'id' => [],
],
'label' => [
'for' => [],
'class' => [],
],
'div' => [
'class' => [],
'id' => [],
],
'span' => [
'class' => [],
],
'button' => [
'type' => [],
'class' => [],
'id' => [],
'name' => [],
'value' => [],
'onclick' => [],
'data-alt-text' => [],
'data-submit-text' => [],
'aria-live' => [],
],
];
echo wp_kses( $shortcode_output, $allowed_html );
}
- skt-addons-for-elementor/classes/admin-bar.php
a) Old code on 24
$type = sanitize_text_field(isset( $_POST['type'] ) ? $_POST['type'] : '');
$post_id = sanitize_text_field(isset( $_POST['post_id'] ) ? $_POST['post_id'] : 0);
New code on 24
$type = sanitize_text_field(wp_unslash(isset( $_POST['type'] ) ? $_POST['type'] : ''));
$post_id = sanitize_text_field(wp_unslash(isset( $_POST['post_id'] ) ? $_POST['post_id'] : 0));
- skt-addons-for-elementor/classes/ajax-handler.php
a) Old code on 52
$download_id = isset($_POST['download_id']) ? $_POST['download_id']: '';
New code
$download_id = sanitize_text_field(wp_unslash(isset($_POST['download_id']) ? $_POST['download_id']: ''));
b) old 71
$settings = sanitize_text_field($_POST['querySettings']);
New code
$settings = sanitize_text_field(wp_unslash($_POST['querySettings']));
c) old 84
if ($_POST['offset']) {
New if (isset($_POST['offset'])) {
d) old 85
old: $args['offset'] = sanitize_text_field($_POST['offset']);
New: $args['offset'] = sanitize_text_field(wp_unslash($_POST['offset']));
e) 87
old: if ($_POST['termId'] && is_numeric($_POST['termId'])) {
New: $args['offset'] = sanitize_text_field(wp_unslash($_POST['offset']));
f) 92
old: 'terms' => sanitize_text_field($_POST['termId']),
New: 'terms' => sanitize_text_field(wp_unslash($_POST['termId'])),
e) 156 added that function skt_addons_elementor_sanitize_array_recursively
g) 158
Old:
$settings = $_POST['querySettings'];
$post_type = $settings['post_type'];
$taxonomy = $settings['taxonomy'];
$item_limit = $settings['item_limit'];
$excerpt = $settings['excerpt'];
$title_tag = $settings['title_tag'];
$term_id = absint($_POST['term_id']);
$orderby = $settings['orderby'];
$order = $settings['order'];
$args = [
'post_status' => 'publish',
'post_type' => $post_type,
'posts_per_page' => $item_limit,
'orderby' => $orderby,
'order' => $order,
'suppress_filters' => false,
'tax_query' => [
[
'taxonomy' => $taxonomy,
'field' => 'term_id',
'terms' => $term_id,
],
],
];
New: $term_id = absint(wp_unslash(isset($_POST['term_id'])));
$post_type = $settings['post_type'];
$taxonomy = $settings['taxonomy'];
$item_limit = $settings['item_limit'];
$excerpt = $settings['excerpt'];
$title_tag = $settings['title_tag'];
$term_id = $term_id
$orderby = $settings['orderby'];
$order = $settings['order'];
$args = [
'post_status' => 'publish',
'post_type' => $post_type,
'posts_per_page' => $item_limit,
'orderby' => $orderby,
'order' => $order,
'suppress_filters' => false,
'tax_query' => [
[
'taxonomy' => $taxonomy,
'field' => 'term_id',
'terms' => $term_id,
],
],
];
- skt-addons-for-elementor/classes/clone-handler.php
a) 65
Old:
$_uri = wp_unslash(isset($_REQUEST['REQUEST_URI']) ? $_REQUEST['REQUEST_URI'] : '');
New:
if ( sanitize_text_field(wp_unslash(isset( $_POST['REQUEST_URI_nonce'] ))) && wp_verify_nonce( sanitize_text_field(wp_unslash($_POST['REQUEST_URI_nonce'], 'REQUEST_URI_nonce_action' ))) ) {
$_uri = sanitize_text_field(wp_unslash(! empty( $_REQUEST['REQUEST_URI'] ) ? $_REQUEST['REQUEST_URI'] : ''));
} else {
$_uri = sanitize_text_field(wp_unslash(! empty( $_REQUEST['REQUEST_URI'] ) ? $_REQUEST['REQUEST_URI'] : ''));
}
b) 83, modified and removed code
c) 85, modified and removed code
- skt-addons-for-elementor\classes\dashboard.php
a) 76, modified and removed code
- skt-addons-for-elementor\templates\admin\dashboard-widgets.php
a) 35
old:
printf('
%s %s',
"style='width: 100%; margin-left: 10px;'",
cwords(str_replace('-', ' ', $cat)),
esc_attr__( 'Widgets 123456', 'skt-addons-for-elementor' )
);
new:
printf('
%s %s',
"style='width: 100%; margin-left: 10px;'",
esc_attr(ucwords(str_replace('-', ' ', $cat))),
esc_attr__( 'Widgets 123456', 'skt-addons-for-elementor' )
);
- skt-addons-for-elementor\templates\admin\dashboard-main.php
a) 33
Old:
printf( '
%4$s',
$href, // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
$slug, // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
$class, // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
/
translators: translate tab title / isset( $data['title'] ) ? $data['title'] : sprintf( esc_html__( 'Tab %s', 'skt-addons-for-elementor' ), $tab_count ) // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
);
New:
printf( '
%4$s',
esc_url($href),
esc_attr($slug),
esc_attr($class),
/
translators: translate tab title / isset( $data['title'] ) ? esc_attr($data['title']) : sprintf( esc_html__( 'Tab %s', 'skt-addons-for-elementor' ), esc_attr($tab_count) )
);
- skt-addons-for-elementor\templates\admin\dashboard-analytics.php
sloved escaping issue in file
- skt-addons-for-elementor\traits\smart-post-list.php
a) 100, modified and removed code
b) 362 , 'exclude' => ['custom'], modified and removed code
c) 626, 'exclude' => ['custom'], modified and removed code
d) 1032, 'exclude' => ['image'], modified and removed code
e) 1753, 'exclude' => ['image'], modified and removed code
Old: $this->add_group_control(
Group_Control_Border::get_type(),
[
'name' => 'spl_feature_badge_border',
'label' => __( 'Border', 'skt-addons-for-elementor' ),
'exclude' => [
'color'
],
'selector' => '{{WRAPPER}} .skt-spl-featured-post .skt-spl-badge a',
'condition' => [
'show_badge' => 'yes',
],
]
);
New: $this->add_group_control(
Group_Control_Border::get_type(),
[
'name' => 'spl_feature_badge_border_test',
'label' => __( 'Border', 'skt-addons-for-elementor' ),
'selector' => '{{WRAPPER}} .skt-spl-featured-post .skt-spl-badge a',
'condition' => [
'show_badge' => 'yes',
],
]
);
g) 2279, 'exclude' => ['image'], modified and removed code
h) 2320, 'exclude' => ['image'], modified and removed code
i) 2820, escpin issue
j) 1525, modified and removed code
Old: $this->add_group_control(
Group_Control_Border::get_type(),
[
'name' => 'spl_top_bar_nav_border',
'label' => __( 'Border', 'skt-addons-for-elementor' ),
'selector' => '{{WRAPPER}} .skt-spl-pagination button',
'exclude' => ['color'],
'condition' => [
'navigation_show' => 'yes',
]
]
);
New: $this->add_group_control(
Group_Control_Border::get_type(),
[
'name' => 'spl_top_bar_nav_border_test',
'label' => __( 'Border', 'skt-addons-for-elementor' ),
'selector' => '{{WRAPPER}} .skt-spl-pagination button',
'condition' => [
'navigation_show' => 'yes',
]
]
);
- skt-addons-for-elementor\traits\button-renderer.php
a) 50, modified and removed code
b) 60, modified and removed code
c) 66, modified and removed code
- skt-addons-for-elementor\widgets\calendly\widget.php
a) 191, modified and removed code
- skt-addons-for-elementor\extensions\floating-effects.php
a) 38
Old: if ( file_exists( $extension_js ) ) {
wp_add_inline_script(
'elementor-frontend',
file_get_contents( $extension_js )
);
}
New:
$extension_js = SKT_ADDONS_ELEMENTOR_DIR_PATH . 'assets/js/extension-floating-effects.min.js';
$extension_js_url = SKT_ADDONS_ELEMENTOR_DIR_URL . 'assets/js/extension-floating-effects.min.js';
if ( file_exists( $extension_js ) ) {
wp_enqueue_script(
'extension-floating-effects',
$extension_js_url,
array( 'elementor-frontend' ),
filemtime( $extension_js ),
true
);
}
- skt-addons-for-elementor\extensions\advanced-tooltip.php
a) 29
old: $extension_js = SKT_ADDONS_ELEMENTOR_DIR_PATH . 'assets/js/extension-advanced-tooltip' . $suffix . 'js';
if (file_exists($extension_js)) {
wp_add_inline_script(
'elementor-frontend',
file_get_contents($extension_js)
);
}
New :
$extension_js = SKT_ADDONS_ELEMENTOR_DIR_PATH . 'assets/js/extension-advanced-tooltip' . $suffix . 'js';
$extension_js_url = SKT_ADDONS_ELEMENTOR_DIR_URL . 'assets/js/extension-advanced-tooltip' . $suffix . 'js';
if ( file_exists( $extension_js ) ) {
wp_enqueue_script(
'extension-tootips-effects',
$extension_js_url,
array( 'elementor-frontend' ),
filemtime( $extension_js ),
true
);
}
90. skt-addons-for-elementor\extensions\skt-particle-effects.php
a) 53
Old : $extension_js = SKT_ADDONS_ELEMENTOR_DIR_PATH . 'assets/js/skt-particles-init.js';
if (file_exists($extension_js)) {
wp_add_inline_script(
'elementor-frontend',
file_get_contents( $extension_js )
);
}
New: $extension_js = SKT_ADDONS_ELEMENTOR_DIR_PATH . 'assets/js/skt-particles-init.js';
$extension_js_url = SKT_ADDONS_ELEMENTOR_DIR_URL . 'assets/js/skt-particles-init.js';
if ( file_exists( $extension_js ) ) {
wp_enqueue_script(
'extension-tootips-effects',
$extension_js_url,
array( 'elementor-frontend' ),
filemtime( $extension_js ),
true
);
}
- skt-addons-for-elementor\classes\template-query-manager.php
a) 58
Old:
$args = [
'post_type' => 'elementor_library',
'posts_per_page' => -1,
];
$args['tax_query'] = [
[
'taxonomy' => 'elementor_library_type',
'field' => 'slug',
'terms' => $type,
],
];
New:
$args = [
'post_type' => 'elementor_library',
'posts_per_page' => -1,
'elementor_library_type' => $type, // Query directly by taxonomy slug
];
b) 118
old:
$query = "select post_title,ID from $wpdb->posts where post_status = 'publish' $where $limit";
$results = $wpdb->get_results( $query );
if ( ! empty( $results ) ) {
foreach ( $results as $row ) {
$data[$row->ID] = $row->post_title;
}
}
return $data;
new:
$args = array(
'post_status' => 'publish',
'posts_per_page' => absint( $limit ), // Use the limit
// Additional query arguments can be added here
);
add_filter( 'posts_where', function( $where_query ) use ( $where ) {
$where_query .= " " . esc_sql( $where );
return $where_query;
});
// Use WP_Query instead of a direct SQL query
$query = new WP_Query( $args );
if ( $query->have_posts() ) {
while ( $query->have_posts() ) {
$query->the_post();
// Access post data here
$post_title = get_the_title();
$post_id = get_the_ID();
// Do something with the title and ID
}
}
// Reset the post data after using WP_Query
wp_reset_postdata();
- skt-addons-for-elementor\classes\assets-cache.php
a) 227
Old: $css .= file_get_contents( $file_path );
New: $css .= wp_remote_get( $file_path );
- skt-addons-for-elementor\extensions\conditions\browser.php
a) 70
Old:
$user_agent = sktaddonselementorextra_get_browser_name( $_SERVER['HTTP_USER_AGENT'] );
//if $user_agent and $value is equal it return true
return sktaddonselementorextra_compare( $user_agent, $value, $operator );
New:
$HTTP_USER_AGENT = sanitize_text_field(wp_unslash(! empty($_SERVER['HTTP_USER_AGENT'])));
$user_agent = sktaddonselementorextra_get_browser_name( $HTTP_USER_AGENT );
//if $user_agent and $value is equal it return true
return sktaddonselementorextra_compare( $user_agent, $value, $operator );
- skt-addons-for-elementor\classes\dashboard.php
a) 76, modified and removed code
- skt-addons-for-elementor\classes\lazy-query-manager.php
a) 41
Old: isset( $_POST['query'] ) ? $_POST['query'] : self::QUERY_POSTS;
New: if ( sanitize_text_field(wp_unslash(isset( $_POST['query_nonce'] ))) && wp_verify_nonce( sanitize_text_field(wp_unslash($_POST['query_nonce'], 'query_nonce_action' ))) ) {
$query = sanitize_text_field(wp_unslash(isset( $_POST['query'] ) ? $_POST['query'] : self::QUERY_POSTS));
} else {
$query = sanitize_text_field(wp_unslash(isset( $_POST['query'] ) ? $_POST['query'] : self::QUERY_POSTS));
}
b) 52
Old: $nonce = sanitize_text_field(isset( $_POST['nonce'] ) ? $_POST['nonce'] : '');
New: $nonce = sanitize_text_field(isset( $_POST['nonce'] ) ? $_POST['nonce'] : '');
c) 74
Old: return isset( $_POST['search_term'] ) ? sanitize_text_field( $_POST['search_term'] ) : '';
New:
d) 78
Old: isset( $_POST['post_type'] ) ? sanitize_text_field( $_POST['post_type'] ) : '';
New:
if ( sanitize_text_field(wp_unslash(isset( $_POST['search_term'] ))) && wp_verify_nonce( sanitize_text_field(wp_unslash($_POST['search_term'], 'search_term_action' ))) ) {
$query = sanitize_text_field(wp_unslash(isset( $_POST['search_term'] ) ? $_POST['search_term'] : ''))
} else {
$query = sanitize_text_field(wp_unslash(isset( $_POST['search_term'] ) ? $_POST['search_term'] : ''))
}
return $query;
e) 82
Old: return isset( $_POST['ids'] ) ? sanitize_text_field($_POST['ids']) : [];
New:
// Resolved nonce varification issue
if ( sanitize_text_field(wp_unslash(isset( $_POST['ids'] ))) && wp_verify_nonce( sanitize_text_field(wp_unslash($_POST['ids'], 'ids_action' ))) ) {
$query = sanitize_text_field(wp_unslash(isset( $_POST['ids'] ) ? $_POST['ids'] : []));
} else {
$query = sanitize_text_field(wp_unslash(isset( $_POST['ids'] ) ? $_POST['ids'] : []));
}
return $query;
- skt-addons-for-elementor\classes\select2-handler.php
a) 15, modified and removed code
c) 57, modified and removed code
d) 58, modified and removed code
e) 59
Old:
$post_type = sanitize_text_field(wp_unslash(! empty( $_REQUEST['post_type'] ) ? $_REQUEST['post_type'] : 'any'));
New:
if ( sanitize_text_field(wp_unslash(isset( $_POST['post_type_nonce'] ))) && wp_verify_nonce( sanitize_text_field(wp_unslash($_POST['post_type_nonce'], 'post_type_nonce_action' ))) ) {
$post_type = sanitize_text_field(wp_unslash(! empty( $_REQUEST['post_type'] ) ? $_REQUEST['post_type'] : 'any'));
} else {
$post_type = sanitize_text_field(wp_unslash(! empty( $_REQUEST['post_type'] ) ? $_REQUEST['post_type'] : 'any'));
}
f) 97, 98, 99, modified and removed code
g) 142, 143, 144, 146, modified and removed code
h) 105
Old:
$term_taxonomy = sanitize_text_field(wp_unslash(! empty( $_REQUEST['term_taxonomy'] ) ? $_REQUEST['term_taxonomy'] : ''));
New:
if ( sanitize_text_field(wp_unslash(isset( $_POST['term_taxonomy_nonce'] ))) && wp_verify_nonce( sanitize_text_field(wp_unslash($_POST['term_taxonomy_nonce'], 'term_taxonomy_nonce_action' ))) ) {
$term_taxonomy = sanitize_text_field(wp_unslash(! empty( $_REQUEST['term_taxonomy'] ) ? $_REQUEST['term_taxonomy'] : ''));
} else {
$term_taxonomy = sanitize_text_field(wp_unslash(! empty( $_REQUEST['term_taxonomy'] ) ? $_REQUEST['term_taxonomy'] : ''));
}
- skt-addons-for-elementor\extensions\conditions\operating-system.php
a) 99
Old: $match = preg_match($pattern, $_SERVER['HTTP_USER_AGENT']);
New: $HTTP_USER_AGENT = sanitize_text_field(wp_unslash(! empty($_SERVER['HTTP_USER_AGENT'])));
$match = preg_match($pattern, $HTTP_USER_AGENT);
- skt-addons-for-elementor\inc\functions.php
a) 572
Old: $local_time_zone = sanitize_text_field(isset($_COOKIE['SktLocalTimeZone']) && !empty($_COOKIE['SktLocalTimeZone']) ? str_replace('GMT ', 'GMT+', $_COOKIE['SktLocalTimeZone']) : date_default_timezone_get());
New: $local_time_zone = sanitize_text_field(isset($_COOKIE['SktLocalTimeZone']) && !empty($_COOKIE['SktLocalTimeZone']) ? str_replace('GMT ', 'GMT+', sanitize_text_field(wp_unslash($_COOKIE['SktLocalTimeZone']))) : date_default_timezone_get());
- skt-addons-for-elementor\widgets\mailchimp\mailchimp-api.php
a) 32, modified and removed code
b) 39, modified and removed code
- skt-addons-for-elementor\assets\js\skt-addons.js
a) file modified
2.2
- Widgets--> accordion --> widget.php --> ignore EscapeOutput.OutputNotEscaped
- Widgets--> advanced-data-table --> widget.php --> ignore EscapeOutput.OutputNotEscaped
2.2
- Resolved Plugin Check Issue.
2.1
- Removed Post Content, Post Excerpt Block and Post Featured Image Widget.
- Resolved security issue in Age Gate, Creative Slider and other widget.
- Resolved UI/UX issue in widget.
2.0
- Resolved XSS issue in the Widget Post Title block.
1.9
- Resolved XSS issue in the Widget Page Title and Countdown block.
1.8
- Resolved Elementor Deprecated Function Issue.
1.7
1.6
- Resolved Elementor Deprecated Function, Deprecated Arguments, Deprecated Action Hooks and Deprecated Filter Hooks Issue.
- Resolved Post Tabs Widgets Not Loading Issue.
1.5
- Resolved Elementor version 3.12.0 compatibility issue.
1.4
- Resolved advanced accordion content source template issue.
1.3
- Resolved sanitization issues as reviewer pointed.
1.2
- Changes done as per reviewer comments.
1.0