Security fix - v1.4.15

callbacks/save_settings.php

@@ -9,6 +9,8 @@
 
 function save_pixtypes_settings( $values ){
 
+	check_admin_referer( 'pixtypes-save-settings' );
+
 	if ( class_exists('wpgrade') ) {
 		$current_theme = wpgrade::shortname();
 	} else {
@@ -136,4 +138,4 @@ function save_pixtypes_settings( $values ){
 	 */
 	delete_option('rewrite_rules');
 
-}
+}

pixtypes.php

@@ -3,12 +3,12 @@
  * Plugin Name: PixTypes
  * Plugin URI: https://wordpress.org/plugins/pixtypes/
  * Description: Custom post types and meta-boxes needed by your themes.
- * Version: 1.4.14
+ * Version: 1.4.15
  * Author: Pixelgrade
  * Author URI: https://pixelgrade.com
  * Author Email: contact@pixelgrade.com
  * Requires at least: 4.9.9
- * Tested up to: 5.7.0
+ * Tested up to: 5.9
  * Text Domain: pixtypes
  * License:     GPL-2.0 or later.
  * License URI: http://www.gnu.org/licenses/gpl-2.0.txt
@@ -60,4 +60,4 @@
 //register_deactivation_hook( __FILE__, array( 'PixTypesPlugin', 'deactivate' ) );
 
 global $pixtypes_plugin;
-$pixtypes_plugin = PixTypesPlugin::get_instance( '1.4.14' );
+$pixtypes_plugin = PixTypesPlugin::get_instance( '1.4.15' );

readme.txt

@@ -1,10 +1,10 @@
 === PixTypes ===
-Contributors: pixelgrade, euthelup, babbardel, vlad.olaru, cristianfrumusanu, razvanonofrei
+Contributors: pixelgrade, babbardel, vlad.olaru, razvanonofrei
 Tags: custom, post-types, metadata, builder, gallery
 Requires at least: 4.9.9
-Tested up to: 5.7.0
+Tested up to: 5.9
 Requires PHP: 5.3.0
-Stable tag: 1.4.14
+Stable tag: 1.4.15
 License: GPLv2 or later
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
 
@@ -24,6 +24,9 @@ Note: This plugin is addressed to developers, it doesn't do nothing if it isn't
 
 == Changelog ==
 
+= 1.4.15 =
+* Security fix.
+
 = 1.4.14 =
 * Improve compatibility with WordPress 5.7.
 

views/admin.php

@@ -53,6 +53,8 @@
 
 		<?php echo $f->field( 'taxonomies' )->render(); ?>
 
+		<?php wp_nonce_field( 'pixtypes-save-settings' ); ?>
+
 		<button type="submit" class="button button-primary">
 			<?php esc_html_e( 'Save Changes', 'pixtypes' ); ?>
 		</button>
@@ -94,4 +96,4 @@
 			</div>
 		</div>
 	<?php } ?>
-</div>
+</div>