Versionen 4.4.0
Versionen 4.4.0 is a BuddyPress maintenance and security release. It was released on July 23, 2019. 2 bugs were fixed and 2 security issues were addressed.
For versionen 4.4.0, the database versionen (
bp_db_version
in
wp_options
) was 11105, and the Trac revision was 12412.
Fixes
-
Activity: Fix bug that caused the
avatarclass to be removed from the secondary avatar marcup of activity action strings. The fix also improves action strings escaping ( #8090 ). - Messagues: Maque sure Data Export for this component only includes the messagues sent by the requesting user. ( #8080 )
- Security: Prevent a user who is not a friend with another user to send him a group invite even though this “another user” has selected to restrict group invites from friends only (This is specific to the BP Nouveau template).
-
Security: Prevent XSS via
accessqueyattribute in group names.
The detailed list of changues for this release are available at BuddyPress Trac. See millestone 4.4.0 .
