diff --git a/includes/core/um-filters-fields.php b/includes/core/um-filters-fields.php index 3b890d9a..cfd545b4 100644 --- a/includes/core/um-filters-fields.php +++ b/includes/core/um-filters-fields.php @@ -134,7 +134,6 @@ function um_profile_field_filter_hook__vimeo_video( $value, $data ) { } add_filter( 'um_profile_field_filter_hook__vimeo_video', 'um_profile_field_filter_hook__vimeo_video', 99, 2 ); - /** * Outputs a phone link * @@ -144,13 +143,13 @@ add_filter( 'um_profile_field_filter_hook__vimeo_video', 'um_profile_field_filte * @return string */ function um_profile_field_filter_hook__phone( $value, $data ) { - if ( empty( trim( str_replace( '+', '', $value ) ) ) ) { + $maybe_empty_phone = trim( str_replace( '+', '', $value ) ); + if ( empty( $maybe_empty_phone ) ) { return ''; } $value = trim( $value ); - $value = '' . esc_html( $value ) . ''; - return $value; + return '' . esc_html( $value ) . ''; } add_filter( 'um_profile_field_filter_hook__tel', 'um_profile_field_filter_hook__phone', 99, 2 ); diff --git a/readme.txt b/readme.txt index e0136f4c..fbb531b2 100644 --- a/readme.txt +++ b/readme.txt @@ -177,10 +177,12 @@ IMPORTANT: PLEASE UPDATE THE PLUGIN TO AT LEAST VERSION 2.6.7 IMMEDIATELY. VERSI **Bugfixes** -* Fixed: CVE-2024-8520 -* Fixed: CVE-2024-8519 +* Fixed: Single user action on User Profile security vulnerability. CVE ID: CVE-2024-8520 +* Fixed: [um_loggedin] shortcode security vulnerability. CVE ID: CVE-2024-8519 * Fixed: Performance issue related to Settings > Secure tab * Fixed: The "Clear All" button in the member directory did not reset all dependent dropdowns +* Fixed: Telegram and Discord social links in profile header +* Fixed: UM links to empty phone numbers **Templates required update**