- fixed extension's license activation;

includes/admin/core/class-admin-settings.php

@@ -1401,15 +1401,13 @@ if ( ! class_exists( 'um\admin\core\Admin_Settings' ) ) {
 		 */
 		function save_settings_handler() {
 
-			
-
 			if ( isset( $_POST['um-settings-action'] ) && 'save' == $_POST['um-settings-action'] && ! empty( $_POST['um_options'] ) ) {
 
 				$nonce = $_POST['__umnonce'];
 
 				if ( ( ! wp_verify_nonce( $nonce, 'um-settings-nonce' ) || empty( $nonce ) ) || ! current_user_can('manage_options') ) {
-				    // This nonce is not valid.
-				    wp_die( 'Security Check' ); 
+					// This nonce is not valid.
+					wp_die( 'Security Check' );
 				}
 
 				/**
@@ -1770,6 +1768,8 @@ if ( ! class_exists( 'um\admin\core\Admin_Settings' ) ) {
 
 			<div class="wrap-licenses">
 				<input type="hidden" id="licenses_settings" name="licenses_settings" value="1">
+				<?php $um_settings_nonce = wp_create_nonce( 'um-settings-nonce' ); ?>
+				<input type="hidden" name="__umnonce" value="<?php echo $um_settings_nonce; ?>" />
 				<table class="form-table um-settings-section">
 					<tbody>
 					<?php foreach ( $section_fields as $field_data ) {
@@ -2021,6 +2021,8 @@ if ( ! class_exists( 'um\admin\core\Admin_Settings' ) ) {
 								<form method="post" action="" name="um-settings-form" class="um-settings-form">
 									<input type="hidden" value="save" name="um-settings-action" />
 									<input type="hidden" name="licenses_settings" value="1" />
+									<?php $um_settings_nonce = wp_create_nonce( 'um-settings-nonce' ); ?>
+									<input type="hidden" name="__umnonce" value="<?php echo $um_settings_nonce; ?>" />
 									<input type="text" id="um_options_<?php echo $field_data['id'] ?>" name="um_options[<?php echo $field_data['id'] ?>]" value="<?php echo $value ?>" class="um-option-field um-long-field" data-field_id="<?php echo $field_data['id'] ?>" />
 									<?php if ( ! empty( $field_data['description'] ) ) { ?>
 										<div class="description"><?php echo $field_data['description'] ?></div>

readme.txt

@@ -129,11 +129,17 @@ The plugin works with popular caching plugins by automatically excluding Ultimat
 
 == Changelog ==
 
+= 2.0.8: April 13, 2018 =
+
+* Bugfixes:
+  - Fixed license activation
+
 = 2.0.7: April 13, 2018 =
 
 * Bugfixes:
   - Fixed add rewrite rules for UM pages
   - Fixed Profile Form, Registration Form use custom settings and role
+  - Fixed save settings security
 
 = 2.0.6: April 12, 2018 =
 

ultimate-member.php

@@ -3,7 +3,7 @@
 Plugin Name: Ultimate Member
 Plugin URI: http://ultimatemember.com/
 Description: The easiest way to create powerful online communities and beautiful user profiles with WordPress
-Version: 2.0.7
+Version: 2.0.8
 Author: Ultimate Member
 Author URI: http://ultimatemember.com/
 Text Domain: ultimate-member