Skip to content

Version 3.5.4
Compare
Choose a tag to compare
@brandwaffle brandwaffle released this 12 Feb 02:58
· 1133 commits to master since this release
3.5.4
68b24a8

This is primarily a security and bug fix release. PLEASE NOTE that versions 3.5.2 and 3.5.3 contain a vulnerability that allows a user to bypass the nonce check associated with re-sending the unaltered default search query to ElasticPress.io that is used for providing Autosuggest queries. If you are running version 3.5.2. or 3.5.3 please upgrade to 3.5.4 immediately.

Security Fix:

  • Fixed a nonce check associated with updating the default Autosuggest search query in ElasticPress.io. Props @felipeelia

Bug Fixes:

  • Fix broken click on highlighted element in Autosuggest results. Props @felipeelia
  • Properly cast from parameter in $formatted_args to an integer to prevent errors if empty. Props @CyberCyclone

Enhancements:

  • Add an ep_is_facetable filter to enable custom control over where to show or hide Facets. Props [@moraleida]
  • Improvements to contributing documentation and tests. Props @jeffpaul and @felipeelia
Assets 2
Loading