Merge pull request #768 from brainstormforce/security-issue

Fix: Issue in Elementor Header & Footer Builder navigation menu

README.md

@@ -141,6 +141,7 @@ This same applies when you are creating your Header/Footer using this plugin.
 ## Changelog ##
 
 ### 1.6.24.1 - Development Version ###
+- Security Fix: Hardened the security of the plugin. Props: Wordfence.
 - Fix: Automatic translation support for templates on Specific Pages / Posts / Taxonomies, etc.
 - Fix: Navigation Menu - Multistep submenu fails to display when a border radius is applied to dropdown.
 

inc/widgets-manager/widgets/class-navigation-menu.php

@@ -1948,7 +1948,7 @@ protected function render() {
 			<div <?php $this->print_render_attribute_string( 'hfe-flyout' ); ?> >
 				<div class="hfe-flyout-overlay elementor-clickable"></div>
 				<div class="hfe-flyout-container">
-					<div id="hfe-flyout-content-id-<?php echo esc_attr( $this->get_id() ); ?>" class="hfe-side hfe-flyout-<?php echo esc_attr( $settings['flyout_layout'] ); ?> hfe-flyout-open" data-layout="<?php echo wp_kses_post( $settings['flyout_layout'] ); ?>" data-flyout-type="<?php echo wp_kses_post( $settings['flyout_type'] ); ?>">
+					<div id="hfe-flyout-content-id-<?php echo esc_attr( $this->get_id() ); ?>" class="hfe-side hfe-flyout-<?php echo esc_attr( $settings['flyout_layout'] ); ?> hfe-flyout-open" data-layout="<?php echo esc_attr( $settings['flyout_layout'] ); ?>" data-flyout-type="<?php echo esc_attr( $settings['flyout_type'] ); ?>">
 						<div class="hfe-flyout-content push">
 							<nav <?php $this->print_render_attribute_string( 'hfe-nav-menu' ); ?>>
 								<?php echo wp_nav_menu( $args ); ?>

languages/header-footer-elementor.pot

@@ -2,10 +2,10 @@
 # This file is distributed under the same license as the Elementor Header & Footer Builder package.
 msgid ""
 msgstr ""
-"Project-Id-Version: Elementor Header & Footer Builder 1.6.24\n"
+"Project-Id-Version: Elementor Header & Footer Builder 1.6.24.1\n"
 "Report-Msgid-Bugs-To: "
 "https://wordpress.org/support/plugin/header-footer-elementor\n"
-"POT-Creation-Date: 2024-01-29 06:38:06+00:00\n"
+"POT-Creation-Date: 2024-02-08 07:28:52+00:00\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=utf-8\n"
 "Content-Transfer-Encoding: 8bit\n"

readme.txt

@@ -140,11 +140,12 @@ This same applies when you are creating your Header/Footer using this plugin.
 
 == Changelog ==
 
-### 1.6.24.1 - Development Version ###
+= 1.6.24.1 - Development Version =
+- Security Fix: Hardened the security of the plugin. Props: Wordfence.
 - Fix: Automatic translation support for templates on Specific Pages / Posts / Taxonomies, etc.
 - Fix: Navigation Menu - Multistep submenu fails to display when a border radius is applied to dropdown.
 
-### 1.6.24 ###
+= 1.6.24 =
 - Improvement: Compatibility with latest Elementor and Elementor Pro 3.19 version.
 - Fix: White Label - Astra's theme name does not change when Astra is white-labeled. 
 - Fix: Navigation Menu - Language switcher flags not displaying when using Polylang plugin.