Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2023-5613: tp-testimonials.php in super-testimonial/tags/2.8 – WordPress Plugin Repository

The Super Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin’s ‘tpsscode’ shortcode in all versions up to, and including, 2.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

CVE
#xss#web#js#java#wordpress#php#auth

1<?php2 /*3 Plugin Name: Super Testimonial4 Plugin URI: https://themepoints.com/product/super-testimonial-pro/5 Description: Super Testimonials is a component ready to use on mobile devices and desktop devices. Super Testimonial are easy to use the plugin that allows users to add Testimonials to the sidebar, as a widget, or to embed testimonials into a Page or Post using the shortcode.6 Version: 2.87 Author: Themepoints8 Author URI: https://themepoints.com9 TextDomain: ktsttestimonial10 License: GPLv211 */1213 if ( ! defined( ‘ABSPATH’ ) )14 die( “Can’t load this file directly” );1516 define('TPS_TESTIMONIAL_PLUGIN_PATH’, WP_PLUGIN_URL . ‘/’ . plugin_basename( dirname(__FILE__) ) . ‘/’ );17 define('tps_testimonials_plugin_dir’, plugin_dir_path( __FILE__ ) );18 add_filter('widget_text’, ‘do_shortcode’);1920 require_once( plugin_dir_path( __FILE__ ) . ‘admin/tp-testimonials-admin.php’);21 require_once( plugin_dir_path( __FILE__ ) . ‘includes/metabox/tp-testimonials-metabox.php’ );22 require_once( plugin_dir_path( __FILE__ ) . ‘includes/shortcodes/tp-testimonial-pro-shortcode.php’ );23 require_once( plugin_dir_path( __FILE__ ) . ‘admin/users-form-options.php’);2425 # Super Testimonials Load Translation26 function tps_super_testimonials_load_textdomain(){27 load_plugin_textdomain(‘ktsttestimonial’, false, dirname( plugin_basename( __FILE__ ) ) .’/languages/’ );28 }29 add_action('plugins_loaded’, ‘tps_super_testimonials_load_textdomain’);30 31 # Super Testimonials enqueue scripts 32 function tps_super_testimonials_enqueue_script(){33 wp_enqueue_style(‘tps-super-font-awesome-css’, TPS_TESTIMONIAL_PLUGIN_PATH.’frontend/css/font-awesome.css’);34 wp_enqueue_style(‘tps-super-owl.carousel-css’, TPS_TESTIMONIAL_PLUGIN_PATH.’frontend/css/owl.carousel.min.css’);35 wp_enqueue_style(‘tps-super-style-css’, TPS_TESTIMONIAL_PLUGIN_PATH.’frontend/css/theme-style.css’);36 wp_enqueue_script( ‘jquery’ );37 wp_enqueue_script( ‘imagesloaded’ );38 wp_enqueue_script('tps-super-star-js’, plugins_url('frontend/js/jquery.raty-fa.js’, __FILE__), array(‘jquery’), '2.4’, true);39 wp_enqueue_script('tps-super-owl-js’, plugins_url('frontend/js/owl.carousel.js’, __FILE__), array(‘jquery’), '2.4’, true);40 }41 add_action('wp_enqueue_scripts’, ‘tps_super_testimonials_enqueue_script’);42 43 # Super Testimonials Upgrade Link44 function tps_super_testimonialspro_version_link( $links ) {45 $links[] = '<a style="color:red;font-weight:bold;" href="https://themepoints.com/shop/super-testimonial-pro/" target="_blank">Upgrade Pro</a>’;46 return $links;47 }48 add_filter( ‘plugin_action_links_’ . plugin_basename(__FILE__), ‘tps_super_testimonialspro_version_link’ ); 4950 # Super Testimonials Admin enqueue scripts51 function tps_super_testimonials_admin_enqueue_scripts(){52 global $typenow;53 if(($typenow == ‘ktsprotype’)){54 wp_enqueue_style(‘tps-super-font-awesome-css’, TPS_TESTIMONIAL_PLUGIN_PATH.’frontend/css/font-awesome.css’);55 wp_enqueue_style(‘tps-super-admin-css’, TPS_TESTIMONIAL_PLUGIN_PATH.’admin/css/tp-testimonial-admin.css’); 56 wp_enqueue_style(‘wp-color-picker’); 57 wp_enqueue_script( 'testimonial_pro_color_picker’, plugins_url('/frontend/js/color-picker.js’, __FILE__ ), array( ‘wp-color-picker’ ), false, true );58 }59 }60 add_action('admin_enqueue_scripts’, ‘tps_super_testimonials_admin_enqueue_scripts’);6162 # Admin Shortcode Page Scripts63 function tps_super_testimonials_pro_color_scripts() {64 global $typenow;65 if ( is_admin() ) {66 if ( ( $typenow == ‘tptscode’ ) ) {67 wp_enqueue_style( ‘tps-super-admin-shortcode-style’, TPS_TESTIMONIAL_PLUGIN_PATH.’admin/css/tps-shortcode-admin.css’ );68 wp_enqueue_style( ‘wp-color-picker’ );69 wp_enqueue_script( 'testimonial_pro_color_picker’, plugins_url( '/admin/js/color-picker.js’, __FILE__ ), array( ‘wp-color-picker’ ), false, true );70 wp_enqueue_script( 'tps-super-pro-admin-scripts-js’, plugins_url( 'admin/js/tp-testimonial-admin.js’, __FILE__ ), array( ‘jquery’ ), '1.0’, true );71 }72 }73 }74 add_action( 'admin_enqueue_scripts’, ‘tps_super_testimonials_pro_color_scripts’ );7576 # Super Testimonials Register Shortcode77 function tps_super_testimonials_shortcode_register($atts, $content=null) {78 extract(shortcode_atts( array(79 ‘category’ => '-1’,80 ‘themes’ => 'theme1’,81 ‘columns_number’ => '2’,82 ‘order_by’ => 'rand’,83 ‘order’ => 'DESC’,84 ‘number’ => '-1’,85 ‘auto_play’ => 'true’,86 ‘navigation’ => 'true’,87 ‘stars_color’ => '#1a1a1a’,88 ‘text_color’ => '#8a9aad’,89 ), $atts));9091 // query posts92 $args = array ( 93 ‘post_type’ => 'ktsprotype’,94 ‘posts_per_page’ => $number,95 ‘orderby’ => $order_by,96 ‘order’ => $order 97 );98 99 if($category > -1) {100 $args[‘tax_query’] = array(array(‘taxonomy’ => ‘ktspcategory’,’field’ => ‘id’,’terms’ => $category ));101 }102 103 $tstrndsk = rand(1,1000);104 if($themes=="theme1"){105106 $testimonials_query = new WP_Query( $args );107 $result=’’;108 $result.=’109 <style type="text/css">110 div#testimonial-slider-‘.$themes.’ {111 display: block;112 overflow: hidden;113 padding-top: 10px;114 }115 .testimonial-'.$themes.’{116 text-align: center;117 }118 .testimonial-‘.$themes.’ .testimonial-thumb-'.$themes.’{119 width: 85px;120 height: 85px;121 border-radius: 50%;122 margin: 0 auto 40px;123 border: 4px solid #eb7260;124 overflow: hidden;125 }126 .testimonial-‘.$themes.’ .testimonial-thumb-‘.$themes.’ img{127 width: 100%;128 height: 100%;129 margin: 0;130 padding: 0;131 }132 .testimonial-‘.$themes.’ .testimonial-description-'.$themes.’{133 color: '.$text_color.’;134 font-size: 15px;135 font-style: italic;136 line-height: 24px;137 margin-bottom: 20px;138 }139 .testimonial-‘.$themes.’ .testimonial-description-profiles-'.$themes.’{140 margin:20px 0;141 text-align:center;142 }143 .testimonial-‘.$themes.’ .testimonial-description-title-'.$themes.’{144 font-size: 20px;145 color: #eb7260;146 margin-right: 20px;147 text-transform: capitalize;148 }149 .testimonial-‘.$themes.’ .testimonial-description-title-'.$themes.’:after{150 content: “";151 margin-left: 30px;152 border-right: 1px solid #808080;153 }154 .testimonial-‘.$themes.’ .testimonial-description-profiles-‘.$themes.’ small{155 display: inline-block;156 color: #8a9aad;157 font-size: 17px;158 text-transform: capitalize;159 }160 .testimonial-‘.$themes.’ .testimonial-description-profiles-‘.$themes.’ small a, a:hover {161 text-decoration: none;162 box-shadow: none;163 }164 .testimonial-‘.$themes.’ .fa-fw {165 text-align: center;166 width: 1.28571em;167 color:’.$stars_color.’;168 }169 .testimonial-‘.$themes.’ .super-testimonial-‘.$themes.’ {170 display: block;171 overflow: hidden;172 text-align: center;173 }174 .owl-theme .owl-controls .owl-buttons div{175 background: transparent;176 opacity: 1;177 }178 .owl-buttons{179 position: absolute;180 top: 8%;181 width: 100%;182 }183 .owl-prev{184 position: absolute;185 left:30%;186 }187 .owl-next{188 position: absolute;189 right:30%;190 }191 @media only screen and (max-width: 479px){192 .owl-prev{193 left: 10%;194 }195 .owl-next{196 right: 10%;197 }198 }199 </style>200 ';201 $result.=’202 <script type="text/javascript">203 jQuery(document).ready(function($){204 $(“#testimonial-slider-'.$themes.’”).owlCarousel({205 items:1,206 autoplaySpeed: 1000,207 loop: true,208 itemsDesktop:[1199,1],209 itemsDesktopSmall:[979,1],210 itemsTablet:[768,1],211 pagination: false,212 navigation:’.$navigation.’,213 navigationText:[“<",">”],214 autoplay:’.$auto_play.’,215 smartSpeed: 450,216 clone:true,217 });218 $(“.super-testimonial-'.$themes.’”).raty({219 readOnly: true,220 score: function() {221 return $(this).attr(“data-score”);222 },223 number: function() {224 return $(this).attr(“data-number”);225 }226 }); 227 });228 </script>229 ';230 $result .=’<div id="testimonial-slider-'.$themes.’” class="owl-carousel">’;231 // Creating a new side loop232 while ( $testimonials_query->have_posts() ) : $testimonials_query->the_post();233 234 $client_name_value = get_post_meta(get_the_ID(), 'name’, true);235 $link_value = get_post_meta(get_the_ID(), 'position’, true);236 $company_value = get_post_meta(get_the_ID(), 'company’, true);237 $company_url = get_post_meta(get_the_ID(), 'company_website’, true);238 $company_url_target = get_post_meta(get_the_ID(), 'company_link_target’, true);239 $testimonial_information = get_post_meta(get_the_ID(), 'testimonial_text’, true);240 $company_ratings_target = get_post_meta(get_the_ID(), 'company_rating_target’, true);241 $imgurl = wp_get_attachment_url( get_post_thumbnail_id(get_the_ID()) );242 if ( empty( $imgurl ) ) $imgurl = get_avatar_url( -1 );243 $result .=’244 <div class="testimonial-'.$themes.’">245 <div class="testimonial-thumb-'.$themes.’">246 <img src="’.$imgurl.’" alt="">247 </div>’;248 if(!empty($testimonial_information)){249 $result .=’<p class="testimonial-description-'.$themes.’">’.$testimonial_information.’</p>’;250 }251 $result .=’252 <div class="super-testimonial-'.$themes.’" data-number="5" data-score="’.$company_ratings_target.’"></div>253 <div class="testimonial-description-profiles-'.$themes.’">254 <span class="testimonial-description-title-'.$themes.’">’.esc_attr($client_name_value).’</span><small><a target="’.$company_url_target.’" href="’.esc_url($company_url).’">’.$link_value.’</a></small>255 </div>256 </div>’;257 endwhile;258 $result .=’</div>’;259 wp_reset_postdata();260 261 return $result;262 }263 264 elseif($themes=="theme2"){265 266 $testimonials_query = new WP_Query( $args );267 $result=’’;268 $result.=’269 <style type="text/css">270 #ktsttestimonial_list_style .client_content{271 color:’.$text_color.’;272 }273 #ktsttestimonial_list_style .fa-fw {274 text-align: center;275 width: 1.28571em;276 color:’.$stars_color.’;277 }278 </style>279 ';280 $result.=’281 <script type="text/javascript">282 jQuery(document).ready(function($){283 $(“.super-testimonial-'.$themes.’”).raty({284 readOnly: true,285 score: function() {286 return $(this).attr(“data-score”);287 },288 number: function() {289 return $(this).attr(“data-number”);290 }291 }); 292 });293 </script>294 ';295 $result .=’<div class="testimonials_list_area">’;296 297298 // Creating a new side loop299 while ( $testimonials_query->have_posts() ) : $testimonials_query->the_post();300 301 $client_name_value = get_post_meta(get_the_ID(), 'name’, true);302 $link_value = get_post_meta(get_the_ID(), 'position’, true);303 $company_value = get_post_meta(get_the_ID(), 'company’, true);304 $company_url = get_post_meta(get_the_ID(), 'company_website’, true);305 $company_url_target = get_post_meta(get_the_ID(), 'company_link_target’, true);306 $testimonial_information = get_post_meta(get_the_ID(), 'testimonial_text’, true);307 $company_ratings_target = get_post_meta(get_the_ID(), 'company_rating_target’, true);308 $imgurl = wp_get_attachment_url( get_post_thumbnail_id(get_the_ID()) );309 if ( empty( $imgurl ) ) $imgurl = get_avatar_url( -1 );310 311 $result .=’<div id="ktsttestimonial_list_style">312 <div class="client_names">’.$client_name_value.’</div>313 <div class="client_names_photo">314 <img src="’.$imgurl.’" alt="" class="photo" />315 </div>316 <div class="client_content"><span class="laquo"> </span>’.$testimonial_information.’<span class="raquo"> </span></div>317 <div class="client_content_info">318 <div class="super-testimonial-'.$themes.’" data-number="5" data-score="’.$company_ratings_target.’"></div>319 <a target="’.$company_url_target.’" href="’.$company_url.’">’.$company_value.’</a>320 <p>’.$link_value.’</p>321 </div>322 </div>’; 323324 endwhile;325 wp_reset_postdata();326 $result .=’</div>’;327 return $result;328 329 }330 elseif($themes=="theme3"){331332 $testimonials_query = new WP_Query( $args );333 334 $result=’’;335 $result.=’336 <style type="text/css">337 div#testimonial-slider-‘.$themes.’ {338 display: block;339 overflow: hidden;340 padding-top: 10px;341 }342 .testimonial-theme3-'.$themes.’{343 margin: 0 15px;344 }345 .testimonial-theme3-‘.$themes.’ .testimonial-theme3-description-'.$themes.’{346 position: relative;347 font-size: 16px;348 line-height:26px;349 color: '.$text_color.’;350 padding: 25px 20px;351 border:1px solid #d3d3d3;352 }353 .testimonial-theme3-‘.$themes.’ .testimonial-theme3-description-'.$themes.’:after{354 content: “";355 width: 20px;356 height: 20px;357 background: #fff;358 border-style: none none solid solid;359 border-width: 0 0 1px 1px;360 border-color: #d3d3d3;361 position: absolute;362 bottom: -11px;363 left: 6%;364 transform: skewY(-45deg);365 }366 .testimonial-theme3-‘.$themes.’ .testimonial-theme3-pic-'.$themes.’{367 width: 80px;368 height: 80px;369 border-radius: 50%;370 overflow: hidden;371 margin:20px 30px;372 display: inline-block;373 float: left;374 }375 .testimonial-theme3-‘.$themes.’ .testimonial-theme3-pic-‘.$themes.’ img{376 width: 100%;377 height: 100%;378 margin: 0;379 padding: 0;380 }381 .testimonial-theme3-‘.$themes.’ .testimonial-theme3-‘.$themes.’-title{382 display: inline-block;383 text-transform: capitalize;384 margin-top: 15px;385 }386 .testimonial-theme3-‘.$themes.’ .testimonial-theme3-‘.$themes.’-title span{387 color: #3498db;388 display: block;389 font-size:17px;390 font-weight: bold;391 margin-bottom: 10px;392 }393 .testimonial-theme3-‘.$themes.’ .testimonial-theme3-‘.$themes.’-title small{394 display: block;395 font-size:14px;396 }397 .owl-theme .owl-controls{398 position: absolute;399 bottom: 10%;400 right: 10px;401 }402 .owl-theme .owl-controls .owl-buttons div {403 background: #000 none repeat scroll 0 0;404 border-radius: 0;405 color: #fff;406 float: left;407 margin-right: 5px;408 padding: 0 10px;409 }410 @media only screen and (max-width: 767px){411 .testimonial-theme3-‘.$themes.’ .testimonial-theme3-description-'.$themes.’{412 font-size: 14px;413 }414 .testimonial-theme3-‘.$themes.’ .testimonial-theme3-description-'.$themes.’:after{415 left: 14%;416 }417 }418 @media only screen and (max-width: 479px){419 .owl-theme .owl-controls{420 bottom: 0;421 }422 .testimonial-theme3-‘.$themes.’ .testimonial-theme3-description-'.$themes.’:after{423 left: 18%;424 }425 }426 </style>427 ';428 $result.=’429 <style type="text/css">430 .testimonial-theme3-‘.$themes.’ .fa-fw {431 text-align: center;432 width: 1.28571em;433 color:’.$stars_color.’;434 }435 </style>436 ';437 $result.=’438 <script type="text/javascript">439 jQuery(document).ready(function($){440 $(“#testimonial-slider-'.$themes.’”).owlCarousel({441 items:1,442 autoplaySpeed: 1000,443 loop: true,444 itemsDesktop:[1199,1],445 itemsDesktopSmall:[979,1],446 itemsTablet:[768,1],447 pagination: false,448 navigation:’.$navigation.’,449 navigationText:[“<",">”],450 autoplay:’.$auto_play.’,451 smartSpeed: 450,452 clone:true,453 });454 $(“.super-testimonial-'.$themes.’”).raty({455 readOnly: true,456 score: function() {457 return $(this).attr(“data-score”);458 },459 number: function() {460 return $(this).attr(“data-number”);461 }462 }); 463 });464 </script>465 ';466 $result .=’<div id="testimonial-slider-'.$themes.’” class="owl-carousel">’;467 // Creating a new side loop468 while ( $testimonials_query->have_posts() ) : $testimonials_query->the_post();469 470 $client_name_value = get_post_meta(get_the_ID(), 'name’, true);471 $link_value = get_post_meta(get_the_ID(), 'position’, true);472 $company_value = get_post_meta(get_the_ID(), 'company’, true);473 $company_url = get_post_meta(get_the_ID(), 'company_website’, true);474 $company_url_target = get_post_meta(get_the_ID(), 'company_link_target’, true);475 $testimonial_information = get_post_meta(get_the_ID(), 'testimonial_text’, true);476 $company_ratings_target = get_post_meta(get_the_ID(), 'company_rating_target’, true);477 $imgurl = wp_get_attachment_url( get_post_thumbnail_id(get_the_ID()) );478 if ( empty( $imgurl ) ) $imgurl = get_avatar_url( -1 );479480 $result .=’481 <div class="testimonial-theme3-'.$themes.’">’;482 if(!empty($testimonial_information)){483 $result .=’<p class="testimonial-theme3-description-'.$themes.’">’.$testimonial_information.’</p>’;484 }485 $result .=’486 <div class="testimonial-theme3-pic-'.$themes.’">487 <img src="’.$imgurl.’" alt="">488 </div>489 <div class="super-testimonial-'.$themes.’" data-number="5" data-score="’.$company_ratings_target.’"></div>490 <div class="testimonial-theme3-‘.$themes.’-title">491 <span>’.$client_name_value.’</span>492 <small>’.$link_value.’</small>493 </div>494 </div>’;495 endwhile;496 $result .=’</div>’;497 wp_reset_postdata();498 return $result; 499 }500 elseif($themes=="theme4"){501 502503 $testimonials_query = new WP_Query( $args );504 505 $result=’’;506 $result.=’507 <style type="text/css">508 509 .testimonial-theme4-'.$themes.’{510 text-align: center;511 background: #fff;512 }513 .testimonial-theme4-‘.$themes.’ .testimonial-theme4-pic-'.$themes.’{514 width: 100px;515 height: 100px;516 border-radius: 50%;517 border: 5px solid rgba(255,255,255,0.3);518 display: inline-block;519 margin-top: 0px;520 overflow: hidden;521 box-shadow:0 2px 6px rgba(0, 0, 0, 0.15);522 margin: 0 auto;523 display:block;524 }525 .testimonial-theme4-‘.$themes.’ .testimonial-theme4-pic-‘.$themes.’ img{526 width: 100%;527 height: 100%;528 margin: 0;529 padding: 0;530 }531 .testimonial-theme4-‘.$themes.’ .testimonial-theme4-description-'.$themes.’{532 font-size: 16px;533 font-style: italic;534 color: '.$text_color.’;535 line-height: 30px;536 margin: 10px 0 20px;537 }538 .testimonial-theme4-‘.$themes.’ .testimonial-theme4-title-'.$themes.’{539 font-size: 14px;540 font-weight: bold;541 margin: 0;542 color: #333;543 text-transform: uppercase;544 text-align:center;545 }546 .testimonial-theme4-‘.$themes.’ .testimonial-theme4-post-'.$themes.’{547 display: block;548 font-size: 13px;549 color: #777;550 margin-bottom: 15px;551 text-transform: capitalize;552 text-align:center;553 }554 .testimonial-theme4-‘.$themes.’ .testimonial-theme4-post-'.$themes.’:before{555 content: “";556 width: 30px;557 display: block;558 margin: 10px auto;559 border: 1px solid #d3d3d3;560 }561 .testimonial-theme4-‘.$themes.’ .super-testimonial-‘.$themes.’ {562 display: block;563 overflow: hidden;564 text-align: center;565 }566 </style>567 ';568 $result.=’569 <style type="text/css">570 .testimonial-theme4-‘.$themes.’ .fa-fw {571 text-align: center;572 width: 1.28571em;573 color:’.$stars_color.’;574 }575 </style>576 ';577 $result.=’578 <script type="text/javascript">579 jQuery(document).ready(function($){580 $(“#testimonial-slider-'.$themes.’”).owlCarousel({581 items:1,582 autoplaySpeed: 1000,583 loop: true,584 itemsDesktop:[1199,1],585 itemsDesktopSmall:[979,1],586 itemsTablet:[768,1],587 pagination: false,588 autoplay:’.$auto_play.’,589 smartSpeed: 450,590 clone:true,591 });592 $(“.super-testimonial-'.$themes.’”).raty({593 readOnly: true,594 score: function() {595 return $(this).attr(“data-score”);596 },597 number: function() {598 return $(this).attr(“data-number”);599 }600 }); 601 });602 </script>603 ';604 $result .=’<div id="testimonial-slider-'.$themes.’” class="owl-carousel">’;605 // Creating a new side loop606 while ( $testimonials_query->have_posts() ) : $testimonials_query->the_post();607608 $client_name_value = get_post_meta(get_the_ID(), 'name’, true);609 $link_value = get_post_meta(get_the_ID(), 'position’, true);610 $company_value = get_post_meta(get_the_ID(), 'company’, true);611 $company_url = get_post_meta(get_the_ID(), 'company_website’, true);612 $company_url_target = get_post_meta(get_the_ID(), 'company_link_target’, true);613 $testimonial_information = get_post_meta(get_the_ID(), 'testimonial_text’, true);614 $company_ratings_target = get_post_meta(get_the_ID(), 'company_rating_target’, true);615 $imgurl = wp_get_attachment_url( get_post_thumbnail_id(get_the_ID()) );616 if ( empty( $imgurl ) ) $imgurl = get_avatar_url( -1 );617618 $result .=’619 <div class="testimonial-theme4-'.$themes.’">620 <div class="testimonial-theme4-pic-'.$themes.’">621 <img src="’.$imgurl.’" alt="">622 </div>623 <div class="testimonial-theme4-description-'.$themes.’">’.$testimonial_information.’</div>624 <h3 class="testimonial-theme4-title-'.$themes.’">’.$client_name_value.’</h3><span class="testimonial-theme4-post-'.$themes.’">’.$company_value.’</span><div class="super-testimonial-'.$themes.’" data-number="5" data-score="’.$company_ratings_target.’"></div>625 </div>’;626 endwhile;627 $result .=’</div>’;628 wp_reset_postdata();629 return $result; 630 }631 }632 add_shortcode('tpsscode’, ‘tps_super_testimonials_shortcode_register’); 633634635 /*==========================================================================636 Super Testimonials Shortcode Page637 ============================================================================*/638 function tps_super_testimonials_custom_submenu_page() {639 add_submenu_page( 'edit.php?post_type=ktsprotype’, 'doc & Support’, 'doc & Support’, 'manage_options’, 'testimonial_pro_shortcode’, ‘tps_super_testimonials_custom_shortcode_callback’ ); 640 }641642 function tps_super_testimonials_custom_shortcode_callback() {643644 include(‘includes/tps_super_testimonial_options.php’);645646 }647 add_action('admin_menu’, ‘tps_super_testimonials_custom_submenu_page’);648649 function tp_activation_actions_for_frontend(){650 do_action( ‘tp_create_options’ );651 }652 register_activation_hook( __FILE__, ‘tp_activation_actions_for_frontend’ );653 // Set default values here654 function tp_create_options_for_frontend(){655 $options = array(656 0 => "Title",657 1 => "Name",658 2 => "Designation",659 3 => "Company Name",660 4 => "Company URL",661 5 => "Link Target",662 6 => "Rating",663 7 => "Testimonial Message",664 8 => "Categories",665 9 => "User’s Image/Logo",666 10 => "Calculate"667 );668 // saving seleceted options669 update_option( 'st_user_fields’, $options );670 }671 add_action( 'tp_create_options’, ‘tp_create_options_for_frontend’ );672?>

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907