Blog Post

GD Rating System Pro 2.1.1

GD Rating System Pro 2.1.1 is a new, minor version that includes a number of updates and fixes, including a fix for a low severity XSS (cross-site scripting) security issue.

This version includes updated code for validating rating item requests, updates to posts addon and additional protection for all form files from direct loading. As for the fixes, few issues with badge/symbol rendering are fixed, some log issues related to ’emote this’ method are also fixed.

Most important fix is for low severity XSS security issue. File log.php in ‘forms’ folder was not properly filtering one query argument, allowing to execute javascript code. In this case, this XSS issue can’t cause any damage, but, all security issue must be fixed, so this problem is fixed and changes are made to prevent potentially similar problems in the future.

If you find any issues with the plugin, please use the support forum to report them.

Please wait...
GD Rating System Pro WordPress Plugin
Ultimate rating solution plugin for WordPress websites

Powerful, highly customizable and versatile ratings plugin to allow your users to vote for anything you want. Includes different rating methods and add-ons.

About the author

Milan Petrovic
Milan Petrovic

CEO and Lead developer of Dev4Press Web Development company, working with WordPress since 2008, first as a freelancer, later founding own development company. Author of more than 250 plugins and more than 20 themes.

5 thoughts on “GD Rating System Pro 2.1.1”

  1. Thanks for this release Milan.

    Any news on the aggregation?

    Please wait...
    Reply
    • This is planned for next major version 2.2.

      Please wait...
      Reply
      • Thank you Milan.

        Please wait...
        Reply
  2. Hi Milan

    Where can I find documentation on how to use it with REST API?

    Cheers

    Please wait...
    Reply
    • Open Help area on the WP Rest API settings page in the plugin settings, there you can see all added endpoints. Also, from the Rating Items panel, for each item you can see link to open WP Rest API URL for that item.

      Please wait...
      Reply

Leave a Comment

Latest From The Blog

announcement upcoming development cycle changes

Upcoming development cycle changes

With all plugins getting updates last week, and everything that is going on with the security concerns with WordPress and PHP in the past months, the next wave of updates for all Dev4Press plugins will have more strict release changes.
announcement all plugins updated sdk

All plugins updated with new Freemius SDK

Freemius has released new SDK that fixes some potential security related issues, and all Dev4Press plugins now have been released with the updated SDK. Some plugins got some small changes and improvements as well.
plugins release forum toolbox for bbpress 8.0

forumToolbox for bbPress 8.0

We are thrilled to announce the official release of forumToolbox Pro 8.0! This release marks a major evolution, focusing on modernizing core workflows, stripping out legacy technical debt, and introducing new attachments upload interface reimagined from ground up.

0
0
16
0
0
0
0
0
0