Security Release: The Events Calendar 4.1.1.1

[Geoff]

Hey folks, we want to interrupt our normal broadcasting to let you know that The Events Calendar 4.1.1.1 is now available and we strongly recommend you update.

This release includes two patches that make the plugin much more secure. There was no immediate danger in previous versions, but a couple of spots that were found and we wanted to err on the safe side of things and get those out to you as soon as possible, rather than waiting for our next maintenance release.

This will be a smooth and simple update for those of you who are already running The Events Calendar 4.1 or greater. If you’re on anything below, please do review our past release notes and use caution when updating. Yes, that means testing in a development environment and backing up!

Here’s what’s new:

• Security: Tightened up security with post type link filtering
• Security: Tightened up security around tribe bar submissions

Serious high fives are in order for Nadal Soler and Paul Mynarsky for not only bringing these to our attention but for helping us pen the solutions as well. You guys rock!

[Author]

Posts