update plugins

wp-content/plugins/post-smtp/Postman/Postman-Email-Log/PostmanEmailQueryLog.php

@@ -280,7 +280,11 @@ public function get_log( $id, $columns = array() ) {
         $columns = empty( $columns ) ? '*' : implode( ',', $columns );
 
         return $this->db->get_row(
-            "SELECT {$columns} FROM `{$this->table}` WHERE id = {$id};",
+            $this->db->prepare(
+                "SELECT {$columns} FROM %i WHERE id = %d",
+                $this->table,
+                $id
+            ),
             ARRAY_A
         );
 

wp-content/plugins/post-smtp/Postman/Postman-Send-Test-Email/PostmanSendTestEmailController.php

@@ -423,7 +423,7 @@ private function createMessageContent() {
 				'								</tr>',
 				'							</tbody>',
 				'						</table>',
-				sprintf( '						<br><span style="font-size:0.9em;color:#94c0dc;">%s: <a style="color:#94c0dc" href="http://poofytoo.com">poofytoo.com</a> - %s</span>', $imageSource, $withPermission ),
+				sprintf( '						<br><span style="font-size:0.9em;color:#94c0dc;">%s: poofytoo - %s</span>', $imageSource, $withPermission ),
 				'					</td>',
 				'				</tr>',
 				'			</tbody>',

wp-content/plugins/post-smtp/Postman/PostmanEmailLogs.php

@@ -668,7 +668,7 @@ public function resend_email() {
 
         if( isset( $_POST['action'] ) && $_POST['action'] == 'ps-resend-email' ) {
 
-            $id = sanitize_text_field( $_POST['id'] );
+            $id =  intval( $_POST['id'] );
             $response = '';
             $email_query_log = new PostmanEmailQueryLog();
             $log = $email_query_log->get_log( $id );

wp-content/plugins/post-smtp/Postman/PostmanViewController.php

@@ -373,33 +373,45 @@ public function outputDefaultContent() {
 						<h3 class="ps-ib ps-vm"><?php esc_html_e( 'Extensions', 'post-smtp' ); ?></h3>
 					</div> 
 					<div>
-						<a href="<?php echo esc_url( 'https://postmansmtp.com/extensions/office-365-for-post-smtp-extension/' ); ?>" target="_blank">
+						<a href="<?php echo esc_url( 'https://postmansmtp.com/extensions/office-365-for-post-smtp-extension/?utm_source=wp_dashboard&utm_medium=plugin' ); ?>" target="_blank">
 							<img src="<?php echo esc_url( POST_SMTP_ASSETS . 'images/icons/finger.png' ) ?>" width="15" />
-							<?php echo esc_html( 'Office 365' ); ?>
+							<?php echo esc_html( 'Microsoft 365/ Office 365' ); ?>
 						</a>
 					</div>
 					<div>
-						<a href="<?php echo esc_url( 'https://postmansmtp.com/extensions/post-smtp-extension-for-amazon-ses/' ); ?>" target="_blank">
+						<a href="<?php echo esc_url( 'https://postmansmtp.com/extensions/post-smtp-extension-for-amazon-ses/?utm_source=wp_dashboard&utm_medium=plugin' ); ?>" target="_blank">
 							<img src="<?php echo esc_url( POST_SMTP_ASSETS . 'images/icons/finger.png' ) ?>" width="15" />	
 							<?php echo esc_html( 'Amazon SES' ); ?>
 						</a>
 					</div>
 					<div>
-						<a href="<?php echo esc_url( 'https://postmansmtp.com/extensions/the-better-email/' ); ?>" target="_blank">
+						<a href="<?php echo esc_url( 'https://postmansmtp.com/extensions/email-log-attachment/?utm_source=wp_dashboard&utm_medium=plugin' ); ?>" target="_blank">
 							<img src="<?php echo esc_url( POST_SMTP_ASSETS . 'images/icons/finger.png' ) ?>" width="15" />	
-							<?php echo esc_html( 'Better Email Logger' ); ?>
+							<?php echo esc_html( 'Email Log attachment support' ); ?>
 						</a>
 					</div>
 					<div>
-						<a href="<?php echo esc_url( 'https://postmansmtp.com/extensions/twilio-extension-pro/' ); ?>" target="_blank">
+						<a href="<?php echo esc_url( 'https://postmansmtp.com/extensions/reporting-and-tracking-extension/?utm_source=wp_dashboard&utm_medium=plugin' ); ?>" target="_blank">
 							<img src="<?php echo esc_url( POST_SMTP_ASSETS . 'images/icons/finger.png' ) ?>" width="15" />	
-							<?php echo esc_html( 'Twilio Notifications' ); ?>
+							<?php echo esc_html( 'Report & Tracking' ); ?>
 						</a>
 					</div>
 					<div>
-						<a href="<?php echo esc_url( 'https://postmansmtp.com/extensions/post-smtp-mail-control/' ); ?>" target="_blank">
+						<a href="<?php echo esc_url( 'https://postmansmtp.com/extensions/advanced-email-delivery/?utm_source=wp_dashboard&utm_medium=plugin' ); ?>" target="_blank">
 							<img src="<?php echo esc_url( POST_SMTP_ASSETS . 'images/icons/finger.png' ) ?>" width="15" />	
-							<?php echo esc_html( 'Mail Control' ); ?>
+							<?php echo esc_html( 'Advanced Email Delivery and Logs' ); ?>
+						</a>
+					</div>
+					<div>
+						<a href="<?php echo esc_url( 'https://postmansmtp.com/extensions/twilio-extension-pro/?utm_source=wp_dashboard&utm_medium=plugin' ); ?>" target="_blank">
+							<img src="<?php echo esc_url( POST_SMTP_ASSETS . 'images/icons/finger.png' ) ?>" width="15" />	
+							<?php echo esc_html( 'Twilio' ); ?>
+						</a>
+					</div>
+					<div>
+						<a href="<?php echo esc_url( 'https://postmansmtp.com/extensions/zoho-mail-pro-extension/?utm_source=wp_dashboard&utm_medium=plugin' ); ?>" target="_blank">
+							<img src="<?php echo esc_url( POST_SMTP_ASSETS . 'images/icons/finger.png' ) ?>" width="15" />	
+							<?php echo esc_html( 'Zoho Mail' ); ?>
 						</a>
 					</div>
 				</div>

wp-content/plugins/post-smtp/postman-smtp.php

@@ -6,7 +6,7 @@
  * Plugin Name: Post SMTP
  * Plugin URI: https://wordpress.org/plugins/post-smtp/
  * Description: Email not reliable? Post SMTP is the first and only WordPress SMTP plugin to implement OAuth 2.0 for Gmail, Hotmail and Yahoo Mail. Setup is a breeze with the Configuration Wizard and integrated Port Tester. Enjoy worry-free delivery even if your password changes!
- * Version: 2.6.0
+ * Version: 2.6.1
  * Author: Post SMTP
  * Text Domain: post-smtp
  * Author URI: https://postmansmtp.com
@@ -48,7 +48,7 @@ function ps_fs() {
                 'type'                => 'plugin',
                 'public_key'          => 'pk_28fcefa3d0ae86f8cdf6b7f71c0cc',
                 'is_premium'          => false,
-                'has_addons'          => true,
+                'has_addons'          => false,
 				'bundle_id' 		  => '10910',
 				'bundle_public_key'   => 'pk_c5110ef04ba30cd57dd970a269a1a',
                 'has_paid_plans'      => true,
@@ -102,7 +102,7 @@ function ps_fs_custom_icon() {
 define( 'POST_SMTP_BASE', __FILE__ );
 define( 'POST_SMTP_PATH', __DIR__ );
 define( 'POST_SMTP_URL', plugins_url('', POST_SMTP_BASE ) );
-define( 'POST_SMTP_VER', '2.6.0' );
+define( 'POST_SMTP_VER', '2.6.1' );
 define( 'POST_SMTP_DB_VERSION', '1.0.1' );
 define( 'POST_SMTP_ASSETS', plugin_dir_url( __FILE__ ) . 'assets/' );
 

wp-content/plugins/post-smtp/readme.txt

@@ -3,8 +3,8 @@ Plugin URI: https://wpexperts.io/
 Contributors: wpexpertsio
 Tags: email, mail, smtp, wordpress smtp, email log, postman smtp, postman, gmail, google apps, hotmail, yahoo, mandrill api, sendgrid api, elastic email, office365, mailgun
 Requires at least: 5.6.0
-Tested up to: 6.3
-Stable tag: 2.6.0
+Tested up to: 6.3.1
+Stable tag: 2.6.1
 License: GPLv2 or later
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
 
@@ -306,6 +306,12 @@ To avoid being flagged as spam, you need to prove your email isn't forged. On a
 
 == Changelog ==
 
+= 2.6.1 - 2023-10-03 =
+
+* Fix: Removed broken link from test email.
+* Improvement: Improved SQL query to meet latest security standards.
+* Improvement: Replaced sanitize_text_field() with intval() as suggested by WP Scan team.
+
 = 2.6.0 - 2023-09-12 =
 
 **NEW**

wp-content/plugins/post-smtp/style/testEmail.html

@@ -30,7 +30,7 @@
 									</td>
 								</tr>
 							</tbody>
-						</table> <br><span style="font-size:0.9em;color:#94c0dc;">Image source: <a style="color:#94c0dc" href="http://poofytoo.com">poofytoo.com</a> - Used with permission</span></td>
+						</table> <br><span style="font-size:0.9em;color:#94c0dc;">Image source: poofytoo - Used with permission</span></td>
 				</tr>
 			</tbody>
 		</table>

wp-content/plugins/wordfence/js/admin.1690810710.js → wp-content/plugins/wordfence/js/admin.1695657196.js

@@ -3068,6 +3068,23 @@
 					}
 				});
 			},
+
+			acknowledgeAdminUser: function (issueID) {
+				var self = this;
+				this.ajax('wordfence_acknowledgeAdminUser', {
+					issueID: issueID
+				}, function(res) {
+					if (res.ok) {
+						self.loadIssues(function() {
+							self.colorboxModal((self.isSmallScreen ? '300px' : '400px'), __("Successfully acknowledged admin"), sprintf(__("The admin user %s will no longer show up in future scans."), res.user_login));
+						});
+					} else if (res.errorMsg) {
+						self.loadIssues(function() {
+							WFAD.colorboxError(res.errorMsg, res.tokenInvalid);
+						});
+					}
+				});
+			},
 
 			windowHasFocus: function() {
 				if (typeof document.hasFocus === 'function') {