Merge pull request #106 from iftakharul-islam/version-1.2.6

Version 1.2.6

inc/class-wp_recaptcha_recaptcha.php

@@ -91,7 +91,7 @@ public function print_head() {
 		if ( $recaptcha_theme == 'custom' ) {
 			?><script type="text/javascript">
 			var RecaptchaOptions = {
-				theme : '<?php echo $recaptcha_theme ?>',
+				theme : '<?php echo esc_js( $recaptcha_theme ) ?>',
 				custom_theme_widget: 'recaptcha_widget'
 			};
 			</script><?php
@@ -101,9 +101,9 @@ public function print_head() {
 <?php
 			$language_code = apply_filters( 'wp_recaptcha_language' , WP_reCaptcha::instance()->get_option( 'recaptcha_language' ) );
 			if ( $language_code ) { ?>
-				lang : '<?php echo $language_code ?>',
+				lang : '<?php echo esc_js($language_code) ?>',
 <?php		} ?>
-				theme : '<?php echo $recaptcha_theme ?>'
+				theme : '<?php echo esc_js($recaptcha_theme) ?>'
 
 			};
 			</script><?php

inc/woocommerce/myaccount/form-lost-password.php

@@ -35,8 +35,8 @@
 			<input type="password" class="input-text" name="password_2" id="password_2" />
 		</p>
 
-		<input type="hidden" name="reset_key" value="<?php echo isset( $args['key'] ) ? $args['key'] : ''; ?>" />
-		<input type="hidden" name="reset_login" value="<?php echo isset( $args['login'] ) ? $args['login'] : ''; ?>" />
+		<input type="hidden" name="reset_key" value="<?php echo isset( $args['key'] ) ? esc_attr( $args['key'] ) : ''; ?>" />
+		<input type="hidden" name="reset_login" value="<?php echo isset( $args['login'] ) ? esc_attr( $args['login'] ) : ''; ?>" />
 
 	<?php endif; ?>
 

readme.txt

@@ -3,8 +3,8 @@ Contributors: podpirate, tareq1988, wedevs, nizamuddinbabu
 Donate link: https://tareq.co/donate/
 Tags: security, captcha, recaptcha, no captcha, login, signup, contact form 7, ninja forms, woocommerce
 Requires at least: 3.8
-Tested up to: 5.8
-Stable tag: 1.2.5
+Tested up to: 6.6
+Stable tag: 1.2.6
 Requires PHP: 5.4
 License: GPLv2 or later
 License URI: http://www.gnu.org/licenses/gpl-2.0.html
@@ -258,6 +258,10 @@ Since late 2015 WordPress.org offers a plugin translation API. Just use the
 
 == Changelog ==
 
+= v1.2.6 (24 October, 2024) =
+
+ - Improved Security
+
 = v1.2.5 (11 October, 2021) =
 
  - WordPress 5.8.1 compatibility

wp-recaptcha-integration.php

@@ -3,7 +3,7 @@
 Plugin Name: WP reCaptcha Integration
 Plugin URI: https://wordpress.org/plugins/wp-recaptcha-integration/
 Description: Integrate reCaptcha in your blog. Supports no Captcha (new style recaptcha). Provides of the box integration for signup, login, comment forms and lost password.
-Version: 1.2.5
+Version: 1.2.6
 Author: weDevs
 Author URI: https://wedevs.com/
 Text Domain: wp-recaptcha-integration