Event post

5.9.8

• Security: Fix Cross Site Scripting, reported by Peter Thaleikis

5.9.7

• Security: Fix vulnerability to XSS in [events_cal] shortcode (reported by Peter Thaleikis)
• Ensure that date is well formated in [events_cal] shortcode

5.9.6

• Security: Fix vulnerability to local file inclusion

5.9.5

• Fixed a bug that display html as string in event calendar blocks
• Fixed javascript warning in event map block

5.9.4

Security:

• Fix authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
• Uses bulk_edit_posts hook, fixes lack of verification in bulk edit
• Escape some outputs
• Fix missing jQuery dependency in timeline-block

Misc:

• Deindex inexisting “Event-post front” and “Event-post admin” blocks
• Add main global EventPost object for JS variables
• Allows to skip deprecation error
• Adds instructions for translators
• Limit number of tags in plugin README

Now requires WordPress 6.3

5.9.3

• Fix quick edit fields

5.9.2

• Fix call of Wp_Query in EventPostChildren
• Fix display of hours in timepicker for AM/PM format
• Fix saving of timeline schemas settings
• Use wp_json_encode instead of json_encode
• Use rawurlencode instead of urlencode
• Adds instructions for translators

5.9.1

• Fix doing_it_wrong calls in legacy widgets
• Escape HTML & outputs

5.9.0

Security:

• Fixes XSS vuln in event metadata (https://patchstack.com/database/report-preview/8edeb59a-59e6-42aa-8ed4-5f79cdedf820)

Features:

• Adds “Completed” event status

Misc:

• Refactor source of blocks with wordpress-scripts
• Improves WordPress’s PHPCS compliance
• Fix deprecated gmt_offset
• Mark legacy widgets as deprecated
• Fix warnings in PHP8+

5.8.6

• Fix December month on native datepicker

5.8.5

• Dissociate event description from post excerpt
• Remove double line breaks and &nbsp in description