SKT Addons for Elementor

Feroaringslog

3.2

Fixed the wrong escaping issue, which the reviewer pointed out.

3.1

Resolved security issue for patchstack

1. wp-content\plugins\skt-addons-for-elementor\widgets\archive\widget.php
   line no 215

2. wp-content\plugins\skt-addons-for-elementor\widgets\site-title\widget.php

line no 210

1. wp-content\plugins\skt-addons-for-elementor\widgets\card\widget.php
   line no 1158

2. wp-content\plugins\skt-addons-for-elementor\widgets\edd-category-carousel\widget.php
   line no 1498

3. wp-content\plugins\skt-addons-for-elementor\widgets\edd-single-product\widget.php
   Line no 2694
   Line no 2772
   Line no 2841

4. wp-content\plugins\skt-addons-for-elementor\widgets\fun-factor\widget.php
   Line no 320
   Line no 876

5. wp-content\plugins\skt-addons-for-elementor\widgets\gardient-heading\widget.php
   changes

6. wp-content\plugins\skt-addons-for-elementor\widgets\horizontal-timeline\widget.php
   Line no 1153

7. wp-content\plugins\skt-addons-for-elementor\widgets\icon-box\widget.php
   line no 752

8. wp-content\plugins\skt-addons-for-elementor\widgets\image-hover-effect\widget.php
   line no 1022

9. wp-content\plugins\skt-addons-for-elementor\widgets\post-list\widget.php
   Line no 1126

10. wp-content\plugins\skt-addons-for-elementor\widgets\post-tab\widget.php
    Line no 966

11. wp-content\plugins\skt-addons-for-elementor\widgets\smart-post-list\widget.php
    Line no 2819

12. wp-content\plugins\skt-addons-for-elementor\widgets\taxonomy-list\widget.php
    Line no 792

13. wp-content\plugins\skt-addons-for-elementor\widgets\timeline\widget.php
    Line no 1334

14. wp-content\plugins\skt-addons-for-elementor\widgets\unfold\widget.php
    Line no 953

3.0

Note: a) 1034, modified and removed code[ Here 1034 is line no]

1. skt-addons-for-elementor\widgets\accordion\widget.php

a)line no 370 to fix phpcs:ignore WordPressVIPMinimum.Performance.WPQueryParams.PostNotIn_exclude issue
b)line no 407 to fix phpcs:ignore WordPressVIPMinimum.Performance.WPQueryParams.PostNotIn_exclude issue
c)line no 608 to fix WordPress.Security.EscapeOutput.OutputNotEscaped issued

1. skt-addons-for-elementor\widgets\advanced-data-table\widget.php
   a) 1034, modified and removed code
   b) 1052, modified and removed code
   c) 1057, modified and removed code
   d) 1112, modified and removed code
   e) 1118, modified and removed code
   f) 1198, modified and removed code

2. skt-addons-for-elementor\widgets\advanced-heading\widget.php
   a) line no 346 to fix phpcs:ignore WordPressVIPMinimum.Performance.WPQueryParams.PostNotIn_exclude issue
   b) 470, modified and removed code
   c) 601, modified and removed code

3. skt-addons-for-elementor\widgets\advanced-tabs\widget.php
   a) 579, modified and removed code
   b) 526, modified and removed code
   c) 869, modified and removed code
   d) 126, modified and removed code

4. skt-addons-for-elementor\widgets\age-gate\widget.php
   a) 686, modified and removed code
   b) 1021, modified and removed code

5. skt-addons-for-elementor\widgets\animated-text\widget.php
   a) 648, modified and removed code
   b) 161, font_size, line_height, modified and removed code
   c) 365, line_height, modified and removed code
   d) 473, font_size, line_height, modified and removed code
   e) 519, font_size, line_height, modified and removed code
   f) 654, ‘exclude’ => [‘font_size’,’line_height’,], modified and removed code

6. skt-addons-for-elementor\widgets\author-list\widget.php
   a) 412, image, box_shadow_position, modified and removed code
   b) 483, box_shadow_position, modified and removed code
   c) 535, line_height, modified and removed code
   d) 609, line_height, modified and removed code
   e) 674, line_height, modified and removed code
   f) 739, line_height, modified and removed code

7. skt-addons-for-elementor\widgets\author-meta\widget.php
   a) 491, image, modified and removed code
   b) 522, image, modified and removed code

8. skt-addons-for-elementor\widgets\breadcrumbs\widget.php
   a) 476, font_family,font_size,text_transform,font_style,line_height,letter_spacing, modified and removed code
   b) 473, font_family,font_size,text_transform,font_style,line_height,letter_spacing, modified and removed code

9. skt-addons-for-elementor\widgets\calderaform\widget.php
   a) 246, box_shadow_position, modified and removed code
   b) 571, escaping issued solved

10. skt-addons-for-elementor\widgets\card\widget.php
    a) 580, box_shadow_position, modified and removed code
    b) 835, box_shadow_position, modified and removed code
    b) 845, line_height, modified and removed code

11. skt-addons-for-elementor\widgets\carousel\widget.php
    a) 151, custom, modified and removed code
    b) 425, image, modified and removed code

12. skt-addons-for-elementor\widgets\cf7\widget.php
    a) 309, box_shadow_position, modified and removed code

13. skt-addons-for-elementor\widgets\comparison-table\widget.php
    a) 436, custom, modified and removed code
    b) 768, image, modified and removed code

14. skt-addons-for-elementor\widgets\content-switcher\widget.php

a)line 55
Old : $args = [
‘tax_query’ => [
[
‘taxonomy’ => ‘elementor_library_type’,
‘field’ => ‘slug’,
‘terms’ => $type,
],
],
‘post_type’ => ‘elementor_library’,
‘posts_per_page’ => -1,
];

New: $args = [
‘post_type’ => ‘elementor_library’,
‘posts_per_page’ => -1,
‘elementor_library_type’ => $type, // Query directly by taxonomy slug
];

Not solved

1. skt-addons-for-elementor\widgets\countdown\widget.php
   a) 600, line_height, modified and removed code
   b) 625, line_height, modified and removed code
   c) 704, line_height, modified and removed code
   d) 729, line_height, modified and removed code
   e) 786, line_height, modified and removed code
   f) 811, line_height, modified and removed code
   g) 867, line_height, modified and removed code
   h) 892, line_height, modified and removed code
   i) 948, line_height, modified and removed code
   j) 973, line_height, modified and removed code

2. skt-addons-for-elementor\widgets\data-table\widget.php
   a) 442, custom, modified and removed code
   b) 684, image, modified and removed code

3. skt-addons-for-elementor\widgets\edd-cart\widget.php
   a) 1162, modified and removed code
   b) 1163, modified and removed code
   c) 1308, modified and removed code

4. skt-addons-for-elementor\widgets\edd-category-carousel\widget.php
   a) 71,
   Old: $args = array(
   ‘parent’ => 0,
   );
   $parent_cats = get_terms( ‘download_category’, $args );
   New: $args = array(
   ‘taxonomy’ => ‘download_category’,
   ‘parent’ => 0,
   );

   $parent_cats = get_terms( $args );
   

   b) 198, ‘exclude’ => [‘custom’,], modified and removed code
   c) 622 ‘exclude’ => [ ‘image’ ], modified and removed code
   d) 792 ‘exclude’ => [ ‘image’ ], modified and removed code
   e) 93
   Old:
   $args = [
   ‘orderby’ => ‘name’,
   ‘order’ => ‘DESC’,
   ];
   $cats = get_terms( ‘download_category’, $args );
   New:
   $args = [
   ‘taxonomy’ => ‘download_category’,
   ‘orderby’ => ‘name’,
   ‘order’ => ‘DESC’,
   ];
   $cats = get_terms( $args );

5. skt-addons-for-elementor\widgets\edd-category-grid\widget.php
   a) 59
   Old:
   $args = array(
   ‘parent’ => 0,
   );
   $parent_cats = get_terms( ‘download_category’, $args );
   New:

$args = array(
‘taxonomy’ => ‘download_category’,
‘parent’ => 0,
);

    $parent_cats = get_terms( $args );

1. skt-addons-for-elementor\widgets\edd-checkout\widget.php
   a) 225 ‘exclude’ => [‘image’], modified and removed code
   b) 1001 ‘exclude’ => [‘image’], modified and removed code
   c) 1809 ‘exclude’ => [ ‘image’ ], modified and removed code
   d) 1847 ‘exclude’ => [ ‘image’ ], modified and removed code

2. skt-addons-for-elementor\widgets\edd-download\widget.php

a) skt-addons-for-elementor\inc\function.php on line no 26 $tag = esc_attr($tag);

1. skt-addons-for-elementor\widgets\edd-login\widget.php
   a) 583, ‘exclude’ => [ ‘image’ ], modified and removed code
   b) 619, ‘exclude’ => [ ‘image’ ], modified and removed code

2. skt-addons-for-elementor\widgets\edd-register\widget.php
   a) 510 ‘exclude’ => [ ‘image’ ], modified and removed code
   b) 547 ‘exclude’ => [ ‘image’ ], modified and removed code

3. skt-addons-for-elementor\widgets\edd-single-product\widget.php
   a) 159, ‘exclude’ => [ ‘custom’ ], modified and removed code
   b) 462, ‘exclude’ => [ ‘image’ ], modified and removed code
   c) 739, ‘exclude’ => [ ‘line_height’ ], modified and removed code
   d) 892, ‘exclude’ => [ ‘line_height’ ], modified and removed code
   e) 1264
   Old: $this->add_group_control(
   Group_Control_Border::get_type(),
   [
   ‘name’ => ‘cat_border’,
   ‘label’ => __( ‘Border’, ‘skt-addons-for-elementor’ ),
   ‘exclude’ => [
   ‘color’,
   ],
   ‘selector’ => ‘{{WRAPPER}} .skt-edd-single-product__category a’,
   ‘condition’ => [
   ‘show_cat’ => ‘yes’,
   ],
   ]
   );

New:

$this->add_group_control(
Group_Control_Border::get_type(),
[
‘name’ => ‘cat_border_test’,
‘label’ => __( ‘Border’, ‘skt-addons-for-elementor’ ),
‘selector’ => ‘{{WRAPPER}} .skt-edd-single-product__category a’,
‘condition’ => [
‘show_cat’ => ‘yes’,
],
]
);
f) 1338, ‘exclude’ => [ ‘image’ ], modified and removed code
g) 1338, ‘exclude’ => [ ‘image’ ], modified and removed code
h) 2783, 2778, 2704, 2700
i) 1338 ‘exclude’ => [ ‘image’ ], modified and removed code

1. skt-addons-for-elementor\widgets\event-calendar\widget.php
   a) 270, custom, modified and removed code
   b) 1022, font_family, modified and removed code
   c) 1176, font_family, modified and removed code
   d) 1085, color, modified and removed code
   e) 1143, font_family, modified and removed code
   f) 1490, font_family, modified and removed code
   g) 1521, font_family, modified and removed code
   h) 1700, font_family, modified and removed code

2. skt-addons-for-elementor\widgets\flip-box\widget.php
   a) 150, full,shop_catalog,shop_single, modified and removed code
   b) 293, full,shop_catalog,shop_single, modified and removed code

3. skt-addons-for-elementor\widgets\fluent-form\widget.php
   a) 265, box_shadow_position, modified and removed code

4. skt-addons-for-elementor\widgets\fun-factor\widget.php
   a) 116, ‘full, custom, large, shop_catalog, shop_single, shop_thumbnail, modified and removed code
   b) 877, modified and removed code

5. skt-addons-for-elementor\widgets\gradient-heading\widget.php
   a) 247, modified and removed code

6. skt-addons-for-elementor\widgets\gravityforms\widget.php
   a) translate taxt, modified and removed code

7. skt-addons-for-elementor\widgets\horizontal-timeline\widget.php
   a) 112, custom, modified and removed code
   b) 1158, 1168 , modified and removed code

8. skt-addons-for-elementor\widgets\hotspots\widget.php
   A) 565
   ‘exclude’ => [
   ‘box_shadow_position’,
   ], modified and removed code

9. skt-addons-for-elementor\widgets\hover-box\widget.php
   a) 650, modified and removed code

10. skt-addons-for-elementor\widgets\icon-box\widget.php
    a) 293, box_shadow_position, modified and removed code
    b) 634, box_shadow_position, modified and removed code
    c) 643, font_family, line_height, modified and removed code

11. skt-addons-for-elementor\widgets\image-accordion\widget.php
    a) 642, image, modified and removed code
    b) 673, image, modified and removed code
    c) 705, image, modified and removed code
    d) 1059, image, modified and removed code
    e) 1091, image, modified and removed code
    f) 1450, modified and removed code

12. skt-addons-for-elementor\widgets\image-compare\widget.php
    a) 258, color, modified and removed code

13. skt-addons-for-elementor\widgets\image-grid\widget.php
    a) 131, image, modified and removed code
    b) 250, custom, modified and removed code
    c) 519, box_shadow_position, modified and removed code
    d) 1059, image, modified and removed code

14. skt-addons-for-elementor\widgets\image-hover-effect\widget.php
    a) 404, image, modified and removed code
    b) 425, image, modified and removed code
    c) 451

15. skt-addons-for-elementor\widgets\image-scroller\widget.php
    a) 89, custom, modified and removed code
    b) 676, box_shadow_position, modified and removed code
    c) 684, line_height, modified and removed code

16. skt-addons-for-elementor\widgets\image-stack-group\widget.php
    a) 200, image,modified and removed code
    b) 415, image,modified and removed code

17. skt-addons-for-elementor\widgets\infobox\widget.php
    a) 1022, modified and removed code

18. skt-addons-for-elementor\widgets\justified-gallery\widget.php
    a) 123, custom, modified and removed code
    b) 274, custom, modified and removed code
    c) 593, box_shadow_position, modified and removed code

19. skt-addons-for-elementor\widgets\list-group\widget.php
    a) 1293, box_shadow_position, modified and removed code
    b) 1305, line_height, modified and removed code

20. skt-addons-for-elementor\widgets\logo-carousel\widget.php
    a) 153, custom, modified and removed code
    b) 421, image, modified and removed code

21. skt-addons-for-elementor\widgets\logo-grid\widget.php
    a) 223, custom, modified and removed code
    b) 499, image, modified and removed code
    c) 642, modified and removed code

22. skt-addons-for-elementor\widgets\lordicon\widget.php
    a) 223, box_shadow_position, modified and removed code

23. skt-addons-for-elementor\widgets\mailchimp\widget.php
    a) 788, image, modified and removed code
    b) 1023, image, modified and removed code
    c) 1289, image, modified and removed code
    d) 1323, image, modified and removed code

24. skt-addons-for-elementor\widgets\member\widget.php
    a) 1695, modified and removed code
    b) 1773, modified and removed code

25. skt-addons-for-elementor\widgets\mini-cart\widget.php
    a) 304, image, modified and removed code
    b) 345, image, modified and removed code
    c) 1341, image, modified and removed code
    d) 1372, image, modified and removed code
    e) 1485, image, modified and removed code
    f) 1516, image, modified and removed code

26. skt-addons-for-elementor\widgets\news-ticker\widget.php
    a) 515, modified and removed code

27. skt-addons-for-elementor\widgets\off-canvas\widget.php
    a) 1567, image, modified and removed code
    b) 1717, image, modified and removed code
    c) 1780, image, modified and removed code
    d) 1811, image, modified and removed code

28. skt-addons-for-elementor\widgets\one-page-nav\widget.php
    a) 1085, modified and removed code

29. skt-addons-for-elementor\widgets\page-title \widget.php
    a) 233, modified and removed code

30. skt-addons-for-elementor\widgets\post-carousel\widget.php
    a) 77, image, modified and removed code
    b) 1717, image, modified and removed code
    c) 1780, image, modified and removed code
    d) 1811, image, modified and removed code

31. skt-addons-for-elementor\widgets\post-comments\widget.php
    a) 530, image, modified and removed code
    b) 560, image, modified and removed code

32. skt-addons-for-elementor\widgets\post-grid\widget.php
    a) 404, custom, modified and removed code
    b) 842, image, modified and removed code
    c) 1163, color, modified and removed code
    f) 1219, image, modified and removed code
    h) 1263, image, modified and removed code
    i) 1843, color, modified and removed code
    j) 1901, color, modified and removed code
    k) 1972, image, modified and removed code
    l) 2016, image, modified and removed code
    m) 2225, modified and removed code
    n) 2199, modified and removed code

Old: if ( wp_verify_nonce( wp_unslash($_GET[‘preview_nonce’])), ‘your_nonce_action’ ) {

New: if ( wp_verify_nonce( sanitize_text_field(wp_unslash($_GET[‘preview_nonce’])), ‘your_nonce_action’ ) ) {

Old code
if ( is_preview() ) {
if ( ( ‘draft’ !== $post->post_status ) && isset( $_GET[‘preview_id’], $_GET[‘preview_nonce’] ) ) {

                $query_args['preview_id'] = sanitize_text_field( wp_unslash( $_GET['preview_id'] ) );
                $query_args['preview_nonce'] = sanitize_text_field( wp_unslash( $_GET['preview_nonce'] ) );
            }
        rl = get_preview_post_link( $post, $query_args, $url );
    }

New Code
if ( is_preview() ) {
if ( ( ‘draft’ !== $post->post_status ) && isset( $_GET[‘preview_id’], $_GET[‘preview_nonce’] ) ) {
if ( wp_verify_nonce( $_GET[‘preview_nonce’], ‘your_nonce_action’ ) ) {
$query_args[‘preview_id’] = sanitize_text_field( wp_unslash( $_GET[‘preview_id’] ) );
$query_args[‘preview_nonce’] = sanitize_text_field( wp_unslash( $_GET[‘preview_nonce’] ) );
}
}else{
$query_args[‘preview_id’] = sanitize_text_field( wp_unslash( $_GET[‘preview_id’] ) );
$query_args[‘preview_nonce’] = sanitize_text_field( wp_unslash( $_GET[‘preview_nonce’] ) );
}
$url = get_preview_post_link( $post, $query_args, $url );
}

n) 1152
Old:
$this->add_group_control(
Group_Control_Border::get_type(),
[
‘name’ => ‘badge_border’,
‘label’ => __( ‘Border’, ‘skt-addons-elementor’ ),
‘exclude’ => [
‘color’
],
‘selector’ => ‘{{WRAPPER}} .skt-pg-item .skt-pg-badge a’,
]
);

New:

$this->add_group_control(
Group_Control_Border::get_type(),
[
‘name’ => ‘badge_border_test’,
‘label’ => __( ‘Border’, ‘skt-addons-elementor’ ),
‘selector’ => ‘{{WRAPPER}} .skt-pg-item .skt-pg-badge a’,
]
);

o) 1878
Old: $this->add_group_control(
Group_Control_Border::get_type(),
[
‘name’ => ‘readmore_border’,
‘label’ => __( ‘Border’, ‘skt-addons-elementor’ ),
‘exclude’ => [
‘color’,
],
‘selector’ => ‘{{WRAPPER}} .skt-pg-readmore a’,
// ‘condition’ => [
// $this->get_control_id( ‘read_more!’ ) => ”,
// ],
]
);

New:

$this->add_group_control(
Group_Control_Border::get_type(),
[
‘name’ => ‘readmore_border_test’,
‘label’ => __( ‘Border’, ‘skt-addons-elementor’ ),
‘selector’ => ‘{{WRAPPER}} .skt-pg-readmore a’,
// ‘condition’ => [
// $this->get_control_id( ‘read_more!’ ) => ”,
// ],
]
);

1. skt-addons-for-elementor\widgets\post-info\widget.php
   a) 1043, modified and removed code

2. skt-addons-for-elementor\widgets\post-list\widget.php
   a) 253, custom, modified and removed code
   b) 1172, modified and removed code
   c) 1183, modified and removed code

3. skt-addons-for-elementor\widgets\post-navigation\widget.php
   a) 334, line_height, modified and removed code
   b) 253, custom, modified and removed code

4. skt-addons-for-elementor\widgets\post-tab\widget.php
   a) 964, modified and removed code
   b) 991, modified and removed code
   c) 893, modified and removed code

5. skt-addons-for-elementor\widgets\post-tiles\widget.php
   a) 301, image, modified and removed code
   b) 335, image, modified and removed code
   c) 531, box_shadow_position, modified and removed code
   f) 540, line_height, font_size, modified and removed code
   h) 577, line_height, font_size, modified and removed code
   i) 636, font_size, modified and removed code
   g) 714, line_height, font_size, modified and removed code

6. skt-addons-for-elementor\widgets\post-title\widget.php
   a) 236, modified and removed code

7. skt-addons-for-elementor\widgets\price-menu\widget.php
   a) 604, letter_spacing, modified and removed code
   b) 706, letter_spacing, text_transform, modified and removed code
   c) 662, box_shadow_position , modified and removed code

8. skt-addons-for-elementor\widgets\pricing-table\widget.php
   a) 148, custom, modified and removed code
   b) 1319, image, modified and removed code

9. skt-addons-for-elementor\widgets\product-carousel-new\widget.php
   a) 164, custom, modified and removed code
   b) 584, image, modified and removed code

10. skt-addons-for-elementor\widgets\product-category-carousel-new\widget.php
    a) 69
    Old: $args = array(
    ‘parent’ => 0
    );
    $parent_cats = get_terms( ‘product_cat’, $args ); // phpcs:ignore WordPress.WP.DeprecatedParameters.Get_termsParam2Found

New: $args = array(
‘taxonomy’ => ‘product_cat’,
‘parent’ => 0,
);

    $parent_cats = get_terms( $args );

b) 168 ‘exclude’ => [‘custom’], modified and removed code
c) 586 ‘exclude’ => [ ‘image’ ], modified and removed code
d) 765 ‘exclude’ => [ ‘image’ ], modified and removed code
e) 90
Old: $args = [
‘orderby’ => ‘name’,
‘order’ => ‘DESC’,
];
$cats = get_terms( ‘product_cat’, $args );

New: $args = [
‘taxonomy’ => ‘product_cat’,
‘orderby’ => ‘name’,
‘order’ => ‘DESC’,
];
$cats = get_terms( $args );

1. skt-addons-for-elementor\widgets\product-category-grid-new\widget.php
   a) 60
   Old: $args = array(
   ‘parent’ => 0
   );
   $parent_cats = get_terms( ‘product_cat’, $args );
   New: $args = array(
   ‘taxonomy’ => ‘product_cat’,
   ‘parent’ => 0,
   );

b) 81

Old: $args = [
‘orderby’ => ‘name’,
‘order’ => ‘DESC’,
];
$cats = get_terms( ‘product_cat’, $args ); // phpcs:ignore WordPress.WP.DeprecatedParameters.Get_termsParam2Found

c) 191 ‘exclude’ => [‘custom’], modified and removed code
d) 590 ‘exclude’ => [ ‘image’ ], modified and removed code
e) 760 ‘exclude’ => [ ‘image’ ], modified and removed code

New:
$args = [
‘taxonomy’ => ‘product_cat’,
‘orderby’ => ‘name’,
‘order’ => ‘DESC’,
];
$cats = get_terms( $args );

1. skt-addons-for-elementor\widgets\product-grid-new\widget.php
   a)631, modified and removed code
   b)493, modified and removed code
   c)165, modified and removed code

2. skt-addons-for-elementor\widgets\review\widget.php
   a) 702, box_shadow_position, modified and removed code
   b) 748, modified and removed code

3. skt-addons-for-elementor\widgets\scrolling-image\widget.php
   a) 205, custom, modified and removed code

4. skt-addons-for-elementor\widgets\single-product-new\widget.php
   Note: Notice: Function Elementor\Controls_Manager::add_control_to_stack was called incorrectly. Cannot redeclare control with same name “cat_border_color”. Please see Debugging in WordPress for more information. (This message was added in version 1.0.0.) in D:\xampp\htdocs\skt_addons_elementor\wp-includes\functions.php on line 6085

a) 159, ‘exclude’ => [ ‘custom’ ], modified and removed code
b) 448, ‘exclude’ => [ ‘image’ ], modified and removed code
c) 726, ‘exclude’ => [‘line_height’], modified and removed code
d) 878, ‘exclude’ => [‘line_height’], modified and removed code
e) Old:
$this->add_group_control(
Group_Control_Border::get_type(),
[
‘name’ => ‘cat_border’,
‘label’ => __( ‘Border’, ‘skt-addons-for-elementor’ ),
‘exclude’ => [ // phpcs:ignore WordPressVIPMinimum.Performance.WPQueryParams.PostNotIn_exclude
‘color’
],
‘selector’ => ‘{{WRAPPER}} .skt-single-product__category a’,
‘condition’ => [
‘show_cat’ => ‘yes’,
],
]
);

New: $this->add_group_control(
Group_Control_Border::get_type(),
[
‘name’ => ‘cat_border_test’,
‘label’ => __( ‘Border’, ‘skt-addons-for-elementor’ ),
‘selector’ => ‘{{WRAPPER}} .skt-single-product__category a’,
‘condition’ => [
‘show_cat’ => ‘yes’,
],
]
);
f) 1325, ‘exclude’ => [ ‘image’], modified and removed code
g) 1366, ‘exclude’ => [ ‘image’], modified and removed code
h) 1363 ‘exclude’ => [ ‘image’], modified and removed code

1. skt-addons-for-elementor\widgets\site-logo\widget.php
   a) 260, modified and removed code

2. skt-addons-for-elementor\widgets\site-title\widget.php
   A) 211, modified and removed code

3. skt-addons-for-elementor\widgets\skills\widget.php
   a) 272, box_shadow_position, modified and removed code

4. skt-addons-for-elementor\widgets\slider\widget.php
   a) 151, custom, modified and removed code
   a) 388, image, modified and removed code

5. skt-addons-for-elementor\widgets\social-share\widget.php
   a) 783, modified and removed code
   b) 794, modified and removed code

6. skt-addons-for-elementor\widgets\step-flow\widget.php
   a) 773, modified and removed code

7. skt-addons-for-elementor\widgets\table-of-contents\widget.php
   a) 826, ‘types’ => [ ‘classic’, ‘gradient’ ], modified and removed code

8. skt-addons-for-elementor\widgets\taxonomy-list\widget.php
   a) 793, modified and removed code

9. skt-addons-for-elementor\widgets\team-carousel\widget.php
   a) 205 remove custom option, modified and removed code

10. skt-addons-for-elementor\widgets\testimonial\widget.php
    a) 163, custom, modified and removed code

11. skt-addons-for-elementor\widgets\testimonial-carousel\widget.php
    a) 630, modified and removed code
    b) 1574, modified and removed code
    C) 1603, modified and removed code
    d) 1614, modified and removed code
    e) 1627, modified and removed code
    f) 1641, modified and removed code
    e) 1654, modified and removed code
    g) 1666, modified and removed code
    h) 1679, modified and removed code

12. skt-addons-for-elementor\widgets\timeline\widget.php
    a) 197, custom, modified and removed code
    b) 564, image, modified and removed code
    c) 1335, modified and removed code
    d) 1340, modified and removed code
    e) 1358, modified and removed code

13. skt-addons-for-elementor\widgets\toggle\widget.php
    a) 367, image, modified and removed code
    b) 404, image, modified and removed code

14. skt-addons-for-elementor\widgets\unfold\widget.php
    a) 953, modified and removed code
    b) 965, modified and removed code

15. skt-addons-for-elementor\widgets\wc-cart\widget.php
    a) 1841, modified and removed code

16. skt-addons-for-elementor\widgets\weforms\widget.php
    b) 225, modified and removed code
    c) 290 ,’exclude’ => [‘box_shadow_position’,], modified and removed code

17. skt-addons-for-elementor\widgets\wpforms\widget.php
    a) 670, modified and removed code
    Old:

if ( ! empty( $settings[‘form_id’] ) ) {
echo skt_addons_elementor_do_shortcode( ‘wpforms’, [ // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
‘id’ => $settings[‘form_id’],
] );
}

New:

if ( ! empty( $settings[‘form_id’] ) ) {
$shortcode_output = skt_addons_elementor_do_shortcode( ‘wpforms’, [
‘id’ => $settings[‘form_id’],
] );

         $allowed_html = [
    'form' => [
        'action' => [],
        'method' => [],
        'id' => [],
        'class' => [],
    ],
    'input' => [
        'type' => [],
        'name' => [],
        'value' => [],
        'class' => [],
        'id' => [],
    ],
    'label' => [
        'for' => [],
        'class' => [],
    ],
    'div' => [
        'class' => [],
        'id' => [],
    ],
    'span' => [
        'class' => [],
    ],
    'button' => [  
        'type' => [],
        'class' => [],
        'id' => [],
        'name' => [],
        'value' => [],
        'onclick' => [],
        'data-alt-text' => [],
        'data-submit-text' => [],
        'aria-live' => [],
    ],
];
echo wp_kses( $shortcode_output, $allowed_html );
    }

1. skt-addons-for-elementor/classes/admin-bar.php

a) Old code on 24
$type = sanitize_text_field(isset( $_POST[‘type’] ) ? $_POST[‘type’] : ”);
$post_id = sanitize_text_field(isset( $_POST[‘post_id’] ) ? $_POST[‘post_id’] : 0);

New code on 24

$type = sanitize_text_field(wp_unslash(isset( $_POST[‘type’] ) ? $_POST[‘type’] : ”));
$post_id = sanitize_text_field(wp_unslash(isset( $_POST[‘post_id’] ) ? $_POST[‘post_id’] : 0));

1. skt-addons-for-elementor/classes/ajax-handler.php

a) Old code on 52
$download_id = isset($_POST[‘download_id’]) ? $_POST[‘download_id’]: ”;

New code
$download_id = sanitize_text_field(wp_unslash(isset($_POST[‘download_id’]) ? $_POST[‘download_id’]: ”));

b) old 71
$settings = sanitize_text_field($_POST[‘querySettings’]);

New code

$settings = sanitize_text_field(wp_unslash($_POST[‘querySettings’]));

c) old 84
if ($_POST[‘offset’]) {

New if (isset($_POST[‘offset’])) {

d) old 85
old: $args[‘offset’] = sanitize_text_field($_POST[‘offset’]);
New: $args[‘offset’] = sanitize_text_field(wp_unslash($_POST[‘offset’]));

e) 87
old: if ($_POST[‘termId’] && is_numeric($_POST[‘termId’])) {
New: $args[‘offset’] = sanitize_text_field(wp_unslash($_POST[‘offset’]));

f) 92
old: ‘terms’ => sanitize_text_field($_POST[‘termId’]),
New: ‘terms’ => sanitize_text_field(wp_unslash($_POST[‘termId’])),

e) 156 added that function skt_addons_elementor_sanitize_array_recursively

g) 158
Old:

        $settings   =  $_POST['querySettings'];
        $post_type  = $settings['post_type'];
        $taxonomy   = $settings['taxonomy'];
        $item_limit = $settings['item_limit'];
        $excerpt    = $settings['excerpt'];
        $title_tag  = $settings['title_tag'];
        $term_id    = absint($_POST['term_id']);
        $orderby    = $settings['orderby'];
        $order      = $settings['order'];

        $args = [
            'post_status'      => 'publish',
            'post_type'        => $post_type,
            'posts_per_page'   => $item_limit,
            'orderby'          => $orderby,
            'order'            => $order,
            'suppress_filters' => false,
            'tax_query'        => [
                [
                    'taxonomy' => $taxonomy,
                    'field'    => 'term_id',
                    'terms'    => $term_id,
                ],
            ],
        ];

New: $term_id = absint(wp_unslash(isset($_POST[‘term_id’])));
$post_type = $settings[‘post_type’];
$taxonomy = $settings[‘taxonomy’];
$item_limit = $settings[‘item_limit’];
$excerpt = $settings[‘excerpt’];
$title_tag = $settings[‘title_tag’];
$term_id = $term_id
$orderby = $settings[‘orderby’];
$order = $settings[‘order’];

        $args = [
            'post_status'      => 'publish',
            'post_type'        => $post_type,
            'posts_per_page'   => $item_limit,
            'orderby'          => $orderby,
            'order'            => $order,
            'suppress_filters' => false,
            'tax_query'        => [
                [
                    'taxonomy' => $taxonomy,
                    'field'    => 'term_id',
                    'terms'    => $term_id,
                ],
            ],
        ];

1. skt-addons-for-elementor/classes/clone-handler.php
   a) 65
   Old:
   $_uri = wp_unslash(isset($_REQUEST[‘REQUEST_URI’]) ? $_REQUEST[‘REQUEST_URI’] : ”);
   New:
   if ( sanitize_text_field(wp_unslash(isset( $_POST[‘REQUEST_URI_nonce’] ))) && wp_verify_nonce( sanitize_text_field(wp_unslash($_POST[‘REQUEST_URI_nonce’], ‘REQUEST_URI_nonce_action’ ))) ) {
   $_uri = sanitize_text_field(wp_unslash(! empty( $_REQUEST[‘REQUEST_URI’] ) ? $_REQUEST[‘REQUEST_URI’] : ”));
   } else {
   $_uri = sanitize_text_field(wp_unslash(! empty( $_REQUEST[‘REQUEST_URI’] ) ? $_REQUEST[‘REQUEST_URI’] : ”));
   }

b) 83, modified and removed code
c) 85, modified and removed code

1. skt-addons-for-elementor\classes\dashboard.php
   a) 76, modified and removed code

2. skt-addons-for-elementor\templates\admin\dashboard-widgets.php

a) 35
old:
printf(‘

%s %s

‘,
“style=’width: 100%; margin-left: 10px;’”,
cwords(str_replace(‘-‘, ‘ ‘, $cat)),
esc_attr__( ‘Widgets 123456’, ‘skt-addons-for-elementor’ )
);

new:
printf(‘

%s %s

‘,
“style=’width: 100%; margin-left: 10px;’”,
esc_attr(ucwords(str_replace(‘-‘, ‘ ‘, $cat))),
esc_attr__( ‘Widgets 123456’, ‘skt-addons-for-elementor’ )
);

1. skt-addons-for-elementor\templates\admin\dashboard-main.php
   a) 33

Old:
printf( ‘%4$s‘,
$href, // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
$slug, // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
$class, // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
/* translators: translate tab title */ isset( $data[‘title’] ) ? $data[‘title’] : sprintf( esc_html__( ‘Tab %s’, ‘skt-addons-for-elementor’ ), $tab_count ) // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
);

New:

printf( ‘%4$s‘,
esc_url($href),
esc_attr($slug),
esc_attr($class),
/* translators: translate tab title */ isset( $data[‘title’] ) ? esc_attr($data[‘title’]) : sprintf( esc_html__( ‘Tab %s’, ‘skt-addons-for-elementor’ ), esc_attr($tab_count) )
);

1. skt-addons-for-elementor\templates\admin\dashboard-analytics.php
   sloved escaping issue in file

2. skt-addons-for-elementor\traits\smart-post-list.php

a) 100, modified and removed code
b) 362 , ‘exclude’ => [‘custom’], modified and removed code
c) 626, ‘exclude’ => [‘custom’], modified and removed code
d) 1032, ‘exclude’ => [‘image’], modified and removed code
e) 1753, ‘exclude’ => [‘image’], modified and removed code

Old: $this->add_group_control(
Group_Control_Border::get_type(),
[
‘name’ => ‘spl_feature_badge_border’,
‘label’ => __( ‘Border’, ‘skt-addons-for-elementor’ ),
‘exclude’ => [
‘color’
],
‘selector’ => ‘{{WRAPPER}} .skt-spl-featured-post .skt-spl-badge a’,
‘condition’ => [
‘show_badge’ => ‘yes’,
],
]
);

New: $this->add_group_control(
Group_Control_Border::get_type(),
[
‘name’ => ‘spl_feature_badge_border_test’,
‘label’ => __( ‘Border’, ‘skt-addons-for-elementor’ ),

            'selector' => '{{WRAPPER}} .skt-spl-featured-post .skt-spl-badge a',
            'condition' => [
                'show_badge' => 'yes',
            ],
        ]
    );

g) 2279, ‘exclude’ => [‘image’], modified and removed code
h) 2320, ‘exclude’ => [‘image’], modified and removed code
i) 2820, escpin issue
j) 1525, modified and removed code

Old: $this->add_group_control(
Group_Control_Border::get_type(),
[
‘name’ => ‘spl_top_bar_nav_border’,
‘label’ => __( ‘Border’, ‘skt-addons-for-elementor’ ),
‘selector’ => ‘{{WRAPPER}} .skt-spl-pagination button’,
‘exclude’ => [‘color’],
‘condition’ => [
‘navigation_show’ => ‘yes’,
]
]
);

New: $this->add_group_control(
Group_Control_Border::get_type(),
[
‘name’ => ‘spl_top_bar_nav_border_test’,
‘label’ => __( ‘Border’, ‘skt-addons-for-elementor’ ),
‘selector’ => ‘{{WRAPPER}} .skt-spl-pagination button’,
‘condition’ => [
‘navigation_show’ => ‘yes’,
]
]
);

1. skt-addons-for-elementor\traits\button-renderer.php

a) 50, modified and removed code
b) 60, modified and removed code
c) 66, modified and removed code

1. skt-addons-for-elementor\widgets\calendly\widget.php
   a) 191, modified and removed code

2. skt-addons-for-elementor\extensions\floating-effects.php
   a) 38

Old: if ( file_exists( $extension_js ) ) {
wp_add_inline_script(
‘elementor-frontend’,
file_get_contents( $extension_js )
);
}

New:

$extension_js = SKT_ADDONS_ELEMENTOR_DIR_PATH . ‘assets/js/extension-floating-effects.min.js’;
$extension_js_url = SKT_ADDONS_ELEMENTOR_DIR_URL . ‘assets/js/extension-floating-effects.min.js’;

if ( file_exists( $extension_js ) ) {
    wp_enqueue_script(
        'extension-floating-effects',
        $extension_js_url,
        array( 'elementor-frontend' ),
        filemtime( $extension_js ),
        true
    );
}

1. skt-addons-for-elementor\extensions\advanced-tooltip.php
   a) 29

old: $extension_js = SKT_ADDONS_ELEMENTOR_DIR_PATH . ‘assets/js/extension-advanced-tooltip’ . $suffix . ‘js’;

    if (file_exists($extension_js)) {
        wp_add_inline_script(
            'elementor-frontend',
            file_get_contents($extension_js)
        );
    }

New :
$extension_js = SKT_ADDONS_ELEMENTOR_DIR_PATH . ‘assets/js/extension-advanced-tooltip’ . $suffix . ‘js’;
$extension_js_url = SKT_ADDONS_ELEMENTOR_DIR_URL . ‘assets/js/extension-advanced-tooltip’ . $suffix . ‘js’;
if ( file_exists( $extension_js ) ) {
wp_enqueue_script(
‘extension-tootips-effects’,
$extension_js_url,
array( ‘elementor-frontend’ ),
filemtime( $extension_js ),
true
);
}

1. skt-addons-for-elementor\extensions\skt-particle-effects.php

a) 53
Old : $extension_js = SKT_ADDONS_ELEMENTOR_DIR_PATH . ‘assets/js/skt-particles-init.js’;
if (file_exists($extension_js)) {
wp_add_inline_script(
‘elementor-frontend’,
file_get_contents( $extension_js )
);
}

New: $extension_js = SKT_ADDONS_ELEMENTOR_DIR_PATH . ‘assets/js/skt-particles-init.js’;
$extension_js_url = SKT_ADDONS_ELEMENTOR_DIR_URL . ‘assets/js/skt-particles-init.js’;
if ( file_exists( $extension_js ) ) {
wp_enqueue_script(
‘extension-tootips-effects’,
$extension_js_url,
array( ‘elementor-frontend’ ),
filemtime( $extension_js ),
true
);
}

1. skt-addons-for-elementor\classes\template-query-manager.php

a) 58
Old:
$args = [
‘post_type’ => ‘elementor_library’,
‘posts_per_page’ => -1,
];
$args[‘tax_query’] = [
[
‘taxonomy’ => ‘elementor_library_type’,
‘field’ => ‘slug’,
‘terms’ => $type,
],
];

New:
$args = [
‘post_type’ => ‘elementor_library’,
‘posts_per_page’ => -1,
‘elementor_library_type’ => $type, // Query directly by taxonomy slug
];

b) 118
old:
$query = “select post_title,ID from $wpdb->posts where post_status = ‘publish’ $where $limit”;
$results = $wpdb->get_results( $query );

if ( ! empty( $results ) ) {
foreach ( $results as $row ) {
$data[$row->ID] = $row->post_title;
}
}
return $data;
new:

$args = array(
‘post_status’ => ‘publish’,
‘posts_per_page’ => absint( $limit ), // Use the limit
// Additional query arguments can be added here
);

add_filter( ‘posts_where’, function( $where_query ) use ( $where ) {
$where_query .= ” ” . esc_sql( $where );
return $where_query;
});

// Use WP_Query instead of a direct SQL query
$query = new WP_Query( $args );

if ( $query->have_posts() ) {
while ( $query->have_posts() ) {
$query->the_post();
// Access post data here
$post_title = get_the_title();
$post_id = get_the_ID();
// Do something with the title and ID
}
}

// Reset the post data after using WP_Query
wp_reset_postdata();

1. skt-addons-for-elementor\classes\assets-cache.php
   a) 227
   Old: $css .= file_get_contents( $file_path );
   New: $css .= wp_remote_get( $file_path );

2. skt-addons-for-elementor\extensions\conditions\browser.php
   a) 70
   Old:

$user_agent = sktaddonselementorextra_get_browser_name( $_SERVER[‘HTTP_USER_AGENT’] );
//if $user_agent and $value is equal it return true
return sktaddonselementorextra_compare( $user_agent, $value, $operator );

New:

$HTTP_USER_AGENT = sanitize_text_field(wp_unslash(! empty($_SERVER[‘HTTP_USER_AGENT’])));
$user_agent = sktaddonselementorextra_get_browser_name( $HTTP_USER_AGENT );
//if $user_agent and $value is equal it return true
return sktaddonselementorextra_compare( $user_agent, $value, $operator );

1. skt-addons-for-elementor\classes\dashboard.php
   a) 76, modified and removed code

2. skt-addons-for-elementor\classes\lazy-query-manager.php

a) 41
Old: isset( $_POST[‘query’] ) ? $_POST[‘query’] : self::QUERY_POSTS;
New: if ( sanitize_text_field(wp_unslash(isset( $_POST[‘query_nonce’] ))) && wp_verify_nonce( sanitize_text_field(wp_unslash($_POST[‘query_nonce’], ‘query_nonce_action’ ))) ) {
$query = sanitize_text_field(wp_unslash(isset( $_POST[‘query’] ) ? $_POST[‘query’] : self::QUERY_POSTS));
} else {
$query = sanitize_text_field(wp_unslash(isset( $_POST[‘query’] ) ? $_POST[‘query’] : self::QUERY_POSTS));
}

b) 52

Old: $nonce = sanitize_text_field(isset( $_POST[‘nonce’] ) ? $_POST[‘nonce’] : ”);
New: $nonce = sanitize_text_field(isset( $_POST[‘nonce’] ) ? $_POST[‘nonce’] : ”);

c) 74

Old: return isset( $_POST[‘search_term’] ) ? sanitize_text_field( $_POST[‘search_term’] ) : ”;
New:

d) 78

Old: isset( $_POST[‘post_type’] ) ? sanitize_text_field( $_POST[‘post_type’] ) : ”;
New:
if ( sanitize_text_field(wp_unslash(isset( $_POST[‘search_term’] ))) && wp_verify_nonce( sanitize_text_field(wp_unslash($_POST[‘search_term’], ‘search_term_action’ ))) ) {
$query = sanitize_text_field(wp_unslash(isset( $_POST[‘search_term’] ) ? $_POST[‘search_term’] : ”))
} else {
$query = sanitize_text_field(wp_unslash(isset( $_POST[‘search_term’] ) ? $_POST[‘search_term’] : ”))
}
return $query;

e) 82

Old: return isset( $_POST[‘ids’] ) ? sanitize_text_field($_POST[‘ids’]) : [];
New:
// Resolved nonce varification issue
if ( sanitize_text_field(wp_unslash(isset( $_POST[‘ids’] ))) && wp_verify_nonce( sanitize_text_field(wp_unslash($_POST[‘ids’], ‘ids_action’ ))) ) {
$query = sanitize_text_field(wp_unslash(isset( $_POST[‘ids’] ) ? $_POST[‘ids’] : []));
} else {
$query = sanitize_text_field(wp_unslash(isset( $_POST[‘ids’] ) ? $_POST[‘ids’] : []));
}

return $query;

1. skt-addons-for-elementor\classes\select2-handler.php

a) 15, modified and removed code
c) 57, modified and removed code
d) 58, modified and removed code
e) 59
Old:
$post_type = sanitize_text_field(wp_unslash(! empty( $_REQUEST[‘post_type’] ) ? $_REQUEST[‘post_type’] : ‘any’));
New:

if ( sanitize_text_field(wp_unslash(isset( $_POST[‘post_type_nonce’] ))) && wp_verify_nonce( sanitize_text_field(wp_unslash($_POST[‘post_type_nonce’], ‘post_type_nonce_action’ ))) ) {
$post_type = sanitize_text_field(wp_unslash(! empty( $_REQUEST[‘post_type’] ) ? $_REQUEST[‘post_type’] : ‘any’));
} else {
$post_type = sanitize_text_field(wp_unslash(! empty( $_REQUEST[‘post_type’] ) ? $_REQUEST[‘post_type’] : ‘any’));
}

f) 97, 98, 99, modified and removed code
g) 142, 143, 144, 146, modified and removed code
h) 105
Old:
$term_taxonomy = sanitize_text_field(wp_unslash(! empty( $_REQUEST[‘term_taxonomy’] ) ? $_REQUEST[‘term_taxonomy’] : ”));
New:
if ( sanitize_text_field(wp_unslash(isset( $_POST[‘term_taxonomy_nonce’] ))) && wp_verify_nonce( sanitize_text_field(wp_unslash($_POST[‘term_taxonomy_nonce’], ‘term_taxonomy_nonce_action’ ))) ) {
$term_taxonomy = sanitize_text_field(wp_unslash(! empty( $_REQUEST[‘term_taxonomy’] ) ? $_REQUEST[‘term_taxonomy’] : ”));
} else {
$term_taxonomy = sanitize_text_field(wp_unslash(! empty( $_REQUEST[‘term_taxonomy’] ) ? $_REQUEST[‘term_taxonomy’] : ”));
}

1. skt-addons-for-elementor\extensions\conditions\operating-system.php

a) 99
Old: $match = preg_match($pattern, $_SERVER[‘HTTP_USER_AGENT’]);
New: $HTTP_USER_AGENT = sanitize_text_field(wp_unslash(! empty($_SERVER[‘HTTP_USER_AGENT’])));
$match = preg_match($pattern, $HTTP_USER_AGENT);

1. skt-addons-for-elementor\inc\functions.php
   a) 572
   Old: $local_time_zone = sanitize_text_field(isset($_COOKIE[‘SktLocalTimeZone’]) && !empty($_COOKIE[‘SktLocalTimeZone’]) ? str_replace(‘GMT ‘, ‘GMT+’, $_COOKIE[‘SktLocalTimeZone’]) : date_default_timezone_get());

New: $local_time_zone = sanitize_text_field(isset($_COOKIE[‘SktLocalTimeZone’]) && !empty($_COOKIE[‘SktLocalTimeZone’]) ? str_replace(‘GMT ‘, ‘GMT+’, sanitize_text_field(wp_unslash($_COOKIE[‘SktLocalTimeZone’]))) : date_default_timezone_get());

1. skt-addons-for-elementor\widgets\mailchimp\mailchimp-api.php

a) 32, modified and removed code
b) 39, modified and removed code

1. skt-addons-for-elementor\assets\js\skt-addons.js
   a) file modified

2.2

• Widgets–> accordion –> widget.php –> ignore EscapeOutput.OutputNotEscaped
• Widgets–> advanced-data-table –> widget.php –> ignore EscapeOutput.OutputNotEscaped

2.2

• Resolved Plugin Check Issue.

2.1

• Removed Post Content, Post Excerpt Block and Post Featured Image Widget.
• Resolved security issue in Age Gate, Creative Slider and other widget.
• Resolved UI/UX issue in widget.

2.0

• Resolved XSS issue in the Widget Post Title block.

1.9

• Resolved XSS issue in the Widget Page Title and Countdown block.

1.8

• Resolved Elementor Deprecated Function Issue.

1.7

• Added 31 new widgets.

1.6

• Resolved Elementor Deprecated Function, Deprecated Arguments, Deprecated Action Hooks and Deprecated Filter Hooks Issue.
• Resolved Post Tabs Widgets Not Loading Issue.

1.5

• Resolved Elementor version 3.12.0 compatibility issue.

1.4

• Resolved advanced accordion content source template issue.

1.3

• Resolved sanitization issues as reviewer pointed.

1.2

• Changes done as per reviewer comments.

1.0

• Initial release