Skip to content

Version Update v4.7.10#2323

Merged
thelovekesh merged 33 commits into
masterfrom
develop
Apr 7, 2026
Merged

Version Update v4.7.10#2323
thelovekesh merged 33 commits into
masterfrom
develop

Conversation

@krishana7911
Copy link
Copy Markdown
Contributor

@krishana7911 krishana7911 commented Apr 7, 2026

Version 4.7.10 – Security Issue Fixes and Dependency Updates

Issue resolved: https://github.com/rtCamp/rtmedia-io/issues/1900

Summary

This release includes:

  1. Security and Permission Fixes

    • Fixed media deletion behavior: media uploaded via the members media endpoint now respects proper authorization and ownership.
  2. Dependency Updates

    • Removed wp-e2e-playwright folder to resolve Dependabot-related issues.
    • Updated internal package dependencies; no feature changes were introduced.

Testing

  • Verified media deletion with proper authorization via AJAX requests.
  • Confirmed unrelated media entries remain unaffected.
  • Dependabot-related issues addressed without impacting plugin functionality.

the-hercules and others added 30 commits February 20, 2026 16:59
Update dependencies for security and compatibility
Update basic-ftp version in package.json
…e-dependency

chore: update immutable package to ^5.1.5
Remove wp-e2e-playwright folder to fix Dependabot errors
Bumps  and [picomatch](https://github.com/micromatch/picomatch). These dependencies needed to be updated together.

Updates `picomatch` from 2.3.1 to 2.3.2
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/picomatch@2.3.1...2.3.2)

Updates `picomatch` from 4.0.3 to 4.0.4
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](micromatch/picomatch@2.3.1...2.3.2)

---
updated-dependencies:
- dependency-name: picomatch
  dependency-version: 2.3.2
  dependency-type: indirect
- dependency-name: picomatch
  dependency-version: 4.0.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Fix: Add authorization checks for media deletion
@rtBot
Copy link
Copy Markdown
Contributor

rtBot commented Apr 7, 2026

Unable to PHPCS or SVG scan one or more files due to error running PHPCS/SVG scanner:

  • app/main/controllers/template/rtmedia-ajax-actions.php
  • index.php

The error may be temporary. If the error persists, please contact a human (commit-ID: 42fbbe0).

@krishana7911 krishana7911 self-assigned this Apr 7, 2026
@krishana7911 krishana7911 requested a review from thelovekesh April 7, 2026 08:33
@thelovekesh thelovekesh merged commit cbe67bb into master Apr 7, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

7 participants