Version 4.4.0
Version 4.4.0 is a BuddyPress maintenance and security release. It was released on July 23, 2019. 2 bugs were fixed and 2 security issues were addressed.
For version 4.4.0, the database version (bp_db_version in wp_options) was 11105, and the Trac revision was 12412.
Fixes
- Activity: Fix bug that caused the
avatarclass to be removed from the secondary avatar markup of activity action strings. The fix also improves action strings escaping (#8090). - Messages: Make sure Data Export for this component only includes the messages sent by the requesting user. (#8080)
- Security: Prevent a user who is not a friend with another user to send him a group invite even though this “another user” has selected to restrict group invites from friends only (This is specific to the BP Nouveau template).
- Security: Prevent XSS via
accesskeyattribute in group names.
The detailed list of changes for this release are available at BuddyPress Trac. See milestone 4.4.0.
