Store Locator Plus v 4.7.4

Over the past year and a half the developer and author of Store Locator Plus has been updating and revamping the software to be more efficient, robust, responsive and faster by using less overhead and cleaning up any old JavaScript commands that were left in the core base plug-in for the sole purpose of supporting the Legacy add-ons.  It is now time to move into the next phase with better graphics in the View for Plugin styles which adds gallery styles for one – step styling  and more functionality.   (YouTube video about Gallery styles, released in 4.7.3 )

 

Preview gallery Plugin style with one click styling

As a result of these changes the Enhanced Search Legacy add-on will no longer be supported and will not work with SLP  v.  4.7.4

Additionally,

  • Pro Pack MUST be updated to 4.6.5   
  • Experience add-on Must be updated to v 4.7.4

With the upgrade of SLP, the Pro Pack legacy add-on will be deactivated.  Follow the How to install / update add-on  instructions.  Download add-on from your account. Delete the old version from the WP Plugin admin panel. Install and activate the newest version. 

Store Locator Plus®

Version
5.12.3
Updated
2021-08-3
Directory
store-locator-le
WP Versions
Tested 5.8 , Min 5.3
Description
Add a location finder or directory to your site in minutes. Premium add-on library extends functionality with cluster markers, more map controls, categories and more.
Change Log

5.12


  • PATCHED url control filter for Premier add on

5.11


  • UPDATED JavaScript payload on initial map load/search is far smaller, only passing key option parameters versus most of the environment.
  • PATCHED DataTables changed the CSS images path, updated to include missing DataTables images.
  • PATCHED security concern on sanitizing various $_POST and $_REQUEST inputs for admin users.
  • PATCHED JavaScript order of precedence for add on packs.

5.10


  • UPDATED JavaScript pub/sub refinements for proper order of precedence when loading add on JavaScript files.
  • PATCHED replace all <?= php shorthand with <?php echo per WordPress plugin team requirements.

5.9


  • PATCHED security block slp_change_option privilege escalation via AJAX reported in "Proof of Concept for Privilege Escalation"
  • PATCHED XSS allowing external elevated priv users to insert script into options reported in "Proof of Concept for Stored XSS"
  • PATCHED security block delete locations AJAX attack discovered during self review of code

5.8


  • UPDATED foundation SCSS libraries
  • UPDATED jQuery Datatables libraries
  • UPDATED SLP Core JavaScript cleanup and ES6 updates

5.7


  • PATCHED security update to block certain AJAX requests from updating user meta keys that may not be part of the Store Locator Plus® app.
  • PATCHED security update to user all SLP change_option requests originate from a valid admin session via slp_ajax nonce
  • PATCHED fix slp location manager JavaScript not initializing if directory name of plugin is changed from store-locator-le to something else.

Experience Add-on for SLP v 4.7.4

slp-experience
Version
5.11
Updated
2021-06-10
Directory
slp-experience