Fix: PHP Deprecated: URE_Widgets_Admin_View::get_html(): Implicitly marking parameter $user as nullable is deprecated, the explicit nullable type must be used instead in /wp-content/plugins/user-role-editor-pro/pro/includes/classes/widgets-admin-view.php on line 133
Fix: PHP Notice: Function load_textdomain_just_in_time was called incorrectly. Translation loading for the user-role-editor domain was triggered too early. This is usually an indicator for some code in the plugin or theme running too early. Translations should be loaded at the init action or later. pro/includes/classes/addons-manager.php called esc_html_() from constructor. Moved to the 'init' action.
Core version was updated to 4.64.5
Update: Minor changes were applied to the CSS/JS loading code to minimize "Plugin Check" tool warnings.
Plugin headers were extended at role-editor.php and readme.txt files according to wordpress.org recommendations.
User Role Editor Pro Changelog Version 4.64.4 15.12.2024
Core version: 4.64.4
Core version was updated to 4.64.4
Security Fix: Users - "Add Role", "Revoke Role" buttons: Cross-Site request forgery to privilege escalation was possible due to missed nonce validation. This issue was discovered and responsibly reported by vgo0.