v4.4.4

Author: pablo-sg-pacheco

includes/class-alg-wc-mppu-shortcodes.php

@@ -2,7 +2,7 @@
 /**
  * Maximum Products per User for WooCommerce - Shortcodes.
  *
- * @version 4.3.7
+ * @version 4.4.4
  * @since   2.5.0
  * @author  WPFactory
  */
@@ -134,7 +134,7 @@ function term_limit_shortcode( $atts, $content = '' ) {
 	/**
 	 * current_product_limit_shortcode.
 	 *
-	 * @version 4.3.7
+	 * @version 4.4.4
 	 * @since   2.5.1
 	 * @todo    [later] different (customizable) message depending on `$remaining`
 	 */
@@ -220,9 +220,9 @@ function current_product_limit_shortcode( $atts, $content = '' ) {
 		}
 		// Return message.
 		if ( empty( $output_msg ) && $atts['empty_msg_removes_template'] ) {
-			return $output_msg;
+			return wp_kses_post( $output_msg );
 		} else {
-			return str_replace( '{msg_template}', $output_msg, $atts['output_template'] );
+			return str_replace( '{msg_template}', wp_kses_post( $output_msg ), wp_kses_post( $atts['output_template'] ) );
 		}
 	}
 

includes/class-alg-wc-mppu.php

@@ -24,7 +24,7 @@ class Alg_WC_MPPU {
 		 * @since 1.0.0
 		 * @var   string
 		 */
-		public $version = '4.4.3';
+		public $version = '4.4.4';
 
 		/**
 		 * @since 1.0.0

langs/maximum-products-per-user-for-woocommerce.pot

@@ -2,14 +2,14 @@
 # This file is distributed under the GNU General Public License v3.0.
 msgid ""
 msgstr ""
-"Project-Id-Version: maximum-products-per-user-for-woocommerce 4.4.3\n"
+"Project-Id-Version: maximum-products-per-user-for-woocommerce 4.4.4\n"
 "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/maximum-products-per-user-for-woocommerce\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"POT-Creation-Date: 2026-01-06T21:02:57+01:00\n"
+"POT-Creation-Date: 2026-01-06T22:36:50+01:00\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "X-Generator: WP-CLI 2.7.1\n"
 "X-Domain: maximum-products-per-user-for-woocommerce\n"

maximum-products-per-user-for-woocommerce.php

@@ -3,7 +3,7 @@
 Plugin Name: Maximum Products per User for WooCommerce
 Plugin URI: https://wpfactory.com/item/maximum-products-per-user-for-woocommerce/
 Description: Limit number of items your WooCommerce customers can buy (lifetime or in selected date range).
-Version: 4.4.3
+Version: 4.4.4
 Author: WPFactory
 Author URI: https://wpfactory.com
 Text Domain: maximum-products-per-user-for-woocommerce

readme.txt

@@ -3,7 +3,7 @@ Contributors: wpcodefactory, omardabbas, karzin, anbinder, kousikmukherjeeli
 Tags: woocommerce, product quantity, limits, quantity restriction, order restriction
 Requires at least: 4.4
 Tested up to: 6.9
-Stable tag: 4.4.3
+Stable tag: 4.4.4
 License: GNU General Public License v3.0
 License URI: http://www.gnu.org/licenses/gpl-3.0.html
 
@@ -274,6 +274,9 @@ Once activated, access the plugin's settings by navigating to "WooCommerce > Set
 
 == Changelog ==
 
+= 4.4.4 - 06/01/2026 =
+* Fix - Fixed vulnerability.
+
 = 4.4.3 - 06/01/2026 =
 * Dev - Updated Cross-Selling library from 1.0.6 to version 1.0.9.
 * Updated readme.