توضیحات
The ultimate Elementor addon for cross-domain copying, magic copy buttons, and instant page duplication. Build websites faster with one-click design t …
تغییرات این نسخه
1.5.12 [20th October 2026]
Added: BdThemes deals notice on the Dashboard, Plugins screen and plugin dashboard; “Don’t Show Again” hides it in every BdThemes plugin
1.5.11 [18th September 2026]
Fixed: Second-order SQL injection in the post duplicator, where a contributor-level user could plant a custom field whose name contained a quote and then duplicate that post to execute arbitrary SQL (Thanks to Ananda Dhakal, Patchstack)
Fixed: Duplicating a post with no custom fields no longer runs a malformed INSERT
Fixed: Duplicating a post could end on a blank screen instead of the post list, where a redundant post type check skipped the redirect but not the exit that followed it
Updated: Duplicator redirect now uses wp_safe_redirect() and drops a redundant post type lookup
Updated: Security improved
1.5.10 [30th August 2026]
Fixed: Live Copy button returning “Sorry, invalid request!” for logged out visitors on sites with a full page cache, where the cached page carried a nonce older than its 24 hour lifetime
Updated: Magic copy requests from logged out visitors no longer carry a nonce requirement, since a logged out nonce is derived from user id 0 and can be minted by anyone; the existing post access check remains in force
1.5.9 [18th August 2026]
Removed: BdThemes news feed dashboard widget and all of its remote requests, transients, and styles
1.5.8 [13th August 2026]
Fixed: Broken access control in the post duplicator, where a user able to publish posts could duplic
Added: BdThemes deals notice on the Dashboard, Plugins screen and plugin dashboard; “Don’t Show Again” hides it in every BdThemes plugin
1.5.11 [18th September 2026]
Fixed: Second-order SQL injection in the post duplicator, where a contributor-level user could plant a custom field whose name contained a quote and then duplicate that post to execute arbitrary SQL (Thanks to Ananda Dhakal, Patchstack)
Fixed: Duplicating a post with no custom fields no longer runs a malformed INSERT
Fixed: Duplicating a post could end on a blank screen instead of the post list, where a redundant post type check skipped the redirect but not the exit that followed it
Updated: Duplicator redirect now uses wp_safe_redirect() and drops a redundant post type lookup
Updated: Security improved
1.5.10 [30th August 2026]
Fixed: Live Copy button returning “Sorry, invalid request!” for logged out visitors on sites with a full page cache, where the cached page carried a nonce older than its 24 hour lifetime
Updated: Magic copy requests from logged out visitors no longer carry a nonce requirement, since a logged out nonce is derived from user id 0 and can be minted by anyone; the existing post access check remains in force
1.5.9 [18th August 2026]
Removed: BdThemes news feed dashboard widget and all of its remote requests, transients, and styles
1.5.8 [13th August 2026]
Fixed: Broken access control in the post duplicator, where a user able to publish posts could duplic