Merge branch 'release/G23.kale.1'

package.json

@@ -1,6 +1,6 @@
 {
   "name": "tribe-common",
-  "version": "5.1.15",
+  "version": "5.1.15.1",
   "repository": "[email protected]:the-events-calendar/tribe-common.git",
   "_resourcepath": "src/resources",
   "_domainPath": "lang",

readme.txt

@@ -1,8 +1,12 @@
 == Changelog ==
 
+= [5.1.15.1] 2023-11-20 =
+
+* Security - Ensure all password protected posts have their settings respected. [TCMN-167]
+
 = [5.1.15] 2023-11-16 =
 
-* Fix - Ensure the JavaScript module assets are properly getting the `type="module"` added on all scenarios [GTRIA-1112]
+* Fix - Ensure the JavaScript module assets are properly getting the `type="module"` added on all scenarios [ET-1921]
 * Language - 0 new strings added, 11 updated, 1 fuzzied, and 2 obsoleted
 
 = [5.1.14] 2023-11-13 =

src/Tribe/JSON_LD/Abstract.php

@@ -89,6 +89,16 @@ public function get_data( $post = null, $args = [] ) {
 			return [];
 		}
 
+		// Double check that the user can read this post.
+		if ( ! current_user_can( 'read', $post->ID ) ) {
+			return [];
+		}
+
+		// Ensure this post is not password protected.
+		if ( post_password_required( $post ) ) {
+			return [];
+		}
+
 		$data = (object) [];
 
 		// We may need to prevent the context to be triggered

src/Tribe/Main.php

@@ -23,7 +23,7 @@ class Tribe__Main {
 	const OPTIONNAME          = 'tribe_events_calendar_options';
 	const OPTIONNAMENETWORK   = 'tribe_events_calendar_network_options';
 
-	const VERSION             = '5.1.15';
+	const VERSION             = '5.1.15.1';
 
 	const FEED_URL            = 'https://theeventscalendar.com/feed/';
 

tribe-common.php

@@ -2,7 +2,7 @@
 /*
 Plugin Name: Tribe Common
 Description: An event settings framework for managing shared options
-Version: 5.1.14
+Version: 5.1.15.1
 Author: The Events Calendar
 Author URI: http://evnt.is/1x
 Text Domain: tribe-common