SERVIT Software Solutions
Software Engineer at Christof Servit
@cservit Austria joined Jun 2016
Badges
CODE
1 badge
Plugin Developer
PRACTICE
1 badge
Support Contributor
'26
POLYGLOTS
1 badge
Translation Contributor
'25
Current Job
Software Engineer
Present
Christof Servit
Recent impact
Score weights high-impact work (commits, releases, approved translations, props) at 3x routine activity.
Last 30 days
10contributions
high7
medium3
score24
Last 90 days
24contributions
high21
medium3
score66
Last 12 months
48contributions
high41
medium7
score130
Contributions
Type
October 2026
Oct 14
Wed · 08:41
Plugins
high
Oct 13
Tue · 12:04
Forums
med
Posted a reply to Bildproxy: Bild-URLs mit Dateiendung und kompatible Behandlung alter URLs, on the site WordPress.org Forums:
Danke für die gründliche Vorlage. Ich habe sie aufgeteilt, weil darin zwei sehr unterschiedliche Dinge…
Danke für die gründliche Vorlage. Ich habe sie aufgeteilt, weil darin zwei sehr unterschiedliche Dinge…
Oct 13
Tue · 12:01
Forums
med
Posted a reply to Shop-Liste braucht ewig bis zum vollständigen Laden, on the site WordPress.org Forums:
Danke, beide Ursachen bestätigt und behoben. Statistik-Spalte: Die Zahlen für…
Danke, beide Ursachen bestätigt und behoben. Statistik-Spalte: Die Zahlen für…
Oct 13
Tue · 11:59
Forums
med
Posted a reply to Templates crashen trotz aktiviertem PHP-Opt-in, on the site WordPress.org Forums:
Danke für die präzise Fehlersuche — die Diagnose stimmt, und die Ursache ist genau die…
Danke für die präzise Fehlersuche — die Diagnose stimmt, und die Ursache ist genau die…
Oct 13
Tue · 11:54
Plugins
high
Committed [3743803] to Plugins SVN:
Copied affiliate-toolkit-starter/trunk to affiliate-toolkit-starter/tags/3.9.2.
Copied affiliate-toolkit-starter/trunk to affiliate-toolkit-starter/tags/3.9.2.
Oct 13
Tue · 11:51
Plugins
high
Committed [3743795] to Plugins SVN:
SECURITY: Fixed an information disclosure in the AJAX render endpoint. The endpoint takes the product and list ids to render straight from the request and is reachable without a login whenever AJAX loading or the AJAX handler is enabled, but it only checked the post status of products that came from a list - a product id passed directly was loaded and rendered no matter what. A visitor could therefore read the title, prices, offers and affiliate urls of a product the site owner had not published (private, pending or scheduled), and the same held for the contents of a private list. Product and list ids from the request are now resolved through the same guard that was introduced for templates: an id only resolves when it belongs to the expected post type and its status is publish or draft, which is exactly what the shortcode output (atkp_output::get_product_output) has always enforced - the AJAX path only lazy-loads that same output. The same guard was added to the "prefer local product info" branch of a list, where a product is resolved by asin through the product table: that table carries no post status, so an unpublished product could be rendered through a published list on the normal output path as well. The shop data of the list is used in that case. Reported by levanduy181.
SECURITY: Fixed an information disclosure in the AJAX render endpoint. The endpoint takes the product and list ids to render straight from the request and is reachable without a login whenever AJAX loading or the AJAX handler is enabled, but it only checked the post status of products that came from a list - a product id passed directly was loaded and rendered no matter what. A visitor could therefore read the title, prices, offers and affiliate urls of a product the site owner had not published (private, pending or scheduled), and the same held for the contents of a private list. Product and list ids from the request are now resolved through the same guard that was introduced for templates: an id only resolves when it belongs to the expected post type and its status is publish or draft, which is exactly what the shortcode output (atkp_output::get_product_output) has always enforced - the AJAX path only lazy-loads that same output. The same guard was added to the "prefer local product info" branch of a list, where a product is resolved by asin through the product table: that table carries no post status, so an unpublished product could be rendered through a published list on the normal output path as well. The shop data of the list is used in that case. Reported by levanduy181.
Oct 13
Tue · 11:08
Plugins
high
Committed [3743683] to Plugins SVN:
SECURITY: Fixed an information disclosure in the AJAX render endpoint. The endpoint takes the product and list ids to render straight from the request and is reachable without a login whenever AJAX loading or the AJAX handler is enabled, but it only checked the post status of products that came from a list - a product id passed directly was loaded and rendered no matter what. A visitor could therefore read the title, prices, offers and affiliate urls of a product the site owner had not published (private, pending or scheduled), and the same held for the contents of a private list. Product and list ids from the request are now resolved through the same guard that was introduced for templates: an id only resolves when it belongs to the expected post type and its status is publish or draft, which is exactly what the shortcode output (atkp_output::get_product_output) has always enforced - the AJAX path only lazy-loads that same output. The same guard was added to the "prefer local product info" branch of a list, where a product is resolved by asin through the product table: that table carries no post status, so an unpublished product could be rendered through a published list on the normal output path as well. The shop data of the list is used in that case. Reported by levanduy181.
SECURITY: Fixed an information disclosure in the AJAX render endpoint. The endpoint takes the product and list ids to render straight from the request and is reachable without a login whenever AJAX loading or the AJAX handler is enabled, but it only checked the post status of products that came from a list - a product id passed directly was loaded and rendered no matter what. A visitor could therefore read the title, prices, offers and affiliate urls of a product the site owner had not published (private, pending or scheduled), and the same held for the contents of a private list. Product and list ids from the request are now resolved through the same guard that was introduced for templates: an id only resolves when it belongs to the expected post type and its status is publish or draft, which is exactly what the shortcode output (atkp_output::get_product_output) has always enforced - the AJAX path only lazy-loads that same output. The same guard was added to the "prefer local product info" branch of a list, where a product is resolved by asin through the product table: that table carries no post status, so an unpublished product could be rendered through a published list on the normal output path as well. The shop data of the list is used in that case. Reported by levanduy181.
Oct 13
Tue · 06:12
Plugins
high
Oct 06
Tue · 07:37
Plugins
high
Committed [3730227] to Plugins SVN:
Copied affiliate-toolkit-starter/trunk to affiliate-toolkit-starter/tags/3.9.1.
Copied affiliate-toolkit-starter/trunk to affiliate-toolkit-starter/tags/3.9.1.
Oct 06
Tue · 07:35
Plugins
high
Committed [3730222] to Plugins SVN:
IMPROVED: An error page that a CDN returns with status 200 instead of an error code is no longer stored as a product image. The response has to be an image by content type or by content, otherwise the download counts as failed.
IMPROVED: An error page that a CDN returns with status 200 instead of an error code is no longer stored as a product image. The response has to be an image by content type or by content, otherwise the download counts as failed.
No contributions in this category yet.
Developer
3 plugins-
affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display
2,000+ active installs -
Reputify.io – Review Widgets, Score and Review Requests
Less than 10 active installs -
SERVIT Analytics
Less than 10 active installs
Plugins
1 favoriteTranslations
3 locales
de_DE
Deutsch (German)
Translation Contributor
Contributed translations to 3 projects.
de_AT
Deutsch (Österreich) (German)
Translation Contributor
Contributed translations to 3 projects.
de_CH
Deutsch (Schweiz) (German)
Translation Contributor
Contributed translations to 1 project.