Remove deprecated shortcode syntax

Author: Benjamin Pick

deprecated.php

@@ -20,32 +20,4 @@ function geoip_detect_get_abs_db_filename()
 	if (is_object($reader) && method_exists($source, 'maxmindGetFilename'))
 		return $source->maxmindGetFilename();
 	return '';
-}
-
-
-
-/**
- * @deprecated shortcode
- */
-function geoip_detect_shortcode($attr)
-{
-	$userInfo = geoip_detect_get_info_from_current_ip();
-
-	$defaultValue = isset($attr['default']) ? $attr['default'] : '';
-
-	if (!is_object($userInfo))
-		return $defaultValue . '<!-- Geolocation IP Detection: No info found for this IP. -->';
-
-	$propertyName = $attr['property'];
-
-
-	if (property_exists($userInfo, $propertyName)) {
-		if ($userInfo->$propertyName)
-			return $userInfo->$propertyName;
-		else
-			return $defaultValue;
-	}
-
-	return $defaultValue . '<!-- Geolocation IP Detection: Invalid property name. -->';
-}
-add_shortcode('geoip_detect', 'geoip_detect_shortcode');
+}

readme.txt

@@ -136,6 +136,7 @@ If you are using AJAX mode, please read the changelog.
 
 = 5.5.1 =
 * FIX: Compatibility with Wordpress 6.7 (Textdomain loading)
+* FIX [!]: Remove deprecated shortcode [geoip_detect] (Security - CVE-2025-57993)
 
 = 5.5.0 =
 * FIX [!]: In the datasource "hostip.info", the region code (i.e. CA) is now correctly moved to the property `mostSpecificSubdivision` (previously, it was part of the property `city`)