Skip to content

v1.1.4

Latest
Latest

Choose a tag to compare

View all tags
@abnercalapiz abnercalapiz released this 13 Jun 12:40
· 2 commits to main since this release
v1.1.4
8671ddc
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's New in 1.1.4

  • Security: Hardened the dashboard plugin activate/deactivate AJAX handler against path traversal — the plugin_file parameter is now normalised with plugin_basename() and validated with validate_plugin() before any filesystem access.

Resolves the LOW finding from the 2026-06-04 security review (#5). Release gate: senior WP code-review audit ran clean (no Critical/High/Medium).

Assets 3
Loading