Polar SMTP Mailer v1.0.1 - Security & Bug Fixes
🔒 Security & Bug Fixes Release
This release addresses 14 bugs including critical security improvements.
🔴 Security Fixes
- Fixed encryption vulnerability - Now uses random IV per encryption (AES-256-CBC best practice)
- Fixed SQL injection risk - Proper prepared statements in table checks
- Added capability checks - Prevents unauthorized queue operations
🟡 Stability Fixes
- Fixed race condition - Proper database locking in queue processing
- Fixed TLS compatibility - Now uses TLS 1.2/1.3 (fixes connection issues with modern servers)
- Fixed infinite loop risk - Added iteration limits in SMTP response handling
- Fixed duplicate log entries - Queued emails no longer create duplicate logs
🟢 Other Improvements
- Fixed missing exit statements in AJAX handlers
- Fixed GDPR erase not clearing attachments field
- Fixed password placeholder edge case
- Fixed JSON export memory issue with large datasets
- Improved code documentation
📦 Upgrade Notes
- ✅ Backward compatible - Existing encrypted passwords continue to work
- ✅ No action required - Just update the plugin