Version 4.0.4

Manually select related posts and pages for your WordPress content, with full support for custom post types.

Requirements
WordPress 6.0+
PHP 8.0+

• Security: fixed CSRF vulnerability on options page (missing nonce verification; hardcoded fake nonce replaced with wp_nonce_field)
• Security: whitelisted header_element (h1–h6) and order option values to prevent injection
• Security: added esc_html() on all frontend output; esc_attr() on admin form fields
• Security: added current_user_can('manage_options') check in options handler
• Security: added nonce verification on AJAX search endpoint
• Modernized: replaced deprecated $wpdb->escape() with esc_sql()
• Modernized: asset loading converted to wp_enqueue_script()/wp_enqueue_style() with admin_enqueue_scripts hook; AJAX URL passed via wp_localize_script()
• Modernized: AJAX endpoint converted from admin_init hack to proper wp_ajax_mrp_search hook
• Modernized: replaced WP_PLUGIN_URL and get_option('siteurl') with plugins_url()
• Modernized: fixed register_widget() class name casing
• Modernized: all raw SQL replaced with $wpdb->prepare() throughout
• Modernized: replaced extract() in widget with direct array access
• Modernized: updated load_plugin_textdomain() — removed deprecated second argument
• Modernized: JS escape() replaced with encodeURIComponent()
• Cleaned .po language files: removed stale absolute machine paths, added Language: headers, fixed language labels
• Removed donate widget and dead external links