1.2.0

1.2.0

Security

• Fix SQL injection vulnerability in get_items() using $wpdb->prepare().
• Add current_user_can() check and sanitize POST input in update().
• Escape all output in admin views to prevent XSS.

Fixed

• Sync internal version constant with plugin header.
• Replace always-true isset($_POST) with !empty($_POST).
• Remove deprecated &$this syntax.
• Remove dead AJAX hook registration.

Cleanup

• Implement post_meta cleanup on plugin uninstall.
• Remove unused options property and settings() method.