Skip to content

Release v1.6.6

Choose a tag to compare

View all tags
@github-actions github-actions released this 09 Jun 20:52
· 184 commits to main since this release
v1.6.6
b68b815
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security & Best Practices Improvements

  • CRITICAL: Added missing secure download and delete handlers for export files
  • Text Domain Consistency: Fixed all text domain inconsistencies to use 'simple-wp-site-exporter'
  • Enhanced Shell Security: Improved WP-CLI path validation with comprehensive security checks
  • Path Traversal Protection: Enhanced file path validation with better edge case handling
  • Global Variable Handling: Improved WordPress filesystem API initialization and error handling
  • Rate Limiting: Added download rate limiting (1 download per minute per user)
  • Scheduled Deletion Security: Added validation to scheduled file deletion to prevent unauthorized deletions
  • Information Disclosure: Sanitized error messages to prevent server path exposure
  • Code Quality: Removed duplicate function definitions and improved error handling

New Security Features

  • Enhanced WP-CLI binary validation with version checking
  • Proper filesystem API error handling throughout
  • User capability verification for all download/delete operations
  • Secure file serving with appropriate headers for large files
  • Request source validation and nonce verification

Installation

  1. Download the zip file
  2. Upload to your WordPress site through the Plugins > Add New > Upload menu
  3. Activate the plugin

Full Documentation

Assets 3
Loading