This release focuses on security improvements, WordPress Coding Standards compliance, and overall code quality.
Special thanks to @miyanialkesh7 for their valuable contribution to this release.
Key Changes:
- Security: Encoded GitHub API path segments (username, repository, file paths) to prevent malformed requests from special characters
- Security: Replaced raw inline script/style output with wp_add_inline_style() and wp_add_inline_script()
- Security: Replaced json_encode() with wp_json_encode()
- Security: Escaped remaining unescaped admin page output
- Fix: Guarded get_current_screen() against null return value
- Compatibility: Confirmed compatibility with WordPress 7.0
- Added missing plugin headers: Requires at least, Requires PHP
- Updated readme.txt with contributor list, tags, and changelog
- Full PHPCS/WordPress Coding Standards pass: 3503 errors and 236 warnings resolved to zero
- Added PHPDoc blocks across all classes and methods
- Renamed includes/class-.php to class-ug-.php per WPCS file-naming convention
- Added ABSPATH and function_exists() guards
Upgrade recommended for all users.
Contributors
miyanialkesh7