Skip to content

Release v1.5.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 13 May 13:59
· 8 commits to main since this release
v1.5.2
b573677

What's new in v1.5.2

  • Upgrade PHPCS ruleset from WordPress to WordPress-Extra for stricter escape, nonce, and SQL auditing
  • Add composer audit step to CI pipeline to detect known CVEs in vendored dependencies
  • Pin GitHub Actions to full commit SHAs to prevent supply-chain tag-hijacking attacks
  • Replace phpcs:ignore escape suppression in Elementor widget render() with wp_kses() and an explicit HTML allowlist

Installation: Download the zip below and install via WordPress Admin → Plugins → Add New → Upload Plugin.

If you use Git Updater, this release will be detected automatically.

Assets 3
Loading