1.2 -2026-10-27

• SECURITY: Webhook requests are now only processed if they come from CCBill's IP addresses or can be confirmed through DataLink. If your site is behind a proxy or CDN, make sure your DataLink credentials are set. #68 (@dparker1005)
• SECURITY: Moved the webhook debug log to the Paid Memberships Pro restricted uploads directory so it can't be accessed directly. Customer details in the log are now masked and passwords are never logged. #69 (@andrewlimaza)
• SECURITY: Resolved Plugin Check security findings, including unslashing gateway settings before saving them and blocking direct access to plugin files. #67 (@dparker1005)
• ENHANCEMENT: Added the pmpro_ccbill_webhook_logfile filter to change the webhook log location and the pmpro_ccbill_webhook_log_redacted_keys filter to change which webhook fields are masked in the log. #69 (@andrewlimaza)