4.0.12

Fixed

• Fixed the Akismet blog value being sent as the relative request URL, instead of the site URL.

4.0.11

Fixed

• Fixed deleting a log that could not be found showing a success message, or throwing an error when no log ID was provided.
• Fixed a success message showing when deleting a log or clearing all logs failed.

4.0.10

Changed

• Updated Craft API usage to avoid deprecated calls.

4.0.9

Fixed

• Fixed a low-severity sensitive data logging vulnerability.
• Fixed a low-severity business logic bypass vulnerability.

4.0.8

Changed

• Updated the required version of verbb/base to 3.0.19.

Fixed

• Improved Akismet request reliability when the service is slow or unavailable.
• Fixed a low-severity IP spoofing vulnerability.
• Fixed a low-severity authorization vulnerability.

4.0.7

Fixed

• Fixed a moderate-severity external service transport vulnerability.

4.0.6

Changed

• Resolve spam-check field tokens from submitted data without evaluating Twig.

3.0.4

Changed

• Require verbb/base 2.0.15 or later within 2.x.
• Dynamic form mappings now support {fieldHandle} tokens from scalar form fields. Twig expressions and non-form properties are no longer supported in these mappings.

Fixed

• Fix a template injection vulnerability.

4.0.5

Changed

• Updated documentation for clearer, more consistent guidance.
• Clarified optional PHP configuration with focused examples and linkable setting details.

4.0.4

Added

• Add support for checking Craft public user registrations for spam.