-
v1.5.1 Stable
released this
2026-06-06 05:22:48 +00:00 | 1 commits to main since this release1.5.1
Release date: 2026-06-06
Security
- CSV exports use RFC 4180 encoding — fields with commas, double-quotes, or line breaks are correctly quoted. Replaces
addslashes(). - GeoIP database path validated with
is_file()and!is_link()at read time to block symlink traversal. robotstxt_2fa_app_password_verification_windowfilter return validated as a positive integer; falls back to 900 for invalid values.
Fixed
- Export CSV button now only rendered to users with
manage_optionscapability.
Compatibility
- WordPress: 6.4 – 7.1
- PHP: 8.0 – 8.5
Tests
- PHP Coding Standards: PHP_CodeSniffer 3.13.5 / WPCS 3.3.0
- PHPStan: level 9 — 0 errors
- PHPCompatibility: 8.0–8.5 — 0 issues
- PHPUnit: 9.6.34 — 42 tests, 109 assertions
Downloads
- CSV exports use RFC 4180 encoding — fields with commas, double-quotes, or line breaks are correctly quoted. Replaces