• 1.5.1 74f1f42deb

    v1.5.1 Stable

    javier released this 2026-06-06 05:22:48 +00:00 | 1 commits to main since this release

    1.5.1

    Release date: 2026-06-06

    Security

    • CSV exports use RFC 4180 encoding — fields with commas, double-quotes, or line breaks are correctly quoted. Replaces addslashes().
    • GeoIP database path validated with is_file() and !is_link() at read time to block symlink traversal.
    • robotstxt_2fa_app_password_verification_window filter return validated as a positive integer; falls back to 900 for invalid values.

    Fixed

    • Export CSV button now only rendered to users with manage_options capability.

    Compatibility

    • WordPress: 6.4 – 7.1
    • PHP: 8.0 – 8.5

    Tests

    • PHP Coding Standards: PHP_CodeSniffer 3.13.5 / WPCS 3.3.0
    • PHPStan: level 9 — 0 errors
    • PHPCompatibility: 8.0–8.5 — 0 issues
    • PHPUnit: 9.6.34 — 42 tests, 109 assertions
    Downloads