9 releases 9 tags

RSS feed

• 1.1.1 7ae471e27f

  Compare

  v1.1.1 Stable

  javier released this 2026-08-18 19:06:54 +00:00 | 2 commits to main since this release

  1.1.1

  Release date: 2026-08-18

  Highlights

  • Security and reliability review of the 1.1.0 per-plugin Safe modes

  Added

  • The Plugins screen mode column is now a "Safe Mode" checkbox (checked = Safe, unchecked = Original) with an accessible hidden label and aria-label per row

  Fixed

  • The StellarWP telemetry blocks (iThemes Security, Kadence Blocks, The Events Calendar) are now actually applied: matchers without a host restriction were never reached, so those telemetry reports were silently sent despite Safe mode

  Changed

  • The profile registry is built once per request and cached, instead of being rebuilt on every outbound HTTP call

  Security

  • Full review of the new Plugins screen and Safe-mode guards (capabilities, nonces, multisite global-mode isolation, input whitelisting, output escaping, mock responses, caller attribution, uninstall cleanup) following OWASP and WordPress Plugin Security guidelines; no vulnerabilities found, and the findings above were addressed

  Compatibility

  • WordPress: 4.0 - 7.1
  • PHP: 5.6 - 8.5
  • MariaDB: 10.6+
  • Multisite: compatible (Per-site and Global modes)

  Tests

  • WordPress 7.2-alpha-63320, PHP 8.5.9, MariaDB 11.8.8
  • Verified live: path-only matcher application, host scoping, path constraints, per-request cache
  • PHP Coding Standards: 3.13.6
  • WordPress Coding Standards: 3.4.1
  • PHPCompatibilityWP (PHP 5.6 - 8.5) and wp-since (WordPress 4.0) static reviews for the floor versions

  Downloads

  • robotstxt-telemetry-1.1.1.zip
    3 downloads · 2026-08-18 19:06:33 +00:00 · 77 KiB