-
v5.1.2 Stable
released this
2026-08-07 10:46:22 +00:00 | 1 commits to main since this release[5.1.2] - 2026-08-07
Fixed
- Missing
load_plugin_textdomain()call caused a "Translation loading for thewpvulnerabilitydomain was triggered too early"_doing_it_wrong()notice on WordPress 6.7+. The textdomain is now explicitly loaded on theinithook.
Added
- WordPress Playground blueprint (
blueprint.json) with pre-installed vulnerable plugins and a theme for quick testing.
Changed
- Security vulnerability reporting link updated to ROBOTSTXT.
- Contributor repository link updated to git.robotstxt.es/ROBOTSTXT/wpvulnerability.
- The
readme.txtChangelog section now shows only the latest 3 versions; the full history remains inchangelog.txt.
Compatibility
- WordPress: 5.6 - 7.1
- PHP: 7.0 - 8.5
- WP-CLI: 2.3.0 - 2.12.0
Tests
- PHP Coding Standards: 3.13.5
- WordPress Coding Standards: 3.3.0
- PHPStan: 2.1.55 (level 9, 0 errors)
- PHPUnit: 9.6.34 (25 tests)
Downloads
- Missing