توضیحات
Create domain for sale landing pages, accept offers & inquiries, and manage domain sales from your WordPress dashboard — built for domain investors.
تغییرات این نسخه
3.5.2 – 24 July 2026
Security: Fixed a broken access control issue where the Offers and Dashboard REST endpoints could be read or deleted without authentication because the permission check returned the required capability name instead of verifying it.
Security: The “resend verification” and “send congratulations” admin actions now require the dashboard capability instead of being reachable while logged out.
Security: Hardened unserialize() calls storing offer data against PHP object-injection.
Security: Added missing sanitization/unslashing on request data across the admin and frontend, and moved raw SQL table-name interpolation onto prepared statements where supported.
Improved: Replaced direct filesystem calls in CSV import/export with the WordPress Filesystem API, and standardized on wp_json_encode() throughout.
Credit: Thanks to Labda for responsibly disclosing the broken access control issue in the Offers and Dashboard REST endpoints.
3.5.1 – 08 July 2026
Fixed: The Domains, Offers, and Analytics screens showing no data when the permalink structure is set to “Plain” — a malformed REST request URL was silently failing.
3.5.0 – 30 June 2026
New: Completely redesigned admin area, rebuilt as a modern React single-page application.
New: Migrated the entire admin away from the legacy Codestar options framework to a native React + REST API architecture, removing ~35,000 lines of legacy framework code for a lighter, faster plugin.
New: React-based Settings, Offers,
Security: Fixed a broken access control issue where the Offers and Dashboard REST endpoints could be read or deleted without authentication because the permission check returned the required capability name instead of verifying it.
Security: The “resend verification” and “send congratulations” admin actions now require the dashboard capability instead of being reachable while logged out.
Security: Hardened unserialize() calls storing offer data against PHP object-injection.
Security: Added missing sanitization/unslashing on request data across the admin and frontend, and moved raw SQL table-name interpolation onto prepared statements where supported.
Improved: Replaced direct filesystem calls in CSV import/export with the WordPress Filesystem API, and standardized on wp_json_encode() throughout.
Credit: Thanks to Labda for responsibly disclosing the broken access control issue in the Offers and Dashboard REST endpoints.
3.5.1 – 08 July 2026
Fixed: The Domains, Offers, and Analytics screens showing no data when the permalink structure is set to “Plain” — a malformed REST request URL was silently failing.
3.5.0 – 30 June 2026
New: Completely redesigned admin area, rebuilt as a modern React single-page application.
New: Migrated the entire admin away from the legacy Codestar options framework to a native React + REST API architecture, removing ~35,000 lines of legacy framework code for a lighter, faster plugin.
New: React-based Settings, Offers,