Garden Gnome Package

2.5.4

Sanitize uploaded package filenames, including dots and UTF-8 emoji, to keep player and skin JavaScript valid.

Repair player and skin variable names when re-extracting existing packages.

Allow radc and map files inside packages.

2.5.3

Fix Gutenberg block registration in the editor.

2.5.2

Capability check to for .ggpkg uploads is ignored for admins

2.5.1

Capability check to for .ggpkg uploads is now on by default

2.5.0

Added minimum version checks during activation (WordPress 5.0+, PHP 7.2+).

Added optional capability-based permission setting for .ggpkg uploads (off by default) to address CVE-2026-39683.

Updated Gutenberg block editor and Elementor widget registration APIs for improved forward compatibility.

Added unpack error reporting in Media Library notices and attachment details.

Added per-package unpack status metadata and Re-extract GGPKG media action.

Added secure remote URL settings for shortcode mode (strict TLS and allowed host list).

2.4.1

Added 3d file extensions to the allowed file types for Pano2VR 8 packages.

2.4.0

Added a list of valid file extensions within a package file for security reasons (CVE-2024-12854).

2.3.0

Breaking Change: Added an option for the url field in the settings, that is off by default for security reasons.

Shortcode: Better “url” parameter sanitization

2.2.9

Fixes for “start_node” parameter sanitization

2.2.8

Fixes for the plugin settings dialog

2.2.7

Less strict sanitization to allow complex CSS attribu