توضیحات
Manage all your WordPress updates, including individual updates, automatic updates, logs, and loads more. This also works very well with WordPress Mul …
تغییرات این نسخه
9.0.21 – 2026-05-13
SECURITY: Fix a non-persistent reflected XSS vulnerability due to a missing validation and output escaping on the “paged” URL argument. This could allow an attacker, who persuaded you to click a personally-crafted link to your site’s dashboard whilst you were logged in, to once run harmful JavaScript code. Thanks to Dmitrii Ignatyev for finding and responsibly disclosing this issue.
TWEAK: Improved the delay updates feature to record the timestamp of the first occurrence of available plugin, theme, or core updates early, when their associated transient option is updated.
TWEAK: Corrected improper usage of esc_html_e() when preceded by echo
TWEAK: Added missing direct file access protection check for ‘ABSPATH’ to prevent unauthorized access.
TWEAK: Get rid of the “implicitly marking parameter $logger as nullable is deprecated” deprecation warning
TWEAK: Suppress false positive WordPress.WP.I18n.TextDomainMismatch warning due to different plugin slugs in free and premium versions.
9.0.20 – 2025-12-08
REFACTOR: Safeguard the calls to PHP’s unserialize() function by specifying the “allow_classes” parameter to false to prevent code from being loaded and executed due to object instantiation and autoloading
TWEAK: Early processing of external update logs is necessary to resolve the issue of the shutdown function being left out when a severe error happens during an auto/manual update through WP-CLI
TWEAK: Enhance the notifications to signify the introdu
SECURITY: Fix a non-persistent reflected XSS vulnerability due to a missing validation and output escaping on the “paged” URL argument. This could allow an attacker, who persuaded you to click a personally-crafted link to your site’s dashboard whilst you were logged in, to once run harmful JavaScript code. Thanks to Dmitrii Ignatyev for finding and responsibly disclosing this issue.
TWEAK: Improved the delay updates feature to record the timestamp of the first occurrence of available plugin, theme, or core updates early, when their associated transient option is updated.
TWEAK: Corrected improper usage of esc_html_e() when preceded by echo
TWEAK: Added missing direct file access protection check for ‘ABSPATH’ to prevent unauthorized access.
TWEAK: Get rid of the “implicitly marking parameter $logger as nullable is deprecated” deprecation warning
TWEAK: Suppress false positive WordPress.WP.I18n.TextDomainMismatch warning due to different plugin slugs in free and premium versions.
9.0.20 – 2025-12-08
REFACTOR: Safeguard the calls to PHP’s unserialize() function by specifying the “allow_classes” parameter to false to prevent code from being loaded and executed due to object instantiation and autoloading
TWEAK: Early processing of external update logs is necessary to resolve the issue of the shutdown function being left out when a severe error happens during an auto/manual update through WP-CLI
TWEAK: Enhance the notifications to signify the introdu