ManageWP Worker

4.9.38

WordPress 7.1 compatibility bump

Fix: Resolved PHP 8.x warnings

4.9.37

Security: The automatic (1-click) login signature now binds the target account, so a login link authorises a session only for the intended user.

4.9.36

Security: Hardened the automatic (1-click) login handler against reuse of a captured login URL by strictly validating the login token format.

Security: Login signature parameters are no longer included in the post-login redirect URL.

Props to Jakub Herman for the responsible disclosure.

4.9.35

WordPress 7.0 compatibility bump

Fix: Resolved PHP 8.x deprecation warnings in action method signatures

4.9.34

Fix: Resolved PHP 8.4 deprecation warnings for implicit nullable type declarations

4.9.33

WordPress 6.9 compatibility bump

4.9.32

Security: Fixed Stored Cross-Site Scripting vulnerability (CVE-2026-3718)

Security: Added input sanitization for communication headers before database storage

Security: Enhanced output escaping on connection management page

Security: Fixed path traversal vulnerability in File Manager download action

Security: Fixed SQL injection vulnerability in incremental backup table checksum action

Security: Fixed XSS vulnerability in brand contact support dialog

Security: Enhanced output escaping for error messages and public keys on connection management page

4.9.31

Added Elementor Pro database update detection

Fix: Resolved WooCommerce database update not detected after plugin upgrade

4.9.30

Performance: Op