Skip to content

Release#1340

Open
Soare-Robert-Daniel wants to merge 16 commits into
masterfrom
development
Open

Release#1340
Soare-Robert-Daniel wants to merge 16 commits into
masterfrom
development

Conversation

@Soare-Robert-Daniel

Copy link
Copy Markdown
Contributor

Changelog

  • Security updates

lucadobrescu and others added 6 commits July 8, 2026 14:30
…egisters before render-facade fires (#1319)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
…es the delayed script loader

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Background schedule/refresh invokes the upload handler with no logged-in
user and VISUALIZER_DO_NOT_DIE set. Since Feb 2026 uploadData() also
requires edit_posts/edit_post, so the scheduled import silently returned
and charts stopped auto-updating.

Gate the two capability checks on $can_die so they apply to real web
requests only; trusted internal calls (the only context that defines
VISUALIZER_DO_NOT_DIE, never from request input) proceed. Web path and
the nonce check are unchanged.

Fixes Codeinwp/visualizer-pro#590

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@pirate-bot

Copy link
Copy Markdown
Contributor

Make sure you've reviewed the themeisle_sdk_compatibilities filter of the plugin and updated it accordingly.

@pirate-bot

pirate-bot commented Jul 15, 2026

Copy link
Copy Markdown
Contributor

Plugin build for d3f84d3 is ready 🛎️!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants