What's new

Version 6.0.1 is a security release. It fixes an authenticated access-control issue affecting administrative actions, hardens settings import validation and processing, and improves validation of custom CSS settings output.

Thanks to Artus KG for reporting this issue responsibly. This release also updates plugin URI metadata to HTTPS and includes a small dashboard icon spacing fix. Please see the CHANGELOG.

Developed and tested on up to PHP 8.5.8 and WordPress 7.0.1

Changelog

Security fixes

• [HIGH] Fixed an authenticated access-control security issue affecting administrative actions. Reported by Artus KG.
• [HIGH] Hardened settings import validation and processing.
• [MEDIUM] Added direct capability checks to privileged administrative actions.
• [MEDIUM] Improved validation of custom CSS settings output.

Bug fixes

• [LOW] Fixed dashboard icon spacing.

Miscellaneous changes

• Updated the plugin URI metadata to use HTTPS.