Version 6.0.1 is a security release. It fixes an authenticated access-control issue affecting administrative
actions, hardens settings import validation and processing, and improves validation of custom CSS settings output.
Thanks to Artus KG for reporting this issue responsibly. This release also updates plugin URI metadata to HTTPS
and includes a small dashboard icon spacing fix. Please see the CHANGELOG.
Developed and tested on up to PHP 8.5.8 and WordPress 7.0.1
Changelog
Security fixes
[HIGH] Fixed an authenticated access-control security issue affecting administrative actions. Reported by Artus KG.
[HIGH] Hardened settings import validation and processing.
[MEDIUM] Added direct capability checks to privileged administrative actions.
[MEDIUM] Improved validation of custom CSS settings output.
