v2.3.8 Latest
May 25, 2026
Improve 3 Fix 2 Security 1
Improve
- Keyboard focus is now clearly visible across every admin settings tab. Tab navigation shows a high-contrast focus ring instead of the browser default outline, which some themes were hiding.
- Compatibility hardening to meet the WordPress Plugin Check requirements - every translatable string with placeholders now has a translator comment, so the plugin passes the official check cleanly.
- Removed unused code that was left behind from earlier scaffolding (developer-only - no customer-visible change).
Fix
- The "Pinning Limits" setting on the Permissions tab is now enforced on every site, including older installs that have not yet migrated to the new database tables. Previously, on legacy storage sites the per-user / per-admin pin limit was silently ignored, so members and admins could pin an unlimited number of activities regardless of the configured cap.
- The "Group Pin Authority" bypass now works on every storage backend. Previously, group administrators and moderators who should bypass the per-user limit when pinning inside their own groups were still being blocked by it on database-migrated sites - the bypass was only applied on the REST API path, not on the underlying save. They can now pin the configured number of activities in their own groups without being incorrectly capped by the per-user limit.
Security
- Three additional permission checks added to admin actions so that the corresponding endpoints can only be triggered by users who actually hold the right capability - closes a class of edge cases where a logged-in non-admin could probe the action with a valid security token.