v1.1.0 Latest
June 6, 2026
New 3 Improve 2 Fix 16 Security 2 Dev 2 Compat 1
New
- Programmatic SEO landing pages now render inside the active theme.
- Public read REST endpoints are rate-limited.
- Pro feature toggles register into Free's Features screen; the separate Pro tab is removed.
Improve
- BuddyPress Listings and Reviews profile tabs, the Outgoing Webhooks admin list, and the dashboard Needs feed are paginated, removing several N+1 queries.
- Saved-search alert cron and reverse-listings counts use bounded count-only queries, and the notification queue, map styles, and credit packs options no longer autoload.
Fix
- Payment webhooks are idempotent: credits are recorded before being granted, replayed events are ignored, and a webhook without a transaction id can no longer double-credit.
- Refunds deduct the real refunded amount, and a refund arriving after plan activation rolls the plan back.
- Saving a coupon no longer triggers a "headers already sent" warning or a blank page; the action is handled before output.
- Private visibility no longer returns 403 for every non-admin viewer.
- Notification digests no longer drop review notifications, and owner digest emails send to the stored recipient address.
- Listing-paused and listing-resumed emails use real palette keys instead of emitting undefined-key warnings.
- SEO pages defer head meta and schema to the active SEO plugin, the sitemap provider registers through wp_register_sitemap_provider, and unrated listings stay in the grid.
- Infinite scroll rel-prev/next links honour active search filters, and the result counter no longer undercounts.
- Comparison and Quick View are enabled by default, and Quick View gallery arrows meet the 44px tap target.
- The Load More button disables while fetching, and lead-form submission results are announced to screen readers.
- The Visibility settings tab only appears when Coming Soon is enabled, and the Coming Soon splash supports dark mode.
- The Reverse Listings admin budget column respects each need's currency.
- The analytics tracker declares its wp-api-request dependency, and BuddyPress loop templates no longer reference undefined view data.
- Photo-review and criteria-average styles moved to the frontend stylesheet, and customer-facing buttons drop the theme button class.
- The White Label feature description now matches its actual scope (plugin name and admin menu relabel).
- Analytics and Photo Reviews REST endpoints return structured listora_unauthorized (401) / listora_forbidden (403) codes on denial, and ownership failures now correctly return 403.
Security
- Audit log IP capture is hardened against spoofing.
- Saved-search update and delete enforce an ownership guard as defence in depth.
Dev
- Pro consumes Free's bundled EDD SL SDK and reads verified badges through the wb_listora_is_verified() resolver.
- Need Matcher proximity routes through Free's geo_query service, and the codebase passes PHPStan level 7.
Compat
- Requires WB Listora (free) 1.1.0. Install both updates together.