WP MCP 0.8.130: Security hardening

WP MCP 0.8.130 is out. Here is what changed in this release:

• Security hardening: get-post no longer returns the content or excerpt of a password-protected post to a user who cannot edit it (it reports protected instead, as the REST API does), other reads of that content are refused, and search no longer matches inside it.
• Security hardening: integration pack operations (ACF, Meta Box, JetEngine, Pods, forms, events, LMS, block suites and others) now check the per-object capability for every post, user or entry id they are given, before the operation runs.
• Security hardening: rollback-session only rolls back sessions the caller started, unless they can manage options; sessions written with no user account are administrator-only, and the shared default session still works row by row.

Download it from the GitHub release, or see this release on the changelog alongside every earlier one.