Get the plugin
WP MCP/Blog/Post

· v0.8.133

WP MCP 0.8.133: Security hardening

release

WP MCP 0.8.133 is out. Here is what changed in this release:

  • Security hardening: event and donation form listings (The Events Calendar, Modern Events Calendar, GiveWP) now show only the entries the current user may read, and their totals count only those.
  • The operation log (list-operations) shows non-administrators only their own changes, and a change can no longer be added to a named session another user started unless you are an administrator. The shared default session and new session ids work as before.
  • WooCommerce catalog ops (woo-read, woo-write) now check the per-item permission for every product, variation, coupon, order, refund, customer, review and brand they name before running.

Download it from the GitHub release, or see this release on the changelog alongside every earlier one.

Release notes, straight to your inbox.

One email per release, what shipped, what's verified, what's production-only. No drip campaigns. Unsubscribe in one click.