· v0.8.133
WP MCP 0.8.133: Security hardening
WP MCP 0.8.133 is out. Here is what changed in this release:
- Security hardening: event and donation form listings (The Events Calendar, Modern Events Calendar, GiveWP) now show only the entries the current user may read, and their totals count only those.
- The operation log (list-operations) shows non-administrators only their own changes, and a change can no longer be added to a named session another user started unless you are an administrator. The shared default session and new session ids work as before.
- WooCommerce catalog ops (woo-read, woo-write) now check the per-item permission for every product, variation, coupon, order, refund, customer, review and brand they name before running.
Download it from the GitHub release, or see this release on the changelog alongside every earlier one.