Skip to content

Release 5.7.0#594

Merged
pfefferle merged 1 commit intomainfrom
release/5.7.0
Mar 30, 2026
Merged

Release 5.7.0#594
pfefferle merged 1 commit intomainfrom
release/5.7.0

Conversation

@pfefferle
Copy link
Copy Markdown
Owner

Summary

  • Bump version to 5.7.0
  • Update tested up to WordPress 7.0
  • Remove classicpress tag
  • Add changelog entries for all changes since 5.6.2

Changelog

  • Fix blind SSRF vulnerability by using wp_safe_remote_get for author page and tools requests
  • Fix undefined constant error in WP handler
  • Fix double slash in avatar upload directory path
  • Fix "Show avatars on Webmentions" setting having no effect
  • Fix comment query to respect explicit type parameter

Test plan

  • Verify version displays correctly in plugin list
  • Confirm all listed fixes are included

Update tested up to WordPress 7.0, remove classicpress tag,
and add changelog entries for SSRF fix, WP handler fix, double
slash fix, avatar setting fix, and comment query fix.
@pfefferle pfefferle merged commit f8a300a into main Mar 30, 2026
9 checks passed
@pfefferle pfefferle deleted the release/5.7.0 branch March 30, 2026 17:17
@pfefferle pfefferle self-assigned this Mar 30, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant