Version update v4.7.12 [Master] - #2364

Merged

nazmulthenomad merged 37 commits into

Aug 18, 2026

Commits on Jul 29, 2026

fix(security): validate compare operator against allowlist to prevent SQL injection
the-hercules
committed
7b0e50f
fix(security): enforce media privacy in JSON API get_media_details
the-hercules
committed
88e2d11

Commits on Jul 30, 2026

fix(security): authorize upload target album/context/author (album injection)
the-hercules
committed
987efec
fix(plugin-check): add ABSPATH direct-access guard to procedural/template files

the-hercules
and
claude
committed
aa00434
fix(plugin-check): raise "Requires at least" to 4.9.6

the-hercules
and
claude
committed
3ecd082
fix(plugin-check): correct plugin header metadata (name + tested-up-to)

the-hercules
and
claude
committed
d133c15

Commits on Aug 3, 2026

Commits on Aug 4, 2026

Commits on Aug 5, 2026

Commits on Aug 6, 2026

Commits on Aug 13, 2026

Commits on Aug 16, 2026

Commits on Aug 17, 2026

Commits on Aug 18, 2026

Merge pull request #2363 from rtCamp/version-update/v4.7.12
the-hercules
authored
4dea7df