Nexter Blocks - PRO
Version 5.0.4
- Improvement : Login & Register : Registration now saves only the form's configured fields, improving data handling and reliability.
- Improvement : Login & Register : reCAPTCHA is now validated on the server using the stored secret key for more dependable spam protection.
- Improvement : Login & Register : Added rate limiting to login, forgot-password and magic-link requests to prevent abuse and email flooding.
- Improvement : Login & Register : Mailchimp and Facebook credentials are now handled entirely on the server and are no longer included in page output.
- Improvement : Login & Register : Login now returns a uniform message for invalid credentials.
- Improvement : Google Login : Replaced bundled third-party libraries with a lighter, up-to-date Google sign-in verification method — smaller plugin size and fewer dependencies.
- Improvement : Form Actions : WebHook, Slack, Discord and CRM actions now validate their target URLs and block internal/private addresses.
- Improvement : Form Actions : CAPTCHA is now enforced on the server so it can no longer be skipped.
- Improvement : Dynamic Content : The dynamic-content REST endpoint now returns data only for published posts and authorized users.
- Improvement : Dynamic Content : Fallback, prefix and suffix text is now properly escaped on output.
- Improvement : Dynamic Content : ACF field lookups are limited to authorized users and remain safe when ACF is inactive.
- Improvement : Product Compare : Capped the product-search query size for better performance and stability.
- Improvement : License : Enabled TLS certificate verification on the license activation request.
- Improvement : Dashboard : Escaped admin license-notice output and hardened the WDesignKit widget update path against invalid file paths.
- Improvement : Core : Introduced a unique per-site key for encoding configuration data and added direct-access protection to plugin files.
- Fix : Cache : Optimized the transient cache-clear query to target only the relevant options instead of scanning the entire options table.