Ensure .htaccess rules are correctly updated when settings change.

Ensure default icon is displayed correctly in preview when no custom icon is set.

Change capability name.

Replace static dropdowns with AJAX-powered autocomplete search for Users, Posts, and Terms for better performance on large sites. Add dynamic meta keys loading based on selected User/Post/Term. Add new shortcodes for retrieving option values and site information.

Add by default disable comments on all post types if no selection exists.

Add support for Brevo, MailJet, Postmark, SparkPost, MailerSender, Resend, SendLayer, SMTP.com, SMTP2GO, ElasticEmail, ZohoMail, SendPulse, Mandrill, Pepipost and Twilio SendGrid.

Improve UI with readonly fields after selection and enhanced parameter documentation.

Improve checkbox labels with code formatting for better clarity.

Added EXIF orientation handling for correct image rotation during optimization

Add Amazon SES integration using SMTP credentials.

Add Brevo integration.

Add Mailgun integration.

Better transition from <2.14.0.

Correct the provider name for php and other.

Restrict change admin username action to users with 'manage_users' capability to prevent privilege escalation.

Add Google Authenticator support.

Add late events filtering.

Track plugin activations, deactivations, and theme switches.

Add user ID tracking for manual actions vs automatic updates.

Add Gmail integration using OAuth 2.0.

Add Outlook integration using OAuth 2.0.

Add Twilio SendGrid integration using API key.

New integration UI for better user experience.

Prevent redirect loop on CLI or server CRON requests.

Problem with excluded URLs when none defined.

Added missing filter to enable custom menu order.

Restrict access to Administrator-only capability to prevent code injection vulnerability (CVE-2025-14166).

Add input to exclude pages from maintenance mode.

Copy bypass link displayed only when maintenance is active; improved FR label text.

Add reset button, separators, highlighted separators, and restore original icon option.

Use slug instead of text domain for better compatibility.

Resolve geoip2 library errors.

Prevent unintended option updates; retrieve option from wp-config for better compatibility with WPML and multilingual plugins.

Save snippet in post_content instead of custom meta.

Allow JS/CSS/IMG files inside wp-admin when 403 redirection is enabled.

Copy bypass link in admin bar.

Limit post type key length (max 20 chars) to prevent errors.

Multiple bugs fixed.

Compatibility with cache plugins.

Split target, noopener, noreferrer, nofollow options.

Add switch option from user edit page + filter for third-party use.

Add preview option.

Add search input.

Add popup for migration/deletion + export code.

Avoid logout by delaying first regeneration 30 minutes.

Add notice when API key missing + track post ID in bulk.

GeoIP dependency compatibility.

Remove zxcvbn; replace with lightweight custom function.

Black background on PNG → WebP/AVIF.

Add more attribute options.

Incorrect sprintf syntax.

Security improvements on handle_actions().

Add taxonomy creation support.

Fix AJAX issues when 403 protection is active.

Patch [CVE-2025-3300](https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/wpmastertoolkit/wpmastertoolkit-wpmtk-all-in-one-plugin-252-authenticated-administrator-to-arbitrary-file-read-and-write) (arbitrary file read/write).

Add AVIF support (PRO, PHP ≥ 8.1).

UI improvements + new image conversion library.

EXIF rotation issues.

WebP compression preventing oversized images.

Disable big_image_size_threshold to avoid conflicts.

Fullscreen mode issues.

session_start() causing issues on REST-API. [Related support ticket](https://wordpress.org/support/topic/problemes-critiques/#post-18381082)

Prevent admin from removing own admin role. [Related support ticket](https://wordpress.org/support/topic/multiple-user-roles-generates-a-403-forbidden-error-2/#post-18381136)

Missing CSS after path change.

Delete unwanted files after core update.

Add PRO bypass link.

Prefill test email input with current user email.

TranslatePress issue with default language subdirectory.

Updated CSS for WP 6.7+.

Updated CSS/JS for WP 6.7+.

Howdy removal not applied.

Full redesign with modal + storage system.

(PRO ONLY) Add countdown.

Fix arbitrary upload + download vulnerabilities.

Issue on some installations.

CSP header issue (upgrade-insecure-requests).

Add delete blocked IP option.

Add admin bar and settings switches.

Improve header explanations.

PHP warning.

Improved ZIP creation.

Fix issues on some servers.

Better UX + edit files directly.

Replace password input type.

Improved regeneration logic.

priority.

issue.

Add fix tool.

Upload issue.

Sanitize uploaded SVG files.