Release notes
Lists of updates and fixes we do everyday for you. Release notes are presented according to the most recent version.
2.5.4
December 22, 2025
New
Introduced hooks before and after page creation during template import.
Fix
Resolved the utility page permalink flush issue.
Update
Enabled header and footer display control via hooks.
2.5.3
December 15, 2025
Update
Improved validation and handling for font file uploads.
Fix
Strengthened form submission validation and security.
Fix
Corrected SVG upload sanitization.
Fix
Added validation for Base64 image uploads.
2.5.2
December 5, 2025
Fix
Arbitrary File Upload vulnerability restricted to authenticated content-access users (CVE-2025-5831)
Fix
Missing authorization for multiple actions requiring the authenticated full-access role (CVE-2025-5835)
Fix
Unauthenticated Arbitrary File Download/Deletion vulnerability (CVE-2024-43955)
Fix
Settings change required full-access user roles (CVE-2024-43954)