Security & Bug Fixes
* Security fix: Added CRLF / email header injection protection — newline characters are now stripped from all user-supplied header values (From Name, From Email, subject) before they reach the mailer.
* Fix: Custom hook filters were silently not being registered at startup. The register_custom_hook_filters() call was missing, meaning third-party plugins that fired a cpetb_custom_* action would never be intercepted. Custom hooks now work correctly.
* Fix: Dropping a reusable (saved) block onto the canvas threw “Unknown block type: saved_block”. Added the missing saved_block catalog entry so blocks resolve correctly when dropped.
* Fix: Builder metadata comments could appear in rendered email output when template content contained the –> character sequence. Metadata is now Base64-encoded so the HTML comment boundary is never broken.
* Fix: Existing templates with already-corrupted metadata comments now render cleanly — both the JavaScript and PHP strip routines use a greedy regex that fully removes the broken comment in one pass.
Email Builder improvements
* Container block now supports nested inner blocks — you can drag any block inside a container and reorder them freely.
* Improved drag-and-drop stability: dragging blocks into and out of containers no longer causes duplicate or missing blocks.
* Code refactor of the email builder for improved readability and long-term maintainability — no behaviour changes.
Plugin Website
Visit website
Share Post
Get insights into what’s happening at ChangelogWP right in your inbox. We don’t believe in spam.