Mailercloud – Integrate webforms and synchronize website contacts

1.0.9

Compatibility: declare $plugin_path as an explicit class property on Mailercloud to avoid the “Creation of dynamic property” deprecation on PHP 8.2+. On sites where a security/monitoring plugin escalates deprecations to fatal exceptions, the Contact Sync page rendered as “There has been a critical error on this website”; with the property declared the deprecation never fires and the page renders normally. Forward-compatible with PHP 9, where dynamic properties become a hard fatal regardless of error-handler configuration.

1.0.8

Security: fix Missing Authorization (CWE-862) on three endpoints reported by Wordfence. The two mailercloud_create_new_property and mailercloud_sync_contacts_now_ajax AJAX actions, and the mailcloud/v1/get-signup-forms REST route, were reachable without authentication and could be abused to enumerate or modify data on the site owner’s Mailercloud account. All three now require manage_options capability and (for AJAX) a valid nonce.

1.0

Initial Version Launch