Security: AJAX handlers now verify a nonce before processing a screenshot request (CSRF hardening).
Security: Submitted/target URLs are validated (http/https only, no private or reserved IP ranges) before being sent to any screenshot API, to reduce SSRF risk.
Security: API key field on the settings page is now masked and settings updates re-verify the nonce and manage_options capability.
Security: Screenshot buttons on posts only work for published posts.
Fix: selecting Thum.io in settings now correctly matches its stored option key (“thumio”).
Fix: taking a screenshot of a post via the Microlink or Thum.io service no longer references an undefined variable.
Refactor: repeated API-dispatch switch statements consolidated into a single resolve_screenshot_from_api() method.
Housekeeping: Supported API Services list, settings dropdown, and internal file includes are now alphabetically ordered.
1.2.3
Compatible with WP 6.8
Bugs fixes and improvements
1.2.2
Bugs fixes and improvements
1.2.1
Bugs fixes and improvements
1.2
Bugs fixes and improvements
Added new API: JsonLink.io
1.1.1
Bugs fixes and improvements
1.1
Bugs fixes and improvements
Added new APIs
Added Button to custom post types for taking the screenshot from it
