Security: CSV export now neutralizes spreadsheet formula injection — cell values starting with =, +, -, @, tab or CR are prefixed with a quote so Excel / LibreOffice treat them as text.
Fix: leads row actions (status cycle, notes, delete) and the CSV export now run before any admin page output, preventing “headers already sent” warnings and corrupted CSV downloads on hosts without PHP output buffering.
1.4.4
Initial public release on WordPress.org.
Bilingual BG / EN with toggle independent of site locale.
GDPR consent checkbox with editable text and policy URL.
Per-category targeting.
Custom DB table for leads + admin dashboard with CSV export.
Customizable button colors and border radius.
Filterable email “From” via zvanko_mail_from_email / zvanko_mail_from_name.
