v.14.4.8 (Aug 14, 2026)
View hidden content is available for registered users!
Unlock
Major security update:
1. Fixed a security issue where Query Control autocomplete could expose user password hashes and email addresses to users with Contributor permissions.
2. Hardened icon font ZIP installation against code injection and path traversal, and added proper capability checks.
3. Fixed a stored XSS vulnerability in the [dt_banner] link attribute.
4. Fixed a stored XSS vulnerability in the [dt_simple_login_form] form_id attribute.