PublishPress Planner v4.8.2: Security hardening: notification workflow fixes
This post is about a release of the PublishPress Planner plugin. This plugin has all the tools you need to organize your WordPress content, including a post planning calendar, Kanban Board, editorial notifications, and more.
PublishPress Planner v4.8.2 is a maintenance and security release focused on safer admin output, clearer accessibility scanning, and more reliable editorial notifications. There are no major new user facing features in this update, but it is a recommended upgrade for teams that rely on Planner for scheduled content, editorial comments, and notification workflows.
Table of Contents
What improves in this release
- Security hardening: Administrative output handling and SQL query placeholders were corrected to prevent unsafe content rendering and address scanner findings.
- Accessibility scanner clarity: Image alternative text and link labels are now easier for automated scanners to detect and verify.
- Dependency updates: Compatibility and security dependencies were refreshed, including DOMPurify and brace expansion.
- Multisite reliability: Multisite operations now use WordPress helpers that more accurately handle information for the current site.
Notification and editorial workflow fixes
- Notification scheduling: Asynchronous notification cron events are now kept scheduled in the future instead of being treated as expired.
- Notifications metabox: The Notifications metabox is restored when follower workflows are configured.
- Deleted posts: Notification logs now handle deleted posts correctly.
- Editorial comments: The editorial comment workflow event has been restored, and owner capability checks now correctly identify the owner by ID.
Developer improvements
- Safer data handling: Serialized hash data has been replaced with JSON encoding in notification signatures, editorial metadata, and comment cache keys.
- Legacy cleanup: Legacy Base64 decoding for module descriptions has been removed in favor of safer structured handling.
- Capability checks: Primitive capability checks no longer pass unnecessary post IDs.
- PHP compatibility: Internal array handling and plugin loader scanning were adjusted to avoid compatibility warnings.
- Workflow maintenance: Outdated code check and deployment workflow components were removed from the project workflows.
This post provides an overview of the new features in this release of the PublishPress Planner plugin. The complete changelogs for both Free and Pro versions are available in our Docs area.
Plan and manage your WordPress content
PublishPress Planner has all the tools you need to plan and schedule WordPress content, including a scheduling calendar, Kanban Board, editorial notifications and more.
