Fix plugin security issues - #2357

Merged

the-hercules merged 24 commits into

fix/plugin-check-issues

Aug 17, 2026

Commits on Jul 29, 2026

fix(security): validate compare operator against allowlist to prevent SQL injection
the-hercules
committed
7b0e50f
fix(security): enforce media privacy in JSON API get_media_details
the-hercules
committed
88e2d11

Commits on Jul 30, 2026

fix(security): authorize upload target album/context/author (album injection)
the-hercules
committed
987efec
fix(plugin-check): add ABSPATH direct-access guard to procedural/template files

the-hercules
and
claude
committed
aa00434
fix(plugin-check): raise "Requires at least" to 4.9.6

the-hercules
and
claude
committed
3ecd082
fix(plugin-check): correct plugin header metadata (name + tested-up-to)

the-hercules
and
claude
committed
d133c15

Commits on Aug 3, 2026

Commits on Aug 4, 2026

Commits on Aug 5, 2026

Commits on Aug 6, 2026

Commits on Aug 16, 2026