Changelog

• Bug fixes:
  • Hardened REST API permission checks and argument sanitization.
  • Escaped post_class() output more safely.
  • Added validation before switch_to_blog() calls in the table manager.
  • Added ABSPATH protection to the sidebar template.
  • Fixed the random order widget setting using the correct boolean field.
  • Typecast numeric limit values to ensure they are properly captured as integers.

Full Changelog: 4.2.1...4.2.2