WordPress.org
Get WordPress

Plugin Directory

Changeset 3435538


Ignore:
Timestamp:
01/08/2026 11:25:49 PM (6 weeks ago)
Author:
Dharm1025
Message:

Update to version 2.0.1 from GitHub

Location:
mailchimp
Files:
16 edited
1 copied

Legend:

Unmodified
Added
Removed

  • mailchimp/tags/2.0.1/includes/admin/class-mailchimp-user-sync.php

    r3343086 r3435538  
    326326                        'You will need %1$sa Mailchimp plan%2$s that includes %3$d contact.',
    327327                        'You will need %1$sa Mailchimp plan%2$s that includes %3$d contacts.',
    328                         absint( $users_count )
     328                        absint( $users_count ),
     329                        'mailchimp'
    329330                    ),
    330331                    '<a href="https://mailchimp.com/help/about-mailchimp-pricing-plans/" target="_blank" rel="noopener noreferrer">',

  • mailchimp/tags/2.0.1/includes/admin/templates/settings.php

    r3343086 r3435538  
    9595                                    <div class="mailchimp-sf-settings-list-select-button">
    9696                                        <input type="hidden" name="mcsf_action" value="update_mc_list_id" />
     97                                        <?php wp_nonce_field( 'update_mc_list_id_action', 'update_mc_list_id_nonce' ); ?>
    9798                                        <input type="submit" name="submit" value="<?php esc_attr_e( 'Fetch list settings', 'mailchimp' ); ?>" class="mailchimp-sf-button btn-secondary" />
    9899                                    </div>

  • mailchimp/tags/2.0.1/includes/admin/templates/setup-page.php

    r3343086 r3435538  
    225225                                <th class="mailchimp-sf-option-header">
    226226                                    <label for="mc_nuke_all_styles">
    227                                         <?php esc_html_e( 'Remove CSS' ); ?>
     227                                        <?php esc_html_e( 'Remove CSS', 'mailchimp' ); ?>
    228228                                    </label>
    229229                                </th>
    … …  
    235235                                        </div>
    236236                                        <label for="mc_nuke_all_styles">
    237                                             <?php esc_html_e( 'This will disable all Mailchimp CSS, so it\'s recommended for WordPress experts only.' ); ?>
     237                                            <?php esc_html_e( 'This will disable all Mailchimp CSS, so it\'s recommended for WordPress experts only.', 'mailchimp' ); ?>
    238238                                        </label>
    239239                                    </div>
    … …  
    266266                                        </div>
    267267                                        <label for="mc_custom_style">
    268                                             <?php esc_html_e( 'Edit the default Mailchimp CSS style.' ); ?>
     268                                            <?php esc_html_e( 'Edit the default Mailchimp CSS style.', 'mailchimp' ); ?>
    269269                                        </label>
    270270                                    </div>

  • mailchimp/tags/2.0.1/includes/class-mailchimp-form-submission.php

    r3343086 r3435538  
    100100        $interest_groups       = get_option( 'mc_interest_groups', array() );
    101101
     102        // phpcs:disable WordPress.Security.NonceVerification.Missing -- Nonce check is already done in the request_handler() function.
    102103        // Check if request from latest block.
    103104        if ( isset( $_POST['mailchimp_sf_list_id'] ) ) {
    … …  
    149150            $email_type = 'html';
    150151        }
     152        // phpcs:enable WordPress.Security.NonceVerification.Missing
    151153
    152154        $response = $this->subscribe_to_list(
    … …  
    252254
    253255            // Skip if the field is not required and not submitted.
    254             if ( ( true !== (bool) $merge_field['required'] && ! isset( $_POST[ $opt ] ) ) || $skip_merge_validation ) {
     256            if ( ( true !== (bool) $merge_field['required'] && ! isset( $_POST[ $opt ] ) ) || $skip_merge_validation ) { // phpcs:ignore WordPress.Security.NonceVerification.Missing -- Nonce check is already done in the request_handler() function.
    255257                continue;
    256258            }
    257259
     260            // phpcs:ignore WordPress.Security.NonceVerification.Missing -- Nonce check is already done in the request_handler() function.
    258261            $opt_val = isset( $_POST[ $opt ] ) ? map_deep( stripslashes_deep( $_POST[ $opt ] ), 'sanitize_text_field' ) : '';
    259262
    … …  
    340343        foreach ( $interest_groups as $interest_group ) {
    341344            $ig_id = $interest_group['id'];
     345            // phpcs:disable WordPress.Security.NonceVerification.Missing -- Nonce check is already done in the request_handler() function.
    342346            if ( isset( $_POST['group'][ $ig_id ] ) && 'hidden' !== $interest_group['type'] ) {
    343347                switch ( $interest_group['type'] ) {
    … …  
    368372                }
    369373            }
     374            // phpcs:enable WordPress.Security.NonceVerification.Missing
    370375        }
    371376        return $groups;
    … …  
    545550     */
    546551    protected function validate_form_submission() {
     552        // phpcs:disable WordPress.Security.NonceVerification.Missing -- Nonce check is already done in the request_handler() function.
    547553        $spam_message = esc_html__( "We couldn't process your submission as it was flagged as potential spam. Please try again.", 'mailchimp' );
    548554        // Make sure the honeypot field is set, but not filled (if it is, then it's a spam).
    … …  
    580586         */
    581587        return apply_filters( 'mailchimp_sf_form_submission_validation', true, $_POST );
     588        // phpcs:enable WordPress.Security.NonceVerification.Missing
    582589    }
    583590}

  • mailchimp/tags/2.0.1/mailchimp.php

    r3343086 r3435538  
    55 * Description:       Add a Mailchimp signup form block, widget or shortcode to your WordPress site.
    66 * Text Domain:       mailchimp
    7  * Version:           2.0.0
     7 * Version:           2.0.1
    88 * Requires at least: 6.4
    99 * Requires PHP:      7.0
    … …  
    6868
    6969// Version constant for easy CSS refreshes
    70 define( 'MCSF_VER', '2.0.0' );
     70define( 'MCSF_VER', '2.0.1' );
    7171
    7272// What's our permission (capability) threshold
    … …  
    422422 **/
    423423function mailchimp_sf_save_general_form_settings() {
    424 
     424    // phpcs:disable WordPress.Security.NonceVerification.Missing -- Nonce check is already done in the mailchimp_sf_request_handler() function.
    425425    /*Enable double optin toggle*/
    426426    if ( isset( $_POST['mc_double_optin'] ) ) {
    … …  
    448448    if ( isset( $_POST['mc_update_existing'] ) ) {
    449449        update_option( 'mc_update_existing', true );
    450         $msg = esc_html__( 'Update existing subscribers turned On!' );
     450        $msg = esc_html__( 'Update existing subscribers turned On!', 'mailchimp' );
    451451        admin_notice_success( $msg );
    452452    } elseif ( get_option( 'mc_update_existing' ) !== false ) {
    453453        update_option( 'mc_update_existing', false );
    454         $msg = esc_html__( 'Update existing subscribers turned Off!' );
     454        $msg = esc_html__( 'Update existing subscribers turned Off!', 'mailchimp' );
    455455        admin_notice_success( $msg );
    456456    }
    … …  
    522522    $msg = esc_html__( 'Successfully Updated your List Subscribe Form Settings!', 'mailchimp' );
    523523    admin_notice_success( $msg );
     524    // phpcs:enable WordPress.Security.NonceVerification.Missing
    524525}
    525526
    … …  
    532533    }
    533534
     535    if (
     536        ! current_user_can( MCSF_CAP_THRESHOLD ) ||
     537        ! isset( $_POST['update_mc_list_id_nonce'] ) ||
     538        ! wp_verify_nonce( sanitize_key( $_POST['update_mc_list_id_nonce'] ), 'update_mc_list_id_action' )
     539    ) {
     540        wp_die( 'Security check failed.' );
     541    }
     542
    534543    if ( empty( $_POST['mc_list_id'] ) ) {
    535544        $msg = esc_html__( 'Please choose a valid list', 'mailchimp' );
    … …  
    537546        return;
    538547    }
    539 
    540     // Simple permission check before going through all this
    541     if ( ! current_user_can( MCSF_CAP_THRESHOLD ) ) { return; }
    542548
    543549    $api = mailchimp_sf_get_api();
    … …  
    606612                count( $mv )
    607613            ) . ' ' .
    608             esc_html__( 'from your list' ) . ' "' . $list_name . '"<br/><br/>' .
     614            esc_html__( 'from your list', 'mailchimp' ) . ' "' . $list_name . '"<br/><br/>' .
    609615            esc_html__( 'Now you should either Turn On the Mailchimp Widget or change your options below, then turn it on.', 'mailchimp' );
    610616

  • mailchimp/tags/2.0.1/readme.txt

    r3343086 r3435538  
    22Contributors: Mailchimp
    33Tags:         mailchimp, email, newsletter, signup, marketing
    4 Tested up to: 6.8
    5 Stable tag:   2.0.0
     4Tested up to: 6.9
     5Stable tag:   2.0.1
    66License:      GPL-2.0-or-later
    77License URI:  https://spdx.org/licenses/GPL-2.0-or-later.html
    … …  
    7676
    7777== Changelog ==
     78
     79= 2.0.1 - 2026-01-08 =
     80* **Fixed:** Provide CSRF hardening for Mailchimp List changes (props [@iamdharmesh](https://github.com/iamdharmesh), [@joemcgill](https://github.com/joemcgill), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya)).
     81* **Fixed:** Plugin check plugin errors to improve overall codebase (props [@iamdharmesh](https://github.com/iamdharmesh), [@joemcgill](https://github.com/joemcgill), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya)).
     82* **Changed:** Bump WordPress "tested up to" version 6.9 (props [@iamdharmesh](https://github.com/iamdharmesh), [@joemcgill](https://github.com/joemcgill), [@qasumitbagthariya](https://github.com/qasumitbagthariya)).
    7883
    7984= 2.0.0 - 2025-08-11 =
    … …  
    9095* **Security:** Bump `http-proxy-middleware` from 2.0.6 to 2.0.9 (props [@dependabot](https://github.com/apps/dependabot), [@iamdharmesh](https://github.com/iamdharmesh) via [#180](https://github.com/mailchimp/wordpress/pull/180)).
    9196
     97= 1.9.1 - 2026-01-08 =
     98* **Fixed:** Provide CSRF hardening for Mailchimp List changes (props [@iamdharmesh](https://github.com/iamdharmesh), [@joemcgill](https://github.com/joemcgill), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya)).
     99
    92100= 1.9.0 - 2025-06-04 =
    93101* **Added:** New user synchronization feature that allows syncing WordPress users to Mailchimp (props [@iamdharmesh](https://github.com/iamdharmesh), [@jeffpaul](https://github.com/jeffpaul), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya) via [#156](https://github.com/mailchimp/wordpress/pull/156)).
    94102* **Changed:** Improved the enqueueing of JavaScript scripts and styles (props [@iamdharmesh](https://github.com/iamdharmesh), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya) via [#161](https://github.com/mailchimp/wordpress/pull/161)).
     103
     104= 1.8.1 - 2026-01-08 =
     105* **Fixed:** Provide CSRF hardening for Mailchimp List changes (props [@iamdharmesh](https://github.com/iamdharmesh), [@joemcgill](https://github.com/joemcgill), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya)).
    95106
    96107= 1.8.0 - 2025-05-08 =
    … …  
    102113* **Changed:** Bump WordPress "tested up to" version 6.8 (props [@qasumitbagthariya](https://github.com/qasumitbagthariya), [@dkotter](https://github.com/dkotter) via [#148](https://github.com/mailchimp/wordpress/pull/148)).
    103114* **Changed:** Bump WordPress minimum supported version from 6.3 to 6.4 (props [@qasumitbagthariya](https://github.com/qasumitbagthariya), [@dkotter](https://github.com/dkotter) via [#148](https://github.com/mailchimp/wordpress/pull/148)).
     115
     116= 1.7.1 - 2026-01-08 =
     117* **Fixed:** Provide CSRF hardening for Mailchimp List changes (props [@iamdharmesh](https://github.com/iamdharmesh), [@joemcgill](https://github.com/joemcgill), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya)).
    104118
    105119= 1.7.0 - 2025-04-08 =
    … …  
    116130* **Removed:** The "Remove Mailchimp CSS" settings from the Mailchimp settings page (props [@iamdharmesh](https://github.com/iamdharmesh), [@jeffpaul](https://github.com/jeffpaul), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya) via [#126](https://github.com/mailchimp/wordpress/pull/126)).
    117131* **Security:** Bump `express` from 4.21.0 to 4.21.2 (props [@dependabot](https://github.com/apps/dependabot), [@iamdharmesh](https://github.com/iamdharmesh), [@dkotter](https://github.com/dkotter) via [#125](https://github.com/mailchimp/wordpress/pull/125)).
     132
     133= 1.6.4 - 2026-01-08 =
     134* **Fixed:** Provide CSRF hardening for Mailchimp List changes (props [@iamdharmesh](https://github.com/iamdharmesh), [@joemcgill](https://github.com/joemcgill), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya)).
    118135
    119136= 1.6.3 - 2025-01-30 =

  • mailchimp/tags/2.0.1/vendor/composer/autoload_static.php

    r3306750 r3435538  
    1212
    1313    public static $prefixLengthsPsr4 = array (
    14         'M' => 
     14        'M' =>
    1515        array (
    1616            'Mailchimp\\WordPress\\' => 20,
    … …  
    1919
    2020    public static $prefixDirsPsr4 = array (
    21         'Mailchimp\\WordPress\\' => 
     21        'Mailchimp\\WordPress\\' =>
    2222        array (
    2323            0 => __DIR__ . '/../..' . '/src',

  • mailchimp/tags/2.0.1/vendor/composer/installed.php

    r3343086 r3435538  
    22    'root' => array(
    33        'name' => 'mailchimp/wordpress',
    4         'pretty_version' => '2.0.0',
    5         'version' => '2.0.0.0',
    6         'reference' => 'f75618e4495ce73463a28d46ef80406839598c45',
     4        'pretty_version' => '2.0.1',
     5        'version' => '2.0.1.0',
     6        'reference' => 'cd230223528aa8c17041aa2e7e492caeda37e26d',
    77        'type' => 'wordpress-plugin',
    88        'install_path' => __DIR__ . '/../../',
    … …  
    1212    'versions' => array(
    1313        'mailchimp/wordpress' => array(
    14             'pretty_version' => '2.0.0',
    15             'version' => '2.0.0.0',
    16             'reference' => 'f75618e4495ce73463a28d46ef80406839598c45',
     14            'pretty_version' => '2.0.1',
     15            'version' => '2.0.1.0',
     16            'reference' => 'cd230223528aa8c17041aa2e7e492caeda37e26d',
    1717            'type' => 'wordpress-plugin',
    1818            'install_path' => __DIR__ . '/../../',

  • mailchimp/trunk/includes/admin/class-mailchimp-user-sync.php

    r3343086 r3435538  
    326326                        'You will need %1$sa Mailchimp plan%2$s that includes %3$d contact.',
    327327                        'You will need %1$sa Mailchimp plan%2$s that includes %3$d contacts.',
    328                         absint( $users_count )
     328                        absint( $users_count ),
     329                        'mailchimp'
    329330                    ),
    330331                    '<a href="https://mailchimp.com/help/about-mailchimp-pricing-plans/" target="_blank" rel="noopener noreferrer">',

  • mailchimp/trunk/includes/admin/templates/settings.php

    r3343086 r3435538  
    9595                                    <div class="mailchimp-sf-settings-list-select-button">
    9696                                        <input type="hidden" name="mcsf_action" value="update_mc_list_id" />
     97                                        <?php wp_nonce_field( 'update_mc_list_id_action', 'update_mc_list_id_nonce' ); ?>
    9798                                        <input type="submit" name="submit" value="<?php esc_attr_e( 'Fetch list settings', 'mailchimp' ); ?>" class="mailchimp-sf-button btn-secondary" />
    9899                                    </div>

  • mailchimp/trunk/includes/admin/templates/setup-page.php

    r3343086 r3435538  
    225225                                <th class="mailchimp-sf-option-header">
    226226                                    <label for="mc_nuke_all_styles">
    227                                         <?php esc_html_e( 'Remove CSS' ); ?>
     227                                        <?php esc_html_e( 'Remove CSS', 'mailchimp' ); ?>
    228228                                    </label>
    229229                                </th>
    … …  
    235235                                        </div>
    236236                                        <label for="mc_nuke_all_styles">
    237                                             <?php esc_html_e( 'This will disable all Mailchimp CSS, so it\'s recommended for WordPress experts only.' ); ?>
     237                                            <?php esc_html_e( 'This will disable all Mailchimp CSS, so it\'s recommended for WordPress experts only.', 'mailchimp' ); ?>
    238238                                        </label>
    239239                                    </div>
    … …  
    266266                                        </div>
    267267                                        <label for="mc_custom_style">
    268                                             <?php esc_html_e( 'Edit the default Mailchimp CSS style.' ); ?>
     268                                            <?php esc_html_e( 'Edit the default Mailchimp CSS style.', 'mailchimp' ); ?>
    269269                                        </label>
    270270                                    </div>

  • mailchimp/trunk/includes/class-mailchimp-form-submission.php

    r3343086 r3435538  
    100100        $interest_groups       = get_option( 'mc_interest_groups', array() );
    101101
     102        // phpcs:disable WordPress.Security.NonceVerification.Missing -- Nonce check is already done in the request_handler() function.
    102103        // Check if request from latest block.
    103104        if ( isset( $_POST['mailchimp_sf_list_id'] ) ) {
    … …  
    149150            $email_type = 'html';
    150151        }
     152        // phpcs:enable WordPress.Security.NonceVerification.Missing
    151153
    152154        $response = $this->subscribe_to_list(
    … …  
    252254
    253255            // Skip if the field is not required and not submitted.
    254             if ( ( true !== (bool) $merge_field['required'] && ! isset( $_POST[ $opt ] ) ) || $skip_merge_validation ) {
     256            if ( ( true !== (bool) $merge_field['required'] && ! isset( $_POST[ $opt ] ) ) || $skip_merge_validation ) { // phpcs:ignore WordPress.Security.NonceVerification.Missing -- Nonce check is already done in the request_handler() function.
    255257                continue;
    256258            }
    257259
     260            // phpcs:ignore WordPress.Security.NonceVerification.Missing -- Nonce check is already done in the request_handler() function.
    258261            $opt_val = isset( $_POST[ $opt ] ) ? map_deep( stripslashes_deep( $_POST[ $opt ] ), 'sanitize_text_field' ) : '';
    259262
    … …  
    340343        foreach ( $interest_groups as $interest_group ) {
    341344            $ig_id = $interest_group['id'];
     345            // phpcs:disable WordPress.Security.NonceVerification.Missing -- Nonce check is already done in the request_handler() function.
    342346            if ( isset( $_POST['group'][ $ig_id ] ) && 'hidden' !== $interest_group['type'] ) {
    343347                switch ( $interest_group['type'] ) {
    … …  
    368372                }
    369373            }
     374            // phpcs:enable WordPress.Security.NonceVerification.Missing
    370375        }
    371376        return $groups;
    … …  
    545550     */
    546551    protected function validate_form_submission() {
     552        // phpcs:disable WordPress.Security.NonceVerification.Missing -- Nonce check is already done in the request_handler() function.
    547553        $spam_message = esc_html__( "We couldn't process your submission as it was flagged as potential spam. Please try again.", 'mailchimp' );
    548554        // Make sure the honeypot field is set, but not filled (if it is, then it's a spam).
    … …  
    580586         */
    581587        return apply_filters( 'mailchimp_sf_form_submission_validation', true, $_POST );
     588        // phpcs:enable WordPress.Security.NonceVerification.Missing
    582589    }
    583590}

  • mailchimp/trunk/mailchimp.php

    r3343086 r3435538  
    55 * Description:       Add a Mailchimp signup form block, widget or shortcode to your WordPress site.
    66 * Text Domain:       mailchimp
    7  * Version:           2.0.0
     7 * Version:           2.0.1
    88 * Requires at least: 6.4
    99 * Requires PHP:      7.0
    … …  
    6868
    6969// Version constant for easy CSS refreshes
    70 define( 'MCSF_VER', '2.0.0' );
     70define( 'MCSF_VER', '2.0.1' );
    7171
    7272// What's our permission (capability) threshold
    … …  
    422422 **/
    423423function mailchimp_sf_save_general_form_settings() {
    424 
     424    // phpcs:disable WordPress.Security.NonceVerification.Missing -- Nonce check is already done in the mailchimp_sf_request_handler() function.
    425425    /*Enable double optin toggle*/
    426426    if ( isset( $_POST['mc_double_optin'] ) ) {
    … …  
    448448    if ( isset( $_POST['mc_update_existing'] ) ) {
    449449        update_option( 'mc_update_existing', true );
    450         $msg = esc_html__( 'Update existing subscribers turned On!' );
     450        $msg = esc_html__( 'Update existing subscribers turned On!', 'mailchimp' );
    451451        admin_notice_success( $msg );
    452452    } elseif ( get_option( 'mc_update_existing' ) !== false ) {
    453453        update_option( 'mc_update_existing', false );
    454         $msg = esc_html__( 'Update existing subscribers turned Off!' );
     454        $msg = esc_html__( 'Update existing subscribers turned Off!', 'mailchimp' );
    455455        admin_notice_success( $msg );
    456456    }
    … …  
    522522    $msg = esc_html__( 'Successfully Updated your List Subscribe Form Settings!', 'mailchimp' );
    523523    admin_notice_success( $msg );
     524    // phpcs:enable WordPress.Security.NonceVerification.Missing
    524525}
    525526
    … …  
    532533    }
    533534
     535    if (
     536        ! current_user_can( MCSF_CAP_THRESHOLD ) ||
     537        ! isset( $_POST['update_mc_list_id_nonce'] ) ||
     538        ! wp_verify_nonce( sanitize_key( $_POST['update_mc_list_id_nonce'] ), 'update_mc_list_id_action' )
     539    ) {
     540        wp_die( 'Security check failed.' );
     541    }
     542
    534543    if ( empty( $_POST['mc_list_id'] ) ) {
    535544        $msg = esc_html__( 'Please choose a valid list', 'mailchimp' );
    … …  
    537546        return;
    538547    }
    539 
    540     // Simple permission check before going through all this
    541     if ( ! current_user_can( MCSF_CAP_THRESHOLD ) ) { return; }
    542548
    543549    $api = mailchimp_sf_get_api();
    … …  
    606612                count( $mv )
    607613            ) . ' ' .
    608             esc_html__( 'from your list' ) . ' "' . $list_name . '"<br/><br/>' .
     614            esc_html__( 'from your list', 'mailchimp' ) . ' "' . $list_name . '"<br/><br/>' .
    609615            esc_html__( 'Now you should either Turn On the Mailchimp Widget or change your options below, then turn it on.', 'mailchimp' );
    610616

  • mailchimp/trunk/readme.txt

    r3343086 r3435538  
    22Contributors: Mailchimp
    33Tags:         mailchimp, email, newsletter, signup, marketing
    4 Tested up to: 6.8
    5 Stable tag:   2.0.0
     4Tested up to: 6.9
     5Stable tag:   2.0.1
    66License:      GPL-2.0-or-later
    77License URI:  https://spdx.org/licenses/GPL-2.0-or-later.html
    … …  
    7676
    7777== Changelog ==
     78
     79= 2.0.1 - 2026-01-08 =
     80* **Fixed:** Provide CSRF hardening for Mailchimp List changes (props [@iamdharmesh](https://github.com/iamdharmesh), [@joemcgill](https://github.com/joemcgill), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya)).
     81* **Fixed:** Plugin check plugin errors to improve overall codebase (props [@iamdharmesh](https://github.com/iamdharmesh), [@joemcgill](https://github.com/joemcgill), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya)).
     82* **Changed:** Bump WordPress "tested up to" version 6.9 (props [@iamdharmesh](https://github.com/iamdharmesh), [@joemcgill](https://github.com/joemcgill), [@qasumitbagthariya](https://github.com/qasumitbagthariya)).
    7883
    7984= 2.0.0 - 2025-08-11 =
    … …  
    9095* **Security:** Bump `http-proxy-middleware` from 2.0.6 to 2.0.9 (props [@dependabot](https://github.com/apps/dependabot), [@iamdharmesh](https://github.com/iamdharmesh) via [#180](https://github.com/mailchimp/wordpress/pull/180)).
    9196
     97= 1.9.1 - 2026-01-08 =
     98* **Fixed:** Provide CSRF hardening for Mailchimp List changes (props [@iamdharmesh](https://github.com/iamdharmesh), [@joemcgill](https://github.com/joemcgill), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya)).
     99
    92100= 1.9.0 - 2025-06-04 =
    93101* **Added:** New user synchronization feature that allows syncing WordPress users to Mailchimp (props [@iamdharmesh](https://github.com/iamdharmesh), [@jeffpaul](https://github.com/jeffpaul), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya) via [#156](https://github.com/mailchimp/wordpress/pull/156)).
    94102* **Changed:** Improved the enqueueing of JavaScript scripts and styles (props [@iamdharmesh](https://github.com/iamdharmesh), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya) via [#161](https://github.com/mailchimp/wordpress/pull/161)).
     103
     104= 1.8.1 - 2026-01-08 =
     105* **Fixed:** Provide CSRF hardening for Mailchimp List changes (props [@iamdharmesh](https://github.com/iamdharmesh), [@joemcgill](https://github.com/joemcgill), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya)).
    95106
    96107= 1.8.0 - 2025-05-08 =
    … …  
    102113* **Changed:** Bump WordPress "tested up to" version 6.8 (props [@qasumitbagthariya](https://github.com/qasumitbagthariya), [@dkotter](https://github.com/dkotter) via [#148](https://github.com/mailchimp/wordpress/pull/148)).
    103114* **Changed:** Bump WordPress minimum supported version from 6.3 to 6.4 (props [@qasumitbagthariya](https://github.com/qasumitbagthariya), [@dkotter](https://github.com/dkotter) via [#148](https://github.com/mailchimp/wordpress/pull/148)).
     115
     116= 1.7.1 - 2026-01-08 =
     117* **Fixed:** Provide CSRF hardening for Mailchimp List changes (props [@iamdharmesh](https://github.com/iamdharmesh), [@joemcgill](https://github.com/joemcgill), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya)).
    104118
    105119= 1.7.0 - 2025-04-08 =
    … …  
    116130* **Removed:** The "Remove Mailchimp CSS" settings from the Mailchimp settings page (props [@iamdharmesh](https://github.com/iamdharmesh), [@jeffpaul](https://github.com/jeffpaul), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya) via [#126](https://github.com/mailchimp/wordpress/pull/126)).
    117131* **Security:** Bump `express` from 4.21.0 to 4.21.2 (props [@dependabot](https://github.com/apps/dependabot), [@iamdharmesh](https://github.com/iamdharmesh), [@dkotter](https://github.com/dkotter) via [#125](https://github.com/mailchimp/wordpress/pull/125)).
     132
     133= 1.6.4 - 2026-01-08 =
     134* **Fixed:** Provide CSRF hardening for Mailchimp List changes (props [@iamdharmesh](https://github.com/iamdharmesh), [@joemcgill](https://github.com/joemcgill), [@dkotter](https://github.com/dkotter), [@qasumitbagthariya](https://github.com/qasumitbagthariya)).
    118135
    119136= 1.6.3 - 2025-01-30 =

  • mailchimp/trunk/vendor/composer/autoload_static.php

    r3306750 r3435538  
    1212
    1313    public static $prefixLengthsPsr4 = array (
    14         'M' => 
     14        'M' =>
    1515        array (
    1616            'Mailchimp\\WordPress\\' => 20,
    … …  
    1919
    2020    public static $prefixDirsPsr4 = array (
    21         'Mailchimp\\WordPress\\' => 
     21        'Mailchimp\\WordPress\\' =>
    2222        array (
    2323            0 => __DIR__ . '/../..' . '/src',

  • mailchimp/trunk/vendor/composer/installed.php

    r3343086 r3435538  
    22    'root' => array(
    33        'name' => 'mailchimp/wordpress',
    4         'pretty_version' => '2.0.0',
    5         'version' => '2.0.0.0',
    6         'reference' => 'f75618e4495ce73463a28d46ef80406839598c45',
     4        'pretty_version' => '2.0.1',
     5        'version' => '2.0.1.0',
     6        'reference' => 'cd230223528aa8c17041aa2e7e492caeda37e26d',
    77        'type' => 'wordpress-plugin',
    88        'install_path' => __DIR__ . '/../../',
    … …  
    1212    'versions' => array(
    1313        'mailchimp/wordpress' => array(
    14             'pretty_version' => '2.0.0',
    15             'version' => '2.0.0.0',
    16             'reference' => 'f75618e4495ce73463a28d46ef80406839598c45',
     14            'pretty_version' => '2.0.1',
     15            'version' => '2.0.1.0',
     16            'reference' => 'cd230223528aa8c17041aa2e7e492caeda37e26d',
    1717            'type' => 'wordpress-plugin',
    1818            'install_path' => __DIR__ . '/../../',
Note: See TracChangeset for help on using the changeset viewer.