Nexter Extension – ຄວາມປອດໄພ, ປະສິດທິພາບ, ໂຄດສະນິບເປັດ & ຊຸດເຄື່ອງມືເວັບໄຊ

ບັນທຶກການປ່ຽນແປງ

ເບິ່ງບັນທຶກການປ່ຽນແປງສະບັບເຕັມໄດ້ທີ່ roadmap.nexterwp.com

V4.7.11

05 October 2026
– Improved : Nexter SEO : Site Audit findings now list the pages they are about, each with a view and an edit link; the CSV and JSON exports carry the same per-item detail.
– Fixed : Custom Login URL : the hidden login address now works on Plain permalinks. The address the plugin generated opened the home page instead of the login form, leaving no way in.
– Fixed : View Admin Role Switcher : switching back to your own account no longer breaks when the feature is turned off or an unrelated profile save clears the stored role, and the Switch back button now also appears on the front end.
– Fixed : Nexter SEO : the post-import check no longer reports a correct import as failed; it now checks only the fields the import actually wrote, against the value that was stored.
– Fixed : Code Snippets : a PHP snippet could break admin screens and JSON replies, such as the Site Audit, by printing text into them. Snippet output is now discarded during REST and JSON requests, so snippets that register REST routes still work.
– Fixed : Image Optimisation : AVIF and WebP copies are now served through a picture element, so Safari on iPhone and iPad and search-engine crawlers no longer receive the original JPG or PNG.
– Fixed : Nexter SEO : No Index, No Follow, No Archive and Exclude from Sitemap now save for a post type that only exists in admin screens, such as Complianz’s, and an unrelated save no longer erases them.

V4.7.10

22 September 2026
– Added : Nexter SEO : the Yoast import now brings across your Organization name and logo into Nexter’s Organization schema, so your site identity in search results survives the migration. Anything you had already set there is kept.
– Added : Nexter SEO : Rank Math’s custom robots.txt rules are now imported, so paths you blocked from crawlers stay blocked after the migration. Your own robots.txt is never replaced.
– Added : Nexter SEO : WooCommerce URL bases can now be removed — separate toggles under Advanced shorten /product/, /product-category/ and /product-tag/ URLs, the old URLs are redirected, and a product or term whose slug is already used by a page or post keeps its original URL instead of taking one that is in use.
– Added : Nexter SEO : the Rank Math and AIOSEO import previews now list the source plugin’s 404 log as “will be skipped” instead of dropping it with no notice.
– Added : Nexter SEO : an Advanced setting to strip the /category/ base from category URLs (e.g. /category/news/ → /news/).
– Added : Nexter SEO : an admin notice offering one-click migration when Yoast, Rank Math, SureRank or All in One SEO is detected active alongside Nexter SEO.
– Added : Nexter SEO : Import from Yoast SEO, Rank Math, SureRank and All in One SEO — a new “Migrate From Other SEO Plugins” tab detects your existing SEO data, previews exactly what would change, then imports it in resumable batches. Anything you already set in Nexter SEO is kept rather than replaced, and the other plugin’s own data is never deleted.
– Added : Nexter SEO : Per-page schema type is now carried across during the import, and redirects keep their matching mode including regex.
– Added : Nexter SEO : Redirections now support a Regex match type, with $1 backreferences in the destination.
– Compatibility : Nexter SEO : All in One SEO (Lite and Pro) import reads its own database tables, respects per-post “use default” robots and Twitter-mirrors-Facebook settings, and brings across Pro term SEO and redirects — case- and slash-insensitive ones keep matching the same way.
– Compatibility : Nexter SEO : Rank Math PRO — when a post carries several schemas the one marked primary is imported, and schema templates, Local SEO locations and redirect categories are listed in the preview rather than silently dropped.
– Compatibility : Nexter SEO : SureRank Business redirects are now imported, with “Contains” and “Ends With” rules kept matching exactly as they do in SureRank.
– Improved : SMTP Email : the “SMTP Password” field now shows a tooltip explaining that, for providers like Brevo, SendGrid and Mailgun, this value is an API key rather than an account password.
– Improved : Nexter SEO : the migration preview now warns before you start if the redirects being imported contain a loop, and tells you how many are over the redirect-rule limit. The preview works this out by running the same import in a no-write mode, so it and the import can never disagree.
– Improved : Nexter SEO : importing categories and tags from Yoast is dramatically faster on large sites, and no longer slows down the further it gets. Picking the next batch used to check every term one at a time, and then still had to read back every term already imported, so a big catalogue crawled towards the end. Each batch now asks only about the terms it is about to take.
– Improved : Nexter SEO : the migration preview now names each setting in plain language instead of showing the raw database key, with the key kept underneath for developers.
– Improved : Nexter SEO : the migration preview now recommends a backup and states plainly that the import writes to your database and cannot be undone from that screen.
– Improved : Nexter SEO : the migration preview now warns about every value it would leave alone, not just titles and descriptions. Canonical URLs, social fields, schema type and your robots settings are all counted, with robots listed separately so a page you deliberately kept out of search is easy to spot.
– Improved : Nexter SEO : the migration preview now tells you when the other plugin has per-author SEO settings, which Nexter has no field for and does not import. Previously those were lost with nothing said.
– Improved : Nexter SEO : the migration preview now says when settings will be flattened rather than changing them silently — the per-post-type and per-taxonomy templates that become one site-wide pair, the per-language settings on a Polylang or WPML site, and Yoast’s Organization name and logo.
– Improved : Nexter SEO : the “already running” message now says how long the lock has left and points to Reset markers, instead of only suggesting a page reload.
– Improved : Nexter SEO : each llms.txt number setting now explains what it does, including a warning on Freshness Window that any value above 0 leaves older content out.
– Improved : Nexter SEO : The import shows the current step, retries a batch that hits a temporary error, lists anything that did not finish, and checks the imported values afterwards.
– Improved : Nexter SEO : Importing another plugin’s per-type noindex choices adds to the ones you already set instead of replacing them, and the preview shows the combined result.
– Improved : Translations : the translation template now points at the real source files instead of the compiled bundles, so translators can see where each string actually lives and the file no longer changes on every build.
– Fixed : SMTP Email : Custom SMTP no longer forces the From address to the SMTP username on providers like Brevo, SendGrid and Mailgun, where the username is an API-key-style value rather than a sendable address. The configured “From Email” is now used as long as it is set; the username is only used as the From address for Yandex, which requires the match, or as a last-resort fallback when no From Email was configured.
– Fixed : Nexter SEO : social cards on category and tag pages now use the archive title and description templates, the same ones the page’s own title uses. They were using the post templates, so the card and the page disagreed on any site that had customised the two differently.
– Fixed : Nexter SEO : an “@” followed by a word is no longer deleted from titles and descriptions. Any @word was being treated as a template variable and then removed, so “Follow @posimyth for updates” rendered as “Follow for updates” and email addresses lost their domain. Only real variable names are expanded now, and never inside an email address.
– Fixed : Code Snippets : a snippet created or updated through the AI assistant can no longer be saved to a placement that never runs. A placement name the runtime did not recognise was stored as given, so the snippet saved cleanly and then did nothing; unrecognised names now fall back to the same default the dashboard uses, and spelling variants like “front_end” or “site-header” are understood.
– Fixed : dismissing an admin notice with the “x” now sticks. Four notices — the Nexter SEO suggestion, “Nexter Blocks installed”, and both Image Optimization notices — wrote their security token into the page in a way browsers read incorrectly, so the dismissal was rejected and the notice returned on every single admin page load.
– Fixed : Nexter SEO : a SureRank site that never changed its author or date archive setting no longer has those archives switched back on by the import. SureRank ships them off and Nexter ships them on, and only an explicitly saved value was being read.
– Fixed : Nexter SEO : importing from All in One SEO no longer redirects author or date archives away when they were only meant to be hidden from search engines. “Show in search results: off” now becomes a noindex, as it does in AIOSEO.
– Fixed : Nexter SEO : the Yoast import now reads social profiles from where Yoast has stored them since version 20, instead of only the older per-network fields. Profiles added recently were being dropped and ones removed years ago brought back.
– Fixed : Nexter SEO : the Yoast import now brings across the home page’s social card. The title, description and image were read from the place Yoast kept them before version 14, so on any current Yoast site the home page card came over empty.
– Fixed : Nexter SEO : the imported Organization name and logo now land on a site that has no Organization schema row. The import wrote into an existing row only, so on those sites it quietly did nothing even though the preview said the identity would be brought across. The row is now created from the shipped default when there isn’t one, and a name or logo you had already typed is still never replaced.
– Fixed : translators’ notes now reach the translation files correctly. Some notes sat too far from the text they described and were dropped during extraction, and a few phrases used in more than one place carried conflicting notes, so only one of them survived. Affected the theme builder display conditions, the SMTP PHP version notice, Image Optimization messages, the SEO schema fields and the template importer’s invalid post type error.
– Fixed : Nexter SEO : the Pro white label now applies to the migration screen as well. Every message on it — the preview notes, the progress counts and the check afterwards — said “Nexter SEO” no matter what you had rebranded the plugin to, while the rest of the SEO screens used your own name.
– Fixed : Nexter SEO : the migration preview now tells you when a Yoast or Rank Math site has its own title and description templates for other post types and taxonomies. Nexter keeps one pair for posts and one for archives, so those templates are not brought across — the preview names each affected type instead of leaving you to discover it. All in One SEO already listed this.
– Fixed : Nexter SEO : a Yoast redirect whose response code Nexter cannot serve is now skipped and listed in the preview, instead of being quietly turned into a 301.
– Fixed : Regenerate Thumbnails : regeneration no longer stops with a fatal error. It called WordPress’s metadata filter with one argument missing, which crashed any correctly written plugin listening on it — including Nexter’s own SVG Upload — and took the whole batch down with it, for JPEG, PNG and WebP alike.
– Fixed : Image Optimization : thumbnails no longer 404 or show blank in the Media Library when an image’s full size was optimised but its thumbnails were not. Each size is now resolved on its own: the optimised copy when there is one, otherwise the normal WordPress thumbnail. Image URLs that another plugin or a CDN has already changed are left alone.
– Fixed : Nexter SEO : “Reset markers” now also removes the values the import itself wrote, so re-running an import picks up anything that changed in the other plugin. Values you set yourself are kept. Previously the reset cleared only the markers, and the re-run found Nexter’s fields already filled and changed nothing.
– Fixed : Nexter SEO : an import that is cut short no longer treats its own half-written values as yours when it resumes. It now records what it wrote, so it corrects its own work and still never overwrites a value you set.
– Fixed : Nexter SEO : two imports of the same source can no longer start at once and import the same batch twice. The lock now uses a database-level guarantee instead of one that could be defeated by a stale cache, which was most likely on sites with a persistent object cache.
– Fixed : Nexter SEO : the migration preview no longer shows a server error page when one row in the other plugin’s data cannot be read. It now explains what happened and lets you continue, the same way the import itself already did.
– Fixed : Nexter SEO : starting an import on a site with no data from the chosen plugin now reports that clearly, instead of reporting a finished import that did nothing.
– Fixed : Nexter SEO : imported Regex redirects now match. A pattern anchored at the start, such as ^old-path/(.*)$, never matched the incoming request, so every one of them silently fell through to a 404.
– Fixed : Nexter SEO : redirects now work on a subdirectory Multisite subsite. The subsite’s own path segment was part of every request, which no imported rule accounted for.
– Fixed : Nexter SEO : importing redirects now respects the 2,000-rule limit and reports how many rules were left out, instead of writing an unbounded list that the front end then walks on every request. The imported rules are also checked for redirect loops.
– Fixed : Security : Nexter SEO : data read from another SEO plugin’s own database tables and options can no longer create PHP objects while it is being imported.
– Fixed : Nexter SEO : schema values in Hindi, Japanese, Arabic and other non-Latin scripts are now stored as readable text instead of escaped codes, so a site migration’s search-replace and database searches find them.
– Fixed : activating any plugin through an older WP-CLI (before 2.12) no longer aborts the command while Nexter Extension is active. The plugin did activate, but the script stopped with a fatal type error and anything queued after it never ran.
– Fixed : Nexter SEO : the SureRank import now reads SureRank’s grouped settings, so page title, meta description, canonical URL, the Facebook and X fields and the schema type all come across. Previously only the robots flags did.
– Fixed : Nexter SEO : text holding a literal percent sign, such as “Save 50%-70% today”, is no longer partly deleted when it is imported from Rank Math or SureRank.
– Fixed : Nexter SEO : canonical URLs and social image URLs with percent-encoded characters, such as /caf%C3%A9/, are now imported exactly as they are instead of being corrupted.
– Fixed : Nexter SEO : Rank Math sites that kept author or date archives switched on no longer lose them to the import. Rank Math stores “enabled” as the word “off”, which was being read as “disabled”.
– Fixed : Nexter SEO : a Rank Math date-archive noindex is now imported only when Rank Math was actually applying it, instead of every time its prefilled default was present.
– Fixed : Nexter SEO : Nexter now steps aside when SureRank is also active, so a page no longer renders two canonical tags and two conflicting og:title values.
– Fixed : Nexter SEO : the Yoast import reads the Pinterest verification code from the option Yoast actually stores it in, so the Pinterest domain claim survives the migration.
– Fixed : Nexter SEO : the Yoast import no longer counts a noindexed category or tag twice in its “fields written” total.
– Fixed : Nexter SEO : the post-import check now reports a failure when it could not read anything, covers categories and tags as well as posts, includes the robots settings, and compares the imported values rather than only checking that something is there.
– Fixed : Nexter SEO : the llms.txt Freshness Window now keeps content that was recently updated, not only recently published, so evergreen pages and maintained posts are no longer dropped from the file.
– Fixed : Nexter SEO : the “Settings that change” import preview no longer overflows the page when an “After import” value is a long JSON blob; it is now truncated with an ellipsis and the full value on hover, same as long text values.
– Fixed : Nexter SEO : title, description, canonical URL and social text copied in from Yoast, Rank Math, AIOSEO and SureRank are now sanitized at write time instead of relying only on output-side escaping.
– Fixed : Nexter SEO : No Index / No Follow / No Archive and “Exclude from Sitemap” now save for post types like Complianz’s that aren’t marked “public” but still have live front-end URLs.
– Fixed : Nexter SEO : the post editor’s Social tab now previews the featured image when no image override is set, instead of always previewing the default social image.
– Fixed : Nexter SEO : removed the Advanced “Noindex Attachments” toggle, which never actually noindexed anything. Attachment pages are now noindexed by default through Robots Instructions, the setting that does work — turn it back on there if you’d rather have them indexed.
– Fixed : Nexter SEO : Rank Math redirects that match part of a URL now keep matching after import, and a Regex redirect no longer loses backslashes such as \d.
– Fixed : Security : Updated the bundled Guzzle (7.15.5), PSR-7 (2.13.1) and svg-sanitize (0.22.0) libraries to versions without known advisories, including CVE-2026-69246 and CVE-2025-55166.
– Fixed : Replace URL : a search and replace on a table whose primary key spans more than one column could overwrite rows that did not match the search at all. Each row is now updated by its full primary key, so only the row the change was found in is touched.
– Fixed : Replace URL : a blank or non-numeric “Limit” value no longer leaves the search and replace running until the request times out, and rows are now read in a fixed order so a large table cannot have some of its rows skipped.
– Fixed : Translations : the SEO import progress messages and the thumbnail regeneration counters now carry translator notes explaining what each number refers to, so a translated copy cannot describe the wrong thing.
– Fixed : Blocks : the Free / Freemium / Pro badge on the Blocks screen now translates. It was built from a value read at runtime, which the translation system cannot collect, so the badge stayed in English in every language.
– Fixed : Nexter SEO : a plugin you have already imported from is no longer a dead end on the migration screen. It said everything had been imported and greyed the button out, while the only control that clears the markers sat on the screen you reach after running an import — so there was no way to run it again, which is what people hit after deleting and reinstalling. Each already-imported source now offers “Import it again” on the spot.
– Fixed : Nexter SEO : deleting the plugin now also clears the migration’s run state and any leftover import lock, so a reinstall does not begin with a stale lock or a half-finished run on record. Imported values and settings are left untouched.

V4.7.9

07 September 2026
– Improvement : Nexter SEO : The image ALT warning now names every image it flagged, including slider and images that carry no plain src attribute.
– Fixed : Code Snippets : snippets added through the AI assistant now run. They were saved with a placement name the runtime did not recognise, so PHP, CSS, JavaScript and HTML snippets were all stored correctly but never executed.
– Fixed : Code Snippets : a PHP snippet created by the AI assistant now runs everywhere by default, the same as one added from the dashboard.
– Fixed : SEO : the SEO screens are now fully translated. Roughly half their strings sit in separate bundle files that WordPress was never told to load a translation file for, so those stayed English in every language.
– Fixed : Theme Builder : blocks and panels that use WordPress’s built-in code editor now load on Theme Builder screens. The builder was unregistering WordPress’s CodeMirror handle, which silently dropped every script that depended on it.
– Fixed : Image Optimization : single and bulk optimisation no longer fail with a server error on large media libraries. Each image converted its original and every thumbnail size in one request; that work is now split into small batches.
– Fixed : Image Optimization : the bulk screen now shows the real counts in its progress line instead of the raw “%1$d of %2$d images optimised” text, and the message under it is translatable.
– Fixed : Nexter SEO : the Orphan Pages check now reads the links in the served homepage, so pages linked only from a page-builder or theme-coded header are no longer reported as orphaned.
– Fixed : Code Snippets : importing a snippet that already exists is now blocked instead of silently creating a second copy. Two copies of a snippet that declares a PHP function crashed every page including the login screen.
– Fixed : Code Snippets : the two bundled snippets that declare a PHP function or constant are now wrapped in function_exists() / defined() guards, so a duplicate can no longer be fatal. Sites that already had the unguarded copies are repaired automatically on update.

V4.7.8

20 ສິງຫາ 2026
– ຄວາມເຂົ້າກັນໄດ້ : WordPress 7.1 : ດຽວນີ້ຮອງຮັບຕົວຕອງຮອບວຽນຂອງ Abilities API ແລ້ວ, ເພື່ອໃຫ້ຕົວແທນ AI ສາມາດອ່ານຊ້ຳໄດ້ໄວຂຶ້ນ, ມີຂໍ້ຜິດພາດທີ່ຊັດເຈນຂຶ້ນເມື່ອບໍ່ມີຂໍ້ມູນ, ແລະ ສະວິດທີ່ຮັບຄ່າ “on” ຫຼື “yes” ໄດ້. ບໍ່ມີຜົນກະທົບໃດໆກ່ອນລຸ້ນ WordPress 7.1.
– ແກ້ໄຂ : ໂຄດສະນິບເປັດ : ການເປີດໃຊ້, ແກ້ໄຂ ຫຼື ເພີ່ມຊຸດໂຄດຈະມີຜົນໃນການໂຫຼດໜ້າເວັບຄັ້ງຕໍ່ໄປ. ກ່ອນໜ້ານີ້ລາຍການຊຸດໂຄດໃນແຄຊຈະຖືກໂຫຼດໃໝ່ຈາກແຜງຄວບຄຸມເທົ່ານັ້ນ, ສະນັ້ນການປ່ຽນແປງດ້ວຍວິທີອື່ນຈຶ່ງເບິ່ງຄືວ່າບໍ່ມີຫຍັງເກີດຂຶ້ນຈົນກວ່າແຄຊຈະໝົດອາຍຸ.
– ແກ້ໄຂ : ໂຄດສະນິບເປັດ : ຂໍ້ຜິດພາດຮ້າຍແຮງ (fatal error) ໃນທຸກໜ້າແອັດມິນເມື່ອການຕັ້ງຄ່າຊຸດໂຄດທີ່ບັນທຶກໄວ້ເກັບຄ່າດຽວແທນທີ່ຈະເປັນລາຍການ; ການຍ້າຍໄຟລ໌ຄັ້ງດຽວບໍ່ສາມາດສຳເລັດໄດ້, ດັ່ງນັ້ນມັນຈຶ່ງພະຍາຍາມໃໝ່ ແລະ ລົ້ມເຫຼວອີກຄັ້ງໃນທຸກໆຄຳຂໍ, ເຮັດໃຫ້ແຜງຄວບຄຸມຖືກລັອກ.

V4.7.7

19 ສິງຫາ 2026
– ການປັບປຸງ : ຄວາມປອດໄພ : ລະຫັດຜ່ານ SMTP ແລະ ໂທເຄັນ Google OAuth ດຽວນີ້ຖືກເຂົ້າລະຫັດໃນຖານຂໍ້ມູນແລ້ວ. ຂໍ້ມູນການເຂົ້າສູ່ລະບົບທີ່ບັນທຶກໄວ້ໂດຍເວີຊັນກ່ອນໜ້າຍັງຄົງໃຊ້ງານໄດ້ ແລະ ຈະຖືກແປງໃນການບັນທຶກຄັ້ງຕໍ່ໄປ.
– ການປັບປຸງ : ສ້າງຮູບຫຍໍ້ໃໝ່ : ປັອບອັບດຽວນີ້ສະແດງແຖບຄວາມຄືບໜ້າ, ການນັບສົດ, ປຸ່ມຢຸດ ແລະ ລາຍຊື່ຮູບພາບທີ່ມັນບໍ່ສາມາດປະມວນຜົນໄດ້.
– ການປັບປຸງ : ສ້າງຮູບຫຍໍ້ໃໝ່ : ຮູບພາບຖືກປະມວນຜົນເປັນຊຸດ, ລວມທັງ WebP ແລະ AVIF, ແລະ ໄຟລ໌ທີ່ອ່ານບໍ່ໄດ້ຈະບໍ່ສາມາດລຶບຂໍ້ມູນຮູບພາບທີ່ເກັບໄວ້ຂອງໄຟລ໌ແນບໄດ້ອີກຕໍ່ໄປ.
– ການປັບປຸງ : Nexter SEO : ຄຳເຕືອນ ALT ຂອງຮູບພາບດຽວນີ້ຈະບອກຊື່ໄຟລ໌ທີ່ມັນໝາຍໄວ້ແທນທີ່ຈະບອກພຽງແຕ່ຈຳນວນ.
– ການປັບປຸງ : Nexter SEO : ການກວດສອບ ALT ຂອງການກວດສອບໄດ້ຖືກຕິດປ້າຍວ່າ “ໜ້າຫຼັກທີ່ສະແດງຜົນ”, ເພື່ອໃຫ້ຊັດເຈນວ່າເປັນຫຍັງຈຳນວນຈຶ່ງອາດແຕກຕ່າງຈາກແຜງ SEO ແບບໜ້າດຽວ.
– ແກ້ໄຂ : Nexter SEO : ຄັງເກັບຜູ້ຂຽນ ແລະ ວັນທີຈະບໍ່ຖືກປິດໄວ້ຕາມຄ່າເລີ່ມຕົ້ນອີກຕໍ່ໄປ. ເວັບໄຊທີ່ຕັ້ງໃຈປິດໄວ້ຈະຍັງຄົງຮັກສາການຕັ້ງຄ່າຂອງພວກເຂົາ.
– ແກ້ໄຂ : Nexter SEO : ການກວດສອບໜ້າກຳພ້າດຽວນີ້ຈະນັບລິ້ງນຳທາງ, ສ່ວນຫົວ ແລະ ສ່ວນທ້າຍ, ດັ່ງນັ້ນໜ້າທີ່ຖືກລິ້ງຈາກເມນູຈະບໍ່ຖືກລາຍງານວ່າເປັນໜ້າກຳພ້າອີກຕໍ່ໄປ.
– ແກ້ໄຂ : Nexter SEO : ການກວດສອບ ALT ຮູບພາບຕໍ່ໜ້າຈະບໍ່ນັບຮູບພາບສະໄລເດີ, ຮູບພາບທີ່ໂຫຼດແບບຊັກຊ້າ (lazy-load), ຮູບພາບຕົກແຕ່ງ ຫຼື ຮູບພາບຕິດຕາມອີກຕໍ່ໄປ.
– ແກ້ໄຂ : ການປ່ຽນເສັ້ນທາງ SEO : “ຈັບຄູ່ແທ້ຈິງໃນລຳດັບໃດກໍໄດ້” ເຄີຍຈັບຄູ່ກັບ query string ໃດກໍໄດ້; ດຽວນີ້ມັນຈະຈັບຄູ່ສະເພາະເມື່ອມີພາຣາມິເຕີຄືກັນເທົ່ານັ້ນ, ໃນລຳດັບໃດກໍໄດ້.
– ແກ້ໄຂ : ການປ່ຽນເສັ້ນທາງ SEO : “ບໍ່ສົນໃຈ ແລະ ສົ່ງພາຣາມິເຕີໄປຫາເປົ້າໝາຍ” ບໍ່ເຄີຍສົ່ງຕໍ່ເລີຍ; ດຽວນີ້ query string ຂອງຜູ້ເຂົ້າຊົມຈະໄປຮອດປາຍທາງແລ້ວ.
– ແກ້ໄຂ : URL ເຂົ້າສູ່ລະບົບກຳນົດເອງ : ດ້ວຍພຶດຕິກຳ “ໜ້າ 404”, wp-login.php ຍັງຄົງເປີດຟອມເຂົ້າສູ່ລະບົບຈິງ ແລະ ລິ້ງລົງທະບຽນໄດ້ເປີດເຜີຍທີ່ຢູ່ເຂົ້າສູ່ລະບົບທີ່ເຊື່ອງໄວ້.
– ແກ້ໄຂ : URL ເຂົ້າສູ່ລະບົບກຳນົດເອງ : ການເຂົ້າເບິ່ງ wp-admin ໃນຂະນະທີ່ອອກຈາກລະບົບໄດ້ສົ່ງເບຣົາເຊີໄປຫາທີ່ຢູ່ທີ່ບໍ່ມີຄວາມໝາຍ; ດຽວນີ້ມັນຈະຕອບດ້ວຍໜ້າ 404 ທີ່ຖືກຕ້ອງຢູ່ URL ດຽວກັນແລ້ວ.
– ແກ້ໄຂ : URL ເຂົ້າສູ່ລະບົບກຳນົດເອງ : wp-signup.php ຕອບດ້ວຍຂໍ້ຜິດພາດເຊີບເວີແທນທີ່ຈະເປັນໜ້າບໍ່ພົບ ເມື່ອເວັບໄຊບໍ່ແມ່ນເຄືອຂ່າຍ (network).
– ແກ້ໄຂ : ສ້າງຮູບຫຍໍ້ໃໝ່ : ຄຸນສົມບັດນີ້ດຽວນີ້ເຮັດວຽກດ້ວຍຕົວມັນເອງແລ້ວ; ກ່ອນໜ້ານີ້ມັນຈະໂຫຼດສະເພາະເມື່ອຂະໜາດຮູບພາບກຳນົດເອງ ຫຼື ປິດຂະໜາດຮູບພາບຖືກເປີດໃຊ້ງານ.
– ແກ້ໄຂ : ສ້າງຮູບຫຍໍ້ໃໝ່ : ປຸ່ມດຽວນີ້ຈະລາຍງານຄວາມຄືບໜ້າຈິງ ແລະ ສະຖານະສຳເລັດ ແທນທີ່ຈະຄ້າງຢູ່ທີ່ “ກຳລັງສ້າງໃໝ່…” ຕະຫຼອດໄປ.
– ແກ້ໄຂ : ປິດຂະໜາດຮູບພາບ : ການປິດຂະໜາດໃດໜຶ່ງດຽວນີ້ຈະຢຸດການສ້າງໄຟລ໌ນັ້ນແທ້ໆ; ກ່ອນໜ້ານີ້ຂະໜາດ Thumbnail, Medium, Medium Large ແລະ Large ຍັງຄົງຖືກສ້າງຢູ່.
– ແກ້ໄຂ : ຟອນກຳນົດເອງ : ໄຟລ໌ TTF, OTF, WOFF ແລະ WOFF2 ສາມາດອັບໂຫຼດໄດ້ແລ້ວ; ການອັບໂຫຼດຄັ້ງທຳອິດເຄີຍຖືກປະຕິເສດສະເໝີກ່ອນທີ່ສ່ວນຂະຫຍາຍຈະຖືກບັນທຶກ.
– ແກ້ໄຂ : ເມນູແອັດມິນກວ້າງຂຶ້ນ : ຄວາມກວ້າງຂອງເມນູດຽວນີ້ສາມາດບັນທຶກໄດ້ແລ້ວ; ມັນເຄີຍຖືກຍົກເລີກໃນທຸກໆການບັນທຶກ ແລະ ເມນູຍັງຄົງຢູ່ທີ່ຄ່າເລີ່ມຕົ້ນ.
– ແກ້ໄຂ : ການນຳເຂົ້າເທັມເພລດ : ຕົວນຳເຂົ້າ WordPress ທີ່ມາກັບລະບົບສາມາດຖືກຮ້ອງຂໍໂດຍກົງຈາກພາຍນອກ WordPress ໄດ້, ແລະ ໄຟລ໌ສົ່ງອອກທີ່ຖືກສ້າງຂຶ້ນມາພິເສດອາດຈະຂຽນທັບຄ່າພາຍໃນໃນຂະນະທີ່ນຳເຂົ້າເມນູ.
– ແກ້ໄຂ : ຄວາມປອດໄພ : View Admin Role ສາມາດປ່ຽນບົດບາດຂອງບັນຊີອື່ນຈາກຄຳຂໍທີ່ບໍ່ໄດ້ຢືນຢັນຕົວຕົນ, ແລະ ການກວດສອບສິດການໃຫ້ບົດບາດຖືກປິດໄວ້.
– ແກ້ໄຂ : ຄວາມປອດໄພ : ການຕິດຕັ້ງປລັກອິນ ແລະ ທີມໄດ້ດຶງຂໍ້ມູນລາຍລະອຽດຂອງພວກມັນຜ່ານການເຊື່ອມຕໍ່ທີ່ບໍ່ໄດ້ເຂົ້າລະຫັດ ແລະ ຕິດຕັ້ງທີ່ຢູ່ດາວໂຫຼດໃດໆກໍຕາມທີ່ສົ່ງກັບມາ.
– ແກ້ໄຂ : ຄວາມປອດໄພ : ຕົວຈຳກັດການເຂົ້າສູ່ລະບົບໄວ້ໃຈ headers forwarded-for ທີ່ຜູ້ເຂົ້າຊົມສາມາດຕັ້ງຄ່າໄດ້, ດັ່ງນັ້ນຈຶ່ງສາມາດຫຼີກລ່ຽງການຈຳກັດ ຫຼື ໃຊ້ເພື່ອລັອກຜູ້ອື່ນອອກຈາກລະບົບໄດ້.
– ແກ້ໄຂ : ຄວາມປອດໄພ : ຄຳຂໍນຳເຂົ້າເທັມເພລດສາມາດລະບຸຊື່ວິທີການພາຍໃນໃດກໍໄດ້ເພື່ອໃຊ້ງານ; ດຽວນີ້ຮັບສະເພາະການສົ່ງອອກ ແລະ ນຳເຂົ້າເທົ່ານັ້ນ.
– ແກ້ໄຂ : ຄວາມປອດໄພ : ການຄົ້ນຫາໂພສຂອງຕົວສ້າງສາມາດຖືກເອີ້ນໃຊ້ໂດຍຜູ້ໃຊ້ທີ່ເຂົ້າສູ່ລະບົບໃດກໍໄດ້ ແລະ ສົ່ງຄືນທຸກໂພສທີ່ກົງກັນຂອງທຸກປະເພດ.
– ແກ້ໄຂ : ຄວາມປອດໄພ : ຫຼາຍຈຸດສິ້ນສຸດ (endpoints) ຂອງເງື່ອນໄຂຕົວສ້າງ ແລະ ຈຸດສິ້ນສຸດການເປີດໃຊ້ໃບອະນຸຍາດສາມາດຖືກເອີ້ນໃຊ້ໂດຍບໍ່ມີສິດທີ່ຖືກຕ້ອງ.
– ແກ້ໄຂ : ຄວາມປອດໄພ : ການປິດແຈ້ງເຕືອນແອັດມິນຈະບໍ່ສາມາດຖືກກະຕຸ້ນຈາກເວັບໄຊອື່ນໃນນາມຂອງຜູ້ເບິ່ງແຍງລະບົບໄດ້ອີກຕໍ່ໄປ.
– ແກ້ໄຂ : ຄວາມປອດໄພ : ສະຄຣິບຕົວຢ່າງ PHPMailer ທີ່ບໍ່ໄດ້ໃຊ້ຈະບໍ່ຖືກລວມມາອີກຕໍ່ໄປ, ມີສິບໄຟລ໌ທີ່ສາມາດຖືກຮ້ອງຂໍຈາກພາຍນອກ WordPress ໄດ້, ແລະ ທຸກໂຟນເດີປລັກອິນດຽວນີ້ມີໄຟລ໌ index.php ເປົ່າ ເພື່ອບໍ່ໃຫ້ສາມາດເລືອກເບິ່ງລາຍຊື່ໄຟລ໌ໃນໂຟນເດີໄດ້.

V4.7.6

13 ສິງຫາ 2026
– ແກ້ໄຂ : ການປ່ຽນເສັ້ນທາງ SEO : ກົດລະບຽບທີ່ເສຍໜຶ່ງອັນຈະບໍ່ຢຸດການບັນທຶກການປ່ຽນເສັ້ນທາງໃໝ່ທັງໝົດອີກຕໍ່ໄປ; ກົດລະບຽບທີ່ຊີ້ໄປຫາ URL ຂອງມັນເອງຈະຖືກຂ້າມໄປເມື່ອກວດສອບກົດລະບຽບອື່ນສຳລັບການວົນລູບ (loops)
– ແກ້ໄຂ : ຍ້ອນກັບ (Rollback) : ການເລືອກເວີຊັນໃນເມນູເລື່ອນລົງດຽວນີ້ເຮັດວຽກແລ້ວ; ທຸກໆການຍ້ອນກັບເຄີຍຖືກສົ່ງໄປຫາເວີຊັນທີ່ຕິດຕັ້ງຢູ່ແລ້ວ ແລະ ຖືກປະຕິເສດດ້ວຍຂໍ້ຄວາມ “ລອງເລືອກເວີຊັນອື່ນ.”
– ແກ້ໄຂ : ຄວາມປອດໄພ : ການເປີດໃຊ້ໃບອະນຸຍາດດຽວນີ້ຈະກວດສອບໃບຢັ້ງຢືນ SSL, ດັ່ງນັ້ນຄີໃບອະນຸຍາດຈະບໍ່ຖືກສົ່ງຜ່ານການເຊື່ອມຕໍ່ທີ່ອາດຖືກດັກຈັບໄດ້ອີກຕໍ່ໄປ
– ແກ້ໄຂ : ໂຄດສະນິບເປັດ : ແອດທຣິບິວຊອດໂຄດ (shortcode) ຈະບໍ່ສາມາດຂຽນທັບໂຄດຂອງຊຸດໂຄດເອງ, ຫຼື ຄ່າພາຍໃນອື່ນໆ, ກ່ອນທີ່ຊຸດໂຄດຈະເຮັດວຽກໄດ້ອີກຕໍ່ໄປ
– ແກ້ໄຂ : Multisite : ດຽວນີ້ Super Admin ສາມາດຈັດການໂຄດສະນິບເປັດ ແລະ ເທັມເພລດຕົວສ້າງທີມເທິງເວັບໄຊເຄືອຂ່າຍໄດ້ໂດຍບໍ່ຈຳເປັນຕ້ອງໄດ້ຮັບບົດບາດຜູ້ເບິ່ງແຍງລະບົບ (administrator) ຢູ່ທີ່ນັ້ນນຳ
– ແກ້ໄຂ : i18n : ປ້າຍຊື່ cron ຂອງການກວດສອບ SEO ແລະ ຕົວປັບແຕ່ງຮູບພາບຈະບໍ່ໂຫຼດການແປພາສາກ່ອນທີ່ WordPress ຈະພ້ອມອີກຕໍ່ໄປ, ເຊິ່ງເຄີຍບັນທຶກຄຳເຕືອນ “translation loading was triggered too early” ທຸກຄັ້ງທີ່ປລັກອິນອື່ນກຳນົດເວລາງານໃນລະຫວ່າງການເລີ່ມຕົ້ນລະບົບ
– ແກ້ໄຂ : i18n : ແຈ້ງເຕືອນເວີຊັນ PHP ຂອງ SMTP ດຽວນີ້ສາມາດແປໄດ້ແລ້ວ; ຕົວເລກເວີຊັນເຄີຍຖືກແຊກເຂົ້າໄປໃນຂໍ້ຄວາມກ່ອນທີ່ມັນຈະຖືກສົ່ງໃຫ້ຟັງຊັນແປພາສາ, ດັ່ງນັ້ນຂໍ້ຄວາມຈຶ່ງບໍ່ເຄີຍໄປຮອດໄຟລ໌ແປພາສາເລີຍ

V4.7.5

07 August 2026
– Improvement : Performance : feature-usage scans read content in bounded, ordered batches so nothing is double-counted or skipped, and the consent notice’s styles load once per page
– Fixed : Rollback : the rollback link showed the literal text “NEXTER_EXT_VER” instead of the version number
– Fixed : Performance : the analytics payload is assembled after the page has been sent, and the user count is cached for a day instead of counting the whole user table each time
– Fixed : Performance : on servers that cannot flush the response early (mod_php, …