Soledad - Multi-Concept Blog/Magazine Theme

Versión 8.7.7 — 27 septiembre 2026

• Seguridad Restricted theme patch installation to administrators, validated patch manifests and destination paths, and required verified HTTPS downloads.
• Seguridad Added permission checks and upload-directory validation to the bundled Meta Box file deletion handler. See inc/dashboard/lib/meta-box/SECURITY-BACKPORT.md for details.
• Seguridad Protected multi-taxonomy AJAX filters with signed query settings and validated taxonomy, term, and pagination inputs. Filtered requests now return at most 50 posts per page.
• Seguridad Limited Elementor author lookup endpoints to users who can edit posts and capped lookup results.
• Seguridad Required a valid nonce and permission for every selected post when bulk editing modified dates; invalid dates now return an error.
• Seguridad Prevented unpublished Penci Blocks from appearing publicly through block, footer, navigation, and delayed-content rendering. Editor previews are no longer stored in public transients.
• Mejorado Fixed author social links that could render incorrectly, and sanitized profile social values before saving them.
• Mejorado Added error handling to multi-taxonomy filter loading and bulk modified-date editing so failed requests clear their loading state or show a message.
• Mejorado Updated the suggested Penci Bookmark & Follow plugin version to 2.5.
• Mejorado Updated the theme version from 8.7.6 to 8.7.7.