Summary
Recommended security update for all users. WPeMatico 2.9.1 applies WordPress’s HTML rules to imported content by default, adds a Google News campaign type, brings six more languages, and improves image loading and social media embeds. Your post templates and rewrites remain exactly as you wrote them.
Security
- Imported content is now checked against the HTML WordPress allows in a post, following the same rules for scheduled runs, external cron and manual “Run Now” executions. This covers the content, title, excerpt and every post template tag that carries text from the feed. Text, images, galleries, videos, audio, tables and formatting are preserved, while scripts, forms and inline SVG icons inside feed content are left out. Social network posts keep their official embeds.
- The campaign log now displays titles and addresses quoted from feeds as plain text, preventing feed content from being interpreted as HTML.
New
- Google News campaign type. Publish news from a Google News search, topic or publication: paste the address from your browser and the campaign finds its feed automatically. Each post gets the headline as the publication wrote it, and the publication’s name and address are saved with the post, ready to use in the post template as
{source_name}and{source_url}. Switch it on from its card in the Dashboard. With WPeMatico Professional, each post links to the article on the publication’s own site. - Six more languages. WPeMatico now also speaks Japanese, Brazilian Portuguese, Italian, Polish, Turkish and Vietnamese, covering every screen, tooltip, Help tab and campaign log line.
Improved
- Official social media embeds. Posts from X, Instagram, Threads, TikTok, Bluesky, Reddit, Pinterest, Tumblr and Facebook found inside feed content are now published using each network’s official embed.
- Faster image loading. Images loaded lazily by the source site are now published with their actual addresses, so each image can load with a single request on every visit.
- Updated translations. German, French, Dutch, Greek, Persian, Slovak, Romanian, Arabic, Chinese and Latin American Spanish now use the official WordPress terminology for each language, making WPeMatico read more naturally alongside the rest of your WordPress admin.
- Campaign navigation. The WPeMatico menu now stays open on Campaigns while you edit a campaign.
For developers
- The
wpematico_item_permalinkfilter sets the address a post is read from and linked to, once per item about to be published. - The
wpematico_feed_allowed_htmlfilter controls which HTML tags and attributes imported content keeps, whilewpematico_feed_embed_scriptscontrols which social network scripts it may load.
Recommendation
Recommended for all users — update as soon as possible. This release strengthens the handling of imported feed content by applying WordPress’s allowed HTML rules by default, while adding Google News campaigns, six new languages and several improvements to embeds, image loading and navigation.