Summary
Recommended security update for all users. WPeMatico 2.9.2 strengthens feed address validation across all execution methods, improves campaign data handling and brings a major round of improvements to license management. License checks are now faster, activations are handled automatically, and WordPress can find add-on updates even during background checks. Also tested up to WordPress 7.2.
Security
- Stronger feed address validation. Feed addresses are now checked against every IP address their host resolves to, including both IPv4 and IPv6. This protection applies consistently to scheduled campaigns, external cron, manual “Run Now” executions, previews and feed tests. Thanks to Aita Avela for reporting this issue.
- Safer campaign data handling. Campaign categories are now saved as category IDs instead of relying on their displayed values, and all campaign information shown in the campaigns list is properly escaped before being displayed, preventing stored content from being interpreted as HTML.
Improved
- Safer license key display. The Licenses screen now shows only the last four characters of each license key. Existing keys are also preserved when saving the screen if you haven’t changed them.
- Automatic license activation and deactivation. Saving a license key now activates the site for updates and support. Replacing an existing key automatically releases its previous activation. Check License, Activate License and Deactivate License now display the store’s response and the resulting license status.
- Faster Licenses screen. License information is requested from the store once every twelve hours, or whenever you manually request it using a button. This allows the screen to open immediately without waiting for repeated remote requests. Licenses with unlimited activations also display their account information.
- Smarter renewal and extension links. The Renew and Extend links now take you directly to the checkout page for the specific add-on product. Lifetime licenses no longer display a renewal option.
- Clearer license status and checks. Valid licenses now display “Activated for updates” along with the Deactivate License option. Check License is shown for licenses that are not valid, and each add-on’s license is checked with the store no more than once every ten seconds.
- More accurate add-on update notices. The Add-Ons screen now reminds you that WPeMatico does not update automatically only when a WPeMatico update is actually waiting, which is when add-ons also need to wait for the main plugin update.
- Background add-on update detection. WordPress can now find available add-on updates during its background update checks as well. Access to the Licenses screen is also restricted to administrators.
- Improved compatibility with symbolic links. WPeMatico now starts correctly on servers where the plugin directory is accessed through a symbolic link.
Performance
- Instant Settings screen navigation. Every Settings tab now opens immediately. Highlights from the latest release are stored for twelve hours instead of being requested from wpematico.com every time you visit, reducing unnecessary remote requests and making navigation faster.
Recommendation
Recommended security update for all users — update as soon as possible. This release strengthens feed address validation and campaign data handling while significantly improving license activation, validation and add-on update detection. It also makes the Settings and Licenses screens faster and more reliable.