November plugin updates and security fixes
Date: 8 November 2026
Hi Reader 👋,
TLDR: This month’s updates tighten what visitors can see in search, related posts and popular posts. I’ve also added more control over link warnings, modern image formats for block backgrounds and new administration tools in Knowledge Base Pro. Please update the plugins you use.
Security hardening and maintenance releases
- Better Search 4.5.3 and 4.5.4: Restricted searchable post types, attachment visibility and post statuses, including Pro’s fallback and autocorrect searches. Fixed attachment thumbnails, cached attachment searches and Pro indexing, AI text and multisite issues. Pro also fixed indexed content being cut off after comparisons such as
<0.10; reindex its custom tables from Tools after updating.
- Contextual Related Posts 4.5.3 and 4.5.4: Restricted lists to published, viewable posts and hardened Pro’s image endpoint and page builder attributes. Fixed attachment thumbnails, plus warnings and missing caching on sites with unsaved settings. Pro also fixed indexed content being cut off after comparisons such as
<0.10; reindex its custom tables from Tools after updating.
- Top 10 4.6.1 and 4.6.2: Tightened attachment visibility and shortcode parameters, thumbnail and settings handling, and Pro’s image endpoint, page builder attributes and network lists. Fixed attachment thumbnails. Pro also fixed lazy-loaded list periods and signature failures.
- Snippetz 2.4.4: Hardened snippet rendering and fixed a reading-time fatal error with zero words per minute.
- Auto Close 3.2.2: Hardened settings search and clarified its age-rule behavior.
- Knowledge Base 3.3.0: Fixed Pro token exports/imports, failed imports after GitHub file renames and rating resets.
- Link Warnings 1.7.0: Hardened redirects and warning bypasses, plus accessibility and navigation fixes.
- Image Optimizer 1.3.0 and 1.3.1: Improved server-error handling and conversion reporting, corrected optimization totals and fixed a fatal error in WP-CLI and other non-admin requests.
Knowledge Base 3.3: more tools in Pro
Knowledge Base Pro adds WP-CLI commands for search, status, cache, settings, ratings, Ask the Docs and GitHub sync. New Abilities API tools let an AI assistant list GitHub sources, preview articles and import selected mappings or files. Saved GitHub tokens are now protected during settings export and import.
The Product Migration wizard is deprecated and will be removed in 3.4.0. This release needs no migration steps.
Read the Knowledge Base 3.3 post →
Image Optimizer 1.3: block background images
Block backgrounds can now use WebP and AVIF through CSS image-set(), with the original as a fallback. This is on by default and applies to background images set in block styles, rather than separate stylesheet files. WebP uploads can also get AVIF copies when AVIF generation is enabled.
Site Health checks encoders and queue health. Bulk Optimize now retries requests up to five times when the server returns an error page or cannot be reached.
Read the Image Optimizer 1.3 post →
Link Warnings 1.7: choose warnings by URL
The Rules tab assigns warning methods, messages or exclusions to URL patterns. The first matching rule wins, and dismissals are separate for each rule. You can skip download warnings for local files and hide warnings from logged-in users or selected roles. Existing settings continue to apply until you add rules.
Redirects now require confirmation for legacy links and untrusted destinations, and warnings cannot be skipped using author-supplied markers or malformed URLs. Clear your page cache after updating.
Read the Link Warnings 1.7 post →
Keep on publishing!
P.S. Have questions? I am always happy to help!