You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
The key has expired.
New features/fixes
New: admin is asked to re-type password when adding custom theme or plugin
New: installing/updating themes - parameter is now taken from cache file instead of direct URL
New: page GET queries are now sanitised
New: global plugins array now available
New: HTML language parameter can be changed in Settings - Security. Seperate settings available for admin and for visitors. This can be done by replacing your <html> tag with <html lang="<?= $Wcms->getSiteLanguage() ?>"> in your theme.php file.
Fix: vulnerability CVE-2023-41425 - thanks to prodigiousMind (YouTube / Github) for reporting the vulnerability.
How to update
Log into your WonderCMS website and create a backup of your website through WonderCMS -> Security.
Click "Update".
If update isn't visible, open Settings -> Themes and click "Check for updates".
Installation
Unzip and upload the files wherever you want WonderCMS installed and visit that URL.
