• Escape URLs in two sprintf href templates with esc_url() (#2996)
  • Validate attachment ownership when reusing a company logo by ID (#2995)
  • Honor restrictive filter_post_status=publish for logged-out visitors (#2994)