Changelog

Keep up to date with all our updates.

  • Resume Manager 2.2.3

    • Security hardening and bug fixes.
    • Improve validation of uploaded resume files.
  • WC Paid Listings 3.0.4

    • Security hardening and bug fixes.
    • Packages must match the type of listing they are used for.
    • Packages are only applied to listings that are waiting for a package or being renewed.
    • Only published package products can be chosen on the submission forms.
    • Choosing a package keeps the existing author of the listing.
    • Package limits are enforced when several listings are submitted at the same time.
    • Renewals paid for with a package product are counted against the customer’s package.
    • Listing Packages screen: sorting is limited to the displayed columns.
    • Listing Packages screen: delete links are tied to the package they delete, and saving requires the manage_options capability.
    • Package names are escaped in the package templates and on the order confirmation page.
    • Orders that contain a deleted product no longer cause an error when their status changes.
    • Administrators can revoke the listing package of a refunded order from the order actions menu.
    • Refunding an order that has a listing package adds a private order note; the package is kept.
    • Template change: my-packages.php, package-selection.php and resume-package-selection.php now escape package names. Themes that override these templates should update their copies.
  • Simple Paid Listings 2.0.3

    • Security hardening and bug fixes.
    • PayPal payments are now only approved automatically when they were sent to the account in the PayPal Email setting. Other addresses can be accepted with the wp_job_manager_spl_paypal_accepted_emails filter.
    • PayPal payments must also match the configured currency and listing fee, and a PayPal transaction can only be applied to one listing.
    • Verify the server certificate for PayPal and Stripe requests.
    • Send the Stripe payment amount as a whole number of minor units.
    • Verify the preview form nonce and the listing being submitted when continuing to payment.
    • Ignore requests for unknown payment gateways.
  • Job Alerts 3.2.1

    • Security hardening and bug fixes.
    • Escape the search term on the Job Alerts admin screen, and require the manage capability for the alert screens.
    • Resolve alert search terms within their own taxonomy, and only accept registered alert frequencies.
    • Keep alert email subjects and sender details to a single line.
    • Unsubscribe links from alert emails sent before version 3.0.0 are no longer accepted. Sign in to manage alerts instead.
    • Fix the alert name when the alerts shortcode sets categories by slug.
    • Fix a PHP warning on the alerts sign-in notice.
    • Template change: my-alerts-login.php no longer has a separate notice for guests who already have an account.
  • Resume Manager 2.2.2

    • Security hardening and bug fixes.
    • Apply the resume viewing capability settings to the REST API, feeds, archives, oEmbed and sitemaps.
    • Apply the browse capability setting to the resume listing request.
    • Limit resume files to the uploads directory and downloads to published resumes. Uploaded resume files now get a random suffix in their file names.
    • Check resume ownership and sign-in when applying with a resume.
    • Check submission permissions before processing uploads, and require a valid edit key for guest resume edits.
    • Restrict shortcode expansion in resume content, and tighten resume approval and candidate dashboard actions.
    • Template change: apply-with-resume.php now includes a nonce field (wp_nonce_field( 'apply-with-resume-' . absint( $post->ID ), '_wpjm_nonce' )). Theme overrides keep working, as the field is added when it is missing, and administrators see a notice naming the file until the line is added to it.
  • Applications 3.2.1

    • Security hardening and bug fixes.
    • Check the application before storing uploaded files, and apply the sign-in and reCAPTCHA settings to application submissions.
    • Check resume ownership when applying with a resume.
    • Restrict status changes on the employer dashboard to application statuses.
    • Escape application data in the admin list and templates, and keep notification email headers and subjects to a single line.
    • New application upload directories get random names. Existing directories are unchanged.
    • CSV export values that start with =, +, -, @, a tab or a carriage return now get a leading apostrophe, so spreadsheet apps don’t treat them as formulas.
    • Fix application form field labels containing special characters, such as apostrophes, not appearing in application emails.
    • Fix the label of Output Content fields not showing on application forms.
    • Fix a PHP warning when applying with a resume to a job that uses an application URL.
    • Fix a deprecation notice from WP Job Manager when reCAPTCHA is enabled on the application form.
    • Template change: application-form.php, job-application-header.php and job-application-footer.php now escape their output. Themes that override these templates should update their copies.
    • Developer note: the application_form_validate_fields filter now runs before uploaded files are stored, and receives file fields as $_FILES-style arrays instead of uploaded file objects. Custom validation that reads uploaded file URLs needs updating.
  • Resume Manager 2.2.1

    • Fix: Stop the reCAPTCHA field check triggering a PHP deprecation notice on WP Job Manager 2.3.0 and later.
  • WP Job Manager 2.4.5

    • Escape URLs in two sprintf href templates with esc_url() (#2996)
    • Validate attachment ownership when reusing a company logo by ID (#2995)
    • Honor restrictive filter_post_status=publish for logged-out visitors (#2994)
  • WP Job Manager 2.4.4

    • Fix: Restore the frontend styles and scripts that were missing from the 2.4.3 package. The 2.4.3 release was built without its compiled CSS and JavaScript, leaving the employer job dashboard unstyled and breaking frontend features such as the job application form. (#2990)
  • WP Job Manager 2.4.3

    • Apply the View Job Capability to WordPress search and oEmbed output.

    • Apply the View Job Capability to the REST search endpoint (#2984)

    • Fail closed correctly when an author filter resolves to no valid IDs (#2983)

    • Apply the View Job Capability to job listing feeds (#2982)

    • Enforce listing submission limit when publishing a previewed listing (#2981)

    • Restore PHP 8.4 test coverage — modernise bootstrap error handler (#2970)

    • Fix: Promote button data-href attribute now correctly quoted in job listings table.

    • Fix: Promote URL in inline script now escaped with esc_js().

    • Author filter follow-up: centralize parsing, close AJAX array bypass (#2958)

    • Add square-format hint and configurable max size for company logo uploads (#2957)

    • “Remove “See what’s new in 2.3″ from Job Statistics Banner”

    • New: The [jobs] shortcode now supports an author attribute to filter listings by user ID (e.g. [jobs author="42"] or [jobs author="1,2,3"])

  • WP Job Manager 2.4.2

    • Fix Job Dashboard actions menu on Safari (#2947)

    • Harden submit-form session cookies (#2945)

    • Fixes a REST API information disclosure where the body, excerpt, and existence of listings restricted by view-capability were exposed to denied viewers. Restricted listings now return 404 indistinguishable from a missing post, including HEAD probes and listings that are also password-protected.

    • Fixes a data-loss bug where editors opening a password-protected listing in the block editor would save empty meta values (location, company name, application target).

    • Fixes a series of information disclosure issues affecting password-protected and capability-restricted job listings.

    • Harden stats AJAX endpoint input validation and rate limiting (#2938)

    • Company logo uploads now accept WebP images by default

    • New filter job_manager_company_logo_allowed_mime_types allows customizing allowed file types for the company logo field

    • The salary currency field on the job submission form now correctly reflects the configured default currency in its placeholder and helper text.

    • Filled job listings are no longer exposed via the REST API.

    • Job categories are now included in the job RSS feed XML output.

    • Added featured=true query parameter support to the job RSS feed to allow filtering by featured listings only.

    • Fixed PHP 8+ undefined array key warning in the widget caching methods.

    • Updated Twitter profile links to use the new x.com domain and updated related labels to “X / Twitter” to reflect the platform rebrand.

    • Added a Settings link to the plugin action links on the Plugins screen for quicker access to plugin settings.

  • WP Job Manager 2.4.1

    • Add permission check to listing query parameters (#2914)
    • Fix structured data output for password-protected listings (#2913)

    • Update actions/cache to use v4 (#2896)

    • reCaptcha script not being loaded (#2893)
    • add a additional action to the do_feed_rss2
    • fix hardcoded dashboard expiration date format
    • Dev: Fix deprecated methods
    • Fix file input field for forms not marked as required
  • WP Job Manager 2.4.0

    • Fix job dashboard actions menu in Safari

    • Fix PHP 8.3 support

    • Remove support for Internet Explorer 11

    • Fix WordPress 6.6 compatibility

    • Fix classic editor support for job listings

  • WC Paid Listings 3.0.3

    • Fix: Fix compatibility with scheduled job listings
  • Resume Manager 2.2.0

    • New: Add support for reCAPTCHA v3

    • Security Fix: Check if the user can manage resumes before bulk-approving

    • Security Fix: Add a nonce check to the resume page setup wizard

  • Job Tags 1.4.6

    • Tweak: Update usage tracking integration
  • Job Alerts 3.2.0

    • New: Add job statistics about how many times the job was sent out in alert e-mails

    • Dev: Add alert modal logged out version as template

  • Bookmarks 1.5.0

    • New: Add job statistics integration
  • Applications 3.2.0

    • Add application data to job statistics

    • Add support for ReCAPTCHA version 3

  • Application Deadline 1.3.0

    • Update job dashboard integration