WonderCMS 3.6.0 Latest
Features and fixes
Security + stability update to WonderCMS core (index.php) with no intended breaking changes. It hardens module installs/updates, fixes a few long-standing bugs, improves PHP 8.4+ compatibility, and adds an ultra-simple plugin enable/disable mechanism (no file deletion needed) with conflict-prevention for editor/translation plugins.
Changes
Safer theme/plugin installs & updates
Stronger sanitization for module name/type
Basic ZIP entry validation to prevent zip-slip (bad ZIPs writing outside the module folder)
Login hooks now work
Plugins load before loginAction() so login_success / login_failed listeners can run reliably
Search fixes
Fixed broken internal search helper methods
Improved Simple Blog post search compatibility
More accurate update checks
Replaced string compares with version_compare() for modules + core update checks
PHP compatibility / deprecation cleanup
Explicit nullable params for PHP 8.4+
Fixed str_ireplace(..., null, ...) deprecation triggered during plugin deletion on newer PHP
Plugin enable/disable (new)
New config.disabledPlugins list in the DB
loadPlugins() skips disabled plugins but still lists them as installed
Settings → Plugins now shows Enable/Disable for installed plugins
Editor/translation conflict prevention: enabling/installing one editor/translation plugin auto-disables other enabled plugins from the same group (with confirmation prompt)
Backwards compatibility
No plugin API changes (existing plugins do not need changes).
config.disabledPlugins is optional; if missing, behavior is unchanged.
Note: if a user disables plugins on this version and later downgrades to an older WonderCMS, the older core will ignore disabledPlugins and those plugins will load again (expected).
Version 3.5.0 released
March 16th, 2025
Hello WonderCMS-ers 🩵
This update has been long in the making. It includes a lot of the community wanted features such as Search
We have also created fresh and searchable documentation
If you can - support our free and open source mission.
Click here to donate or check our awesome merch
As a WonderCMS user, you get a 15% discount code WONDER15 in our shop
If you haven't yet, give us a star ⭐ on Github
Features & bug fixes
Search - add a simple search tag in your theme and your website becomes searchable - more details
Blog plugin updates
You can now set blog as the default page - more details
Blog bug fix: users could overwrite their previous post if the article had the same name. It now creates a separate page
Contact form plugin update - more details (view read me file)
❗ If you are updating the contact form plugin, it will reset your config, meaning you have to re-enter your email in Settings - Security
Contact form bug fix: users could overwrite their previous post if the article had the same name. It now creates a separate page
The contact form plugin now also supports Google reCaptcha v2, the keys can be also set in Settings - Security
Modal - settings popup can now re-open to last tab where you made changes (turn on in Settings - Security - more details
Pages - all pages now have the "created" and "modified" time saved in database - more details
Head header tag - you can now add a new tag to your theme and avoid creating your own block - more details
New hook on renderPageNavMenuItem is now a hook and you can now overwrite the menu in your template - more details
New hook: loginAction is now a hook and can be now used to modify the login to ban IP's or implement 2FA solutions - more details
Fix bug when creating new page (error log displayed error - resolved)
Summernote now has a dropdown with your uploaded files - easier to insert into your pages - more details
Special thanks to our community for the improvement suggestions
1 click update
IMPORTANT: First backup and update your WonderCMS, then update your themes and plugins.
Login to your WonderCMS website and click "Update". Create a backup prior to updating.
If you can't see the update, open Settings -> Themes or Plugins and click "Check for updates".
Version 3.4.3 released
November 5, 2023
This update a couple of new features and important fixes, detailed below.
Features & bug fixes
New: admin is asked to re-type password when adding custom theme or plugin
New: installing/updating themes - parameter is now taken from cache file instead of direct URL
New: page GET queries are now sanitised
New: global plugins array now available
New: HTML language parameter can be changed in Settings - Security. Seperate settings available for admin and for visitors. This can be done by replacing your html tag with <html lang="<?= $Wcms->getSiteLanguage() ?>"> in your theme.php file
Fix: vulnerability CVE-2023-41425 - thanks to prodigiousMind (YouTube / Github) for reporting the vulnerability
1 click update
IMPORTANT: First backup and update your WonderCMS, then update your themes and plugins.
Login to your WonderCMS website and click "Update". Create a backup prior to updating.
Version 3.4.2 released
May 2, 2023
This update a couple of new features and bug fixes, all detailed below.
Features & bug fixes
New: option in Settings - Security for enabling/disabling redirect to login page or last page, after logging out
New: in Settings - Security, now clearly visible which options are turned ON/OFF
New: option to customise 404 page layout for all 404 pages
New: option to customise login page with hooks
Fix: uploading .doc file format
Fix: Watercolor theme, which returned errors
Fix: Essence theme, it now correctly scales the static content section
Fix: Simple blog plugin to not use commas in description and limit SEO title to 60 characters
Fix: Simple SEO plugin to include subpages
1 click update
IMPORTANT: First backup and update your WonderCMS, then update your themes and plugins.
Login to your WonderCMS website and click "Update". Create a backup prior to updating.
If you can't see the update, open Settings -> Themes or Plugins and click "Check for updates".
Version 3.4.1 released
January 22, 2023
This update brings 3 bug fixes, described below. We've also updated the Summernote plugin. |