EffortLess Visual Sitemap

Changelog

1.0.37

• Change: the bundled donate-notice class is renamed from the shared Effortless_Donate_Notice to ELSMG_Donate_Notice, so the class name carries this plugin’s own prefix and cannot collide with another EffortLess plugin loading its own copy.

1.0.36

• Change: tested against WordPress 7.1 and the “Tested up to” header updated to 7.1. No functional changes.
• Change: the donate notice’s outbound link no longer includes the site address as a query parameter. It still identifies the plugin and version so support requests can be matched to a release, but not which installation was viewing it.

1.0.35

• Added: donate notice on the settings screen

1.0.34

• Fix: update plugin name casing to EffortLess; add plugin identifier to donate link.

1.0.33

• Fix: rename shortcode tag from generic ‘visual_sitemap’ to prefixed ‘elsmg_visual_sitemap’ to prevent naming conflicts (WordPress.org review requirement)

1.0.32

• Security: fix SSRF — validate sub-sitemap host before fetching; use wp_safe_remote_get()
• Security: fix XXE — add LIBXML_NONET flag and disable entity loader on PHP 7.x
• Security: filter collected URLs to same-host only (defence-in-depth against foreign slug leakage)
• Fix: posts now classified accurately using WP core sitemap sub-index type metadata (fixes /%postname%/ sites where all posts were shown as Pages)
• Fix: cache key now includes per-site salt (AUTH_KEY / DB_NAME) to prevent collisions on shared object-cache backends
• Fix: guard $wp_rewrite->author_base against null / empty — falls back to ‘author’
• Fix: empty category_base / tag_base option no longer produces ‘//’ prefix that silently misroutes all taxonomy archives
• Fix: CSS moved to wp_enqueue_style() + wp_add_inline_style() — no more body-level tag after closing
• Fix: admin notice strings now translated and properly escaped

1.0.31

• Code review fixes: cache key helper, URL grouping bug fix (leading slash on bases), CSS dedup guard, removed redundant save_post hook, settings callback simplified, Requires at least bumped to 5.9

1.0.30

• Added CLAUDE.md with codebase documentation

1.0.29

• Robust grouping with custom category/tag/author bases
• Added hide_groups shortcode attribute

1.0.28

• WPCS/PHPCS compliance
• Plugin Check fixes