WonderCMS 2.4.1

^{ZIP file SHA256: 766F8063175C8B17008AC17BE119DF6B993981BD38874874E11A56C065AF8C00}

What's new

• Fixed vulnerability - logged in admin could delete files from any directory.
• Added SRI hashes to external JavaScript and CSS files: jquery.min.js, bootstrap.min.js, autosize.min.js, taboverride.min.js, jquery.taboverride.min.js, bootstrap.min.css).
• Removed uneccessarry session unset.
• Minor text changes.

1 theme (default) update available

Copy this link: https://github.com/robiso/wondercms-themes/releases/download/default-2/default.zip

• Paste the link in your Settings->Themes & plugins, select "Theme" and click update.

  • NOTE 1: If you are not using the default theme, there is no need to update it.
  • NOTE 2: If you have made any changes to the default theme, they will be overwritten.
  • NOTE 3: If you are using a custom theme, check these easy 3 steps for enhancing theme library security:
  • https://github.com/robiso/wondercms/wiki/Add-SRI-tags-to-your-theme-libraries#in-your-themephp-make-the-following-changes

---

How to update

• Login to your WonderCMS website and click Update. Always backup before updating!

Changelog

• https://wondercms.com/whatsnew

How to install WonderCMS for the first time

• Unzip and upload the files wherever you wish WonderCMS to be installed at.