v4.7.7 – 16th-September-2026
– Fix:
– The Starter Templates page no longer returns a 404 on Apache/LiteSpeed hosts with mod_substitute active, caused by the response exceeding the server’s line-length limit.
– Security:
– Restricted the CartFlows, Cart Abandonment Recovery and LatePoint import endpoints and the template data request endpoint to administrators only.
– Image sideload endpoints now download from approved stock image hosts only, preventing server side request forgery against internal network services.
v4.7.6 – 8th-September-2026
– New: