= v4.2.17 (25 August, 2026) =
Security – Block PHP object injection in submitted meta and private message reads (reported by WPScan)
Enhance – Lay out the Modules admin page in a responsive card grid with a modern layout
Enhance – Accept .jfif images when setting a user directory avatar from a URL
Fix – Do not apply post expiration to new posts when the form’s Enable Post Expiration toggle is off