Download Easy Updates Manager Premium v9.0.21

List of improvements in Easy Updates Manager Premium version 9.0.21

• = 9.0.21 2026-05-13 =
• SECURITY: Fix a non-persistent reflected XSS vulnerability due to a missing validation and output escaping on the “paged” URL argument. This could allow an attacker, who persuaded you to click a personally-crafted link to your site’s dashboard whilst you were logged in, to once run harmful JavaScript code. Thanks to Dmitrii Ignatyev for finding and responsibly disclosing this issue.
• TWEAK: Improved the delay updates feature to record the timestamp of the first occurrence of available plugin, theme, or core updates early, when their associated transient option is updated.
• TWEAK: Corrected improper usage of esc_html_e() when preceded by echo
• TWEAK: Added missing direct file access protection check for ‘ABSPATH’ to prevent unauthorized access.
• TWEAK: Get rid of the “implicitly marking parameter $logger as nullable is deprecated” deprecation warning
• TWEAK: Suppress false positive WordPress.WP.I18n.TextDomainMismatch warning due to different plugin slugs in free and premium versions.
• = 9.0.20 2025-12-08 =
• REFACTOR: Safeguard the calls to PHP’s unserialize() function by specifying the “allow_classes” parameter to false to prevent code from being loaded and executed due to object instantiation and autoloading
• TWEAK: Early processing of external update logs is necessary to resolve the issue of the shutdown function being left out when a severe error happens during an auto/manual update through WP-CLI
• TWEAK: Enhance the notifications to signify the introduction of other plugins that belong to the same plugin family and to align with the new branding/links
• TWEAK: Ensure all translation functions are called during the WordPress “init” action or later. Invoking translation functions before the “init” action would have led to no translations being loaded, resulting in the original text being returned.
• TWEAK: Sanitize the list of days setting that is used for scheduling auto-update cron event
• TWEAK: Remove seasonal (new year, summer, spring and plugin collection) sale notices
• = 9.0.19 2024-11-12 =
• FIX: Misreporting of plugin’s update statuses in notification emails, which were labeled “success” instead of the appropriate designation of “failed”
• TWEAK: Improve the strategy for using an associative array to filter option default values, aiming to safeguard existing defaults from removal and to prevent the introduction of non-relevant options
• TWEAK: The notification email should omit any “failed” update status for plugins, themes and translations if they lack the corresponding name and/or version number
• TWEAK: Improve updates-check anonymisation and randomisation, stripping out further unnecessary data
• TWEAK: Replace unnecessary calls to maybe_unserialize()
• = 9.0.18 2024-07-10 =
• FIX: Couldn’t reactivate plugins due to plugin dependency issues (Premium)
• TWEAK: Allow auto-updates event from other plugins to take place only if it’s in the same exact schedule with the auto-updates scheduling feature
• TWEAK: Auto-updates should always run at the actual time the user has set it to be and prevent auto-updates event that runs outside the auto-updates scheduling feature
• TWEAK: Fixed spelling errors in the repo
• TWEAK: Force automatic updates can now be performed without the user being given full update capabilities. Prior to this, in order to successfully force the automatic updates the user had to have core, plugin and theme capabilities
• TWEAK: Force automatic updates should be independent and should not depend on the user-defined settings which can lead to the auto-updates itself being failed
• TWEAK: Split multiple sentences into separate translation calls.
• TWEAK: Update the composer package yahnis-elsts/plugin-update-checker for PHP 8.2 compatibility
• TWEAK: Plugin reactivations are now carried out in a specific sequence, with plugins lacking dependencies being reactivated first, followed by those with dependencies (Premium)
• = 9.0.17 2023-08-09 =
• TWEAK: Do not show incorrect information regarding plugins which were no longer maintained by the author caused by Premium plugins which don’t set all the field values seen with wordpress.org
• TWEAK: Include thorough version numbers and URL information in the auto-updates notification email
• = 9.0.16 2023-05-22 =
• TWEAK: (Premium) New ability of the automatic update scheduling feature where now the user can individually select what days are allowed or not allowed for updates to be run on the 3, 6, 12 hours and daily schedule settings
• FIX: MPSUM_Logs::normalise_call_stack_args() would overwrite any arguments that were passed by reference (pointer variables). thus resulting in misleading or seriously wrong data
• = 9.0.15 2023-04-13 =
• TWEAK: Improve MPSUM_Logs::normalise_call_stack_args() method to reduce the size of call stacks being stored in the database, also to prevent silent termination due to size of the call stacks that swell
• TWEAK: Get rid of PHP 8.1+’s “automatic conversion of false to array is deprecated” message when first time activating the plugin
• TWEAK: Add a user capabilities check when receiving a request through the `wp_ajax_eum_ajax` handler
• TWEAK: Prevent PHP8+ ErrorException and/or suppress PHP notice/warning for undefined stdClass::$plugin and/or stdClass::$theme variables during auto-updates (this usually happens due to the plugin or theme doesn’t follow WordPress standards)
• TWEAK: Remove notices regarding WP_AUTO_UPDATE_CORE and AUTOMATIC_UPDATER_DISABLED constants from force automatic updates screen as they now won’t prevent automatic updates from being run
• TWEAK: Get rid of PHP deprecated message on PHP 8.1+ when presenting admin constant notices by removing sprintf() function that shouldn’t had wrapped the esc_html_e() function
• TWEAK: All updates settings should be compatible and compliant with WordPress Site Health
• TWEAK: Prevent making a nonce available to logged-in users who could not manage Easy Updates Manager (no impact as all actions (dismissal of notices) were unreachable without proper user capability)
• FIX: Wrong parameters order in PHP implode() function calls for showing a list of plugins and/or themes that are under version control
• FIX: Some fields were not cleared when switching from one auto-update schedule time to another
• = 9.0.14 2022-10-24 =
• TWEAK: Add admin notice for DISABLE_WP_CRON constant and remove notices regarding WP_AUTO_UPDATE_CORE and AUTOMATIC_UPDATER_DISABLED constants as they now won’t prevent automatic updates from being run
• FIX: Core minor updates became major when two updates-related scheduled events got triggered in the same process