Download Super Speedy | Scalability Pro v6.23

List of improvements in Super Speedy | Scalability Pro version 6.23

• = 6.23 (20th May 2026) =
• Added a “Recheck Licenses” button above the licence table on the Super Speedy Settings page so customers have a clear way to refresh licence status after a renewal or upgrade without scrolling down to the licence-key field. The button is disabled until a licence key is entered/saved and re-enables as you type.
• The Recheck flow now also force-bypasses the auth-server’s own 1-hour licence cache (via a `force=1` flag on the `wpiapi/check_product_key` call), so renewals/upgrades that completed less than an hour before a recheck no longer show as expired/exceeded. Normal admin page loads continue to use both caches as before — only an explicit Recheck click bypasses them. (Lives in the `super-speedy-settings` submodule, so the change propagates to every Super Speedy plugin.)
• = 6.22 (13th May 2026) =
• Security: added capability checks and nonces to every admin AJAX endpoint that was previously reachable by low-privilege or unauthenticated users (slow query log fetch, index create/drop/drop-all, symlink create/delete, wp-config rewrite, slow query log truncate, term recount, profiling results save, cache clears, settings export/import, CSV export, action scheduler maintenance, and the WP All Import diagnostic helper)
• Security: removed `wp_ajax_nopriv_*` registrations from the slow query log fetch and the post-count / author-count cache clear endpoints — these were admin-only operations that should never have been exposed to unauthenticated visitors
• Security: escaped every column rendered in the Slow Query Log admin table (`time`, `url`, `query`, `stacktrace`, `duration`) — prevents stored XSS via a poisoned slow-query log entry being executed when an admin views the tab
• Security: fixed the “Create symlink” button, which previously created a dangling `wp-content/db.php` (the source path the button used had never existed in the plugin) and would have fatal-ed the site on the next request; the slow-query drop-in (`db.php` + `profiling-queries.php`) has been moved into `tabs/slow-query-log/wp-content/` to match the path the button always expected, every readlink check across the tab now derives the path from `plugin_dir_path(__FILE__)` so it works regardless of the plugin’s installed folder name, and the symlink source is validated with `is_file()`/`realpath()` before linking
• Refactored: the slow-query-log drop-in files now live under `tabs/slow-query-log/wp-content/` so the tab is self-contained ahead of the planned split of each tab into a separate add-on plugin
• Security: hardened `spro_search_terms` (product attribute search) — requires `edit_products` and null-checks the taxonomy so PHP 8 no longer fatals on an unknown taxonomy
• = 6.21 (12th May 2026) =
• Fixed possible infinite recursion in the license error handler: `wp_error_added` callback in Super Speedy Settings re-added the same WP_Error without unhooking, causing a stack overflow whenever another plugin (e.g. a GitHub update check) triggered a WP_Error with a JSON body containing a `message` field; the handler now unhooks during mutation, skips errors already enhanced, and only enhances errors originating from superspeedyplugins.com when the source URL is available
• = 6.20 (23rd April 2026) =
• Fixed Drop All Indexes on multisite subsites dropping indexes across every subsite instead of only the current one
• Indexes button now reads “Create All Indexes” when no indexes are selected, and “Update Active Indexes” when one or more are selected; “Create All Indexes” now creates every index regardless of checkbox state
• Promoted the existing Drop All Indexes link to a proper secondary button so it is visible whenever any indexes exist
• Checkboxes now update live as each index is created or dropped during Create/Update, and the Create/Drop buttons swap visibility automatically when the index set becomes empty or non-empty
• = 6.19 (24th March 2025) =
• Added new option for remove SQL_CALC_FOUND_ROWS to let users replace the max number of pages with the word ‘many’ or a word of their choice
• Added new index to support author counts on author archives for Yoast and other uses of get_post_counts with author filter
• = 6.18 (15th December 2025) =
• Added new WP All Export optimisation for when editing exports to speed up or avoid the wp_postmeta scan to grab all postmeta keys
• Added preview and customizer check for “Remove OR check for private items on front end” optimisation
• = 6.17 (18th November 2025) =
• Added full namespacing for plugin update checker to prevent conflicts with 3rd party plugins
• = 6.16 (22nd October 2025)
• Merged stop-phone-home functionality including fixes for paypal & stripe
• = 6.15 (22nd October 2025)
• Rollback to 5.94 + bug fixes added from other feature branch (but other major new features and implementation pattern removed for further testing)
• = 5.94 (17th March 2025) =
• Fixed issue with latest WordPress and our tabs system for the settings page
• = 5.93 (10th March 2025) =
• Changed “Remove product cat dropdown” option to “Cache product cat dropdown” now your quick edits will continue to work. Cache clears after 4 hours by default.
• = 5.92 (7th March 2025) =
• Update for stop-phone-home functionality now it won’t run on ajax calls or for non-admins to guarantee it only helps admins
• = 5.91 (5th March 2025) =
• Refactored plugin to be easier to maintain and update and add individual features
• Fixed ‘woo onboarding’ speed boost
• Further refactoring to move functionality into their own files to make the structure more logical
• Added new feature to let users disable the HTTP API calls that can add 10s to admin pages
• Renamed the tabs to be clearer
• Added custom query alteration options to start and stop various query optimisations on wordpress hooks I’d appreciate feedback on this new option
• = 5.90 (6th February 2025) =
• Updated cache handler to provide getCacheSize and deleteOldItems functions which provide group-specific functionality to aid SSF cache management
• = 5.89 (20th December 2024) =
• Fixed warning on settings page for suppressed readlink error
• = 5.88 (19th November 2024) =
• Fix for code hardening hardening had come 2 lines too late, my bad
• = 5.87 (19th November 2024) =
• Hardened code for Merchant plugin which is somehow running a query where no statements for the query can be found