Premium 2.26 / Free 4.23 release notes

This version includes bug fixes, small quality-of-life improvements, and a small security fix. In earlier versions, Relevanssi included password-protected posts in the search results. This can be used to glean information about the posts’ contents. Since I know some people will still need this functionality, the old behaviour can be enabled with a filter function.

2.26.1 / 4.23.1

• Security fix: Prevent an XSS attack by a malicious contributor. This attack is based on a contributor injecting an attack in a custom field name. It then gets triggered if the admin views the list of custom field names in the indexing settings page.
• Premium. Minor fix: ‘Hide Relevanssi on edit pages’ didn’t affect the block editor sidebar visibility. It does now.

2.26.0 / 4.23.0

• New feature: New filter hook relevanssi_forbidden_post_types filters the list of post types excluded from Relevanssi indexing.
• New feature: New filter hook relevanssi_forbidden_taxonomies filters the list of taxonomies excluded from Relevanssi indexing.
• New feature: New filter hook relevanssi_show_password_protected controls whether password-protected posts are shown in the search results.
• Premium. New feature: The Relevanssi metabox has new CSS classes and added HTML tags to allow better styling and to make it easier to hide sections of the metabox.
• New feature: Relevanssi settings tabs have more CSS IDs to help hide individual settings.
• New feature: Support for the post_mime_type query parameter.
• Premium. Changed behaviour: The pre_relevanssi_related and post_relevanssi_related action hooks get the post ID as a parameter, as it’s not always available otherwise.
• Changed behaviour: Password-protected posts are excluded from the search results by default to protect their contents.
• Premium. Minor fix: Click-tracking front-end JS code now uses wp_print_inline_script_tag().
• Premium. Minor fix: Related posts template CSS now uses wp_add_inline_style().
• Premium. Minor fix: An array _rt tag won’t cause a fatal error anymore.
• Premium. Minor fix: To avoid crashes, the Relevanssi network options blog list is reduced to 50 blogs.
• Minor fix: The settings tab query parameter was renamed to avoid collisions with other plugins.
• Premium. Minor fix: The post_id parameter in the relevanssi_related_posts shortcode didn’t work.
• Minor fix: In rare cases, the search results would not be in relevance order if the throttle wasn’t used.

You can find the new versions from the automatic updates or the Downloads page.