Skip to content

v2.0.8

Choose a tag to compare

View all tags
@jules-paystack jules-paystack released this 27 Oct 14:09
v2.0.8
f79d767

Security update. Please update now.

  • Security: hardened webhook and payment verification. Props k2sobot.
  • Security: API credentials and response bodies are no longer written to the PHP error log, and the API secret key is only sent to the Paystack API.
  • Added an admin notice when the server's PHP version is affected by CVE-2026-109618 / CVE-2026-109619.
  • Tested with WordPress 7.1 and PHP 8.2.35, 8.3.36, 8.4.27 and 8.5.12.
  • Version 2.1.0 will require PHP 8.2 or later.

After updating:

  • Rotate your live and test secret keys in the Paystack Dashboard.
  • Delete old PHP and WordPress debug log files, because earlier versions logged API request details.
  • Ask your host to run PHP 8.2.35, 8.3.36, 8.4.27, 8.5.12 or later.
Assets 3
Loading