Limited-Time Offer

Get Extra 20% off on FullCharge Yearly Plan — available for first 10 users only. Don’t miss out! 🚀

TrackWP

Content Mask · Version history

Content Mask changelog and version history

Latest version
1.8.5.6
Sep 3, 2026 (2 months ago)
Releases
93
since 2021
In the last year
3
about one every 47 days
Tested up to
WordPress 7.0.8
PHP 5.4 or later

Releases each year

  • 202170 releases
  • 202215 releases
  • 20231 release
  • 20243 releases
  • 20251 release
  • 20263 releases

20263 releases

  1. Content Mask 1.8.5.6Latest

    • Security: fixed a Stored Cross-Site Scripting vulnerability in the per-post “Header Scripts & Styles” and “Footer Scripts” fields. A user who could edit posts, including Contributors, could store an event-handler payload that ran when an administrator previewed the pending post and, once published,…
    • Fixed: the per-role restriction in can_mask_content() was inverted and never took effect, so an administrator could not disable Content Mask for a role. The role check now applies, and its hook registration moved to the init hook so the current user is available when it runs.

  2. Content Mask 1.8.5.5

    • Security: require the target post type’s publish capability before creating a Content Mask over AJAX. This fixes a privilege escalation where a Contributor could publish a live mask (including a redirect) without the publish_posts capability.
    • Hardening: replaced the deprecated user_can_edit_post() permission checks with current_user_can( ‘edit_post’ ) on the edit, delete, toggle, and permission AJAX actions.
    • Hardening: every request value is now unslashed and sanitized through a single helper, the metabox and admin inputs included, resolving all Plugin Check sanitization and nonce notices.
    • Fixed: the Refresh Transient action referenced undefined variables and could fail on PHP 8; it now rebuilds and stores the cache correctly.
    • Maintenance: replaced an obfuscated internal URL with its plain value, switched to wp_parse_url() and wp_strip_all_tags(), normalized line endings, corrected nonce-failure responses, removed a pass-by-reference notice, added the plugin text domain and license headers, and tested up to WordPress 7.0.

  3. Content Mask 1.8.5.4

    • Security: require edit-post capability before returning a post’s role/condition permissions over AJAX, fixing an Insecure Direct Object Reference (IDOR). Reported by Nabil Irawan (CVE-2025-58012).
    • Hardening: the “Content Mask enabled” admin notice now reads the current post from the trusted global rather than the raw request parameter.

20251 release

  1. Content Mask 1.8.5.3

    • Revive abandoned notice, address SSRF

20243 releases

  1. Content Mask 1.8.5.2

    • Fix titles on iframe pages with some themes

  2. Content Mask 1.8.5.1

    • Fix null-coalescing operator for PHP 7.3 in admin panel

  3. Content Mask 1.8.5

    • Minor CSS Fixes for Columns
    • Allow custom “Go Back

20231 release

  1. Content Mask 1.8.4.15

    • fix for non-slashed relative urls in Download method

202215 releases

  1. Content Mask 1.8.4.14

    • adjust kses for SVGs and output

  2. Content Mask 1.8.4.13

    • Fix count in unique views

  3. Content Mask 1.8.4.11

    • allow more in kses

  4. Content Mask 1.8.4.10

  5. Content Mask 1.8.4.9

    • Allow ‘id’ attribute in style and script tags for kses
    • More pragmatic approach to wp_kses for scripts, styles, and HTML elements in single script areas and universal script areas
    • Fixed Universal CSS in iframe and download

  6. Content Mask 1.8.4.8

  7. Content Mask 1.8.4.7

    • Adjust wp_kses to allow script src

  8. Content Mask 1.8.4.6

    • Fixed individual footer scripts not being parsed and displayed

  9. Content Mask 1.8.4.5

    • Fixed missed/broken escapes and entity decoding for some header/footer sections

  10. Content Mask 1.8.4.4

    • Fixed missed SE/EL/AV mantra
    • Added kses to some outputs

  11. Content Mask 1.8.4.3

    • Additional early sanitization
    • additional late escaping in iframe output

  12. Content Mask 1.8.4.2

    • Additional Sanitization and Escaping
    • Fixed accidental var_dump
    • Adjusted script field display

  13. Content Mask 1.8.4.1

    • Added much more escaping and sanitization where required. Attributes, URLs, and bare HTML are escaped.
    • Added individual function nonces for additional security, no longer reliant on a single nonce.
    • Changed most concatenation to formatted strings for clarity and ease of escaping.

  14. Content Mask 1.8.4

    • Added WP Nonce Validation to all AJAX requests
    • Checked user permissions/caps where necessary
    • Patched security vulnerability where authenticated users could modify non-content mask options

  15. Content Mask 1.8.3.2

    • Add “Footer Scripts” section for Download and Iframe method
    • Fix minor script access issue

202170 releases

  1. Content Mask 1.8.3.1

  2. Content Mask 1.8.3

    • Fix PHP notice from smoke test for post_type_XYZ_checked dynamic variable
    • Adjust single post type metabox to better illustrate Mask state
    • Additional CSS to handle screen sizes better

  3. Content Mask 1.8.2.9

    • Prevent Content Mask save_meta function from running on post types that aren’t considered “public”, also hid meta box

  4. Content Mask 1.8.2.8

  5. Content Mask 1.8.2.7

    • Fixed an issue with headers being sent and an error showing in the customizer

  6. Content Mask 1.8.2.6

    • Fixed an issue where Content Mask admin styles were being applied to other elements on the edit.php admin base screen.

  7. Content Mask 1.8.2.5

  8. Content Mask 1.8.2.4

  9. Content Mask 1.8.2.3

  10. Content Mask 1.8.2.2

  11. Content Mask 1.8.2.1

  12. Content Mask 1.8.2

  13. Content Mask 1.8.1.10

  14. Content Mask 1.8.1.9

  15. Content Mask 1.8.1.8

  16. Content Mask 1.8.1.7

  17. Content Mask 1.8.1.6

  18. Content Mask 1.8.1.5

  19. Content Mask 1.8.1.4

  20. Content Mask 1.8.1.3

  21. Content Mask 1.8.1.2

  22. Content Mask 1.8.1.1

  23. Content Mask 1.8.1

  24. Content Mask 1.8.0.6

  25. Content Mask 1.8.0.5

  26. Content Mask 1.8.0.4

  27. Content Mask 1.8.0.3

  28. Content Mask 1.8.0.2

  29. Content Mask 1.8.0.1

  30. Content Mask 1.8.0

  31. Content Mask 1.7.2

  32. Content Mask 1.7.1

  33. Content Mask 1.7.0.11

  34. Content Mask 1.7.0.10

  35. Content Mask 1.7.0.9

  36. Content Mask 1.7.0.8

  37. Content Mask 1.7.0.7

  38. Content Mask 1.7.0.6

  39. Content Mask 1.7.0.5

  40. Content Mask 1.7.0.4

  41. Content Mask 1.7.0.3

  42. Content Mask 1.7.0.2

  43. Content Mask 1.7.0.1

  44. Content Mask 1.7

  45. Content Mask 1.6.0.3

  46. Content Mask 1.6.0.2

  47. Content Mask 1.6.0.1

  48. Content Mask 1.6

  49. Content Mask 1.5.2.1

  50. Content Mask 1.5.1

  51. Content Mask 1.5

  52. Content Mask 1.4.4.1

  53. Content Mask 1.4.4

  54. Content Mask 1.4.3.1

  55. Content Mask 1.4.3

  56. Content Mask 1.4.2

  57. Content Mask 1.4.1

  58. Content Mask 1.4

  59. Content Mask 1.3

  60. Content Mask 1.2.2

  61. Content Mask 1.2.1

  62. Content Mask 1.2.0.2

  63. Content Mask 1.2.0.1

  64. Content Mask 1.2

  65. Content Mask 1.1.4.2

  66. Content Mask 1.1.4.1

  67. Content Mask 1.1.4

  68. Content Mask 1.1.3

  69. Content Mask 1.1.2

  70. Content Mask 1.1.1

Questions about Content Mask’s releases

What is the latest version of Content Mask?

1.8.5.6, released on Sep 3, 2026 (2 months ago). It’s tested up to WordPress 7.0.8 and needs PHP 5.4 or later.

How often is Content Mask updated?

3 releases in the last year, about one every 47 days. Its first release on WordPress.org dates from January 2021.

Know when your rivals ship

Track your plugin and its rivals: TrackWP sees each new release in the nightly snapshot and alerts you, with what it did to their rank.

Start free

Release dates come from the day each version’s folder was made in Content Mask’s WordPress.org SVN repository; the notes from its readme’s changelog, as its authors wrote it.