Layouts for Divi changelog and version history

20263 releases

1. Layouts for Divi 2.0Latest

   Sep 26, 2026
   • Release Date: September 24th, 2026
   • Fixed: Layout import/sync conflicts and error reporting.
   • Fixed: Import failures, missing images, and temporary API outage handling.
   • Security: Improved import permissions, image validation, and title sanitization.
   • Improved: Faster layout imports by avoiding duplicate image downloads.
   • Updated: WordPress 7.1.2 compatibility.
   • Code: WordPress Coding Standards cleanup and documentation.

2. Layouts for Divi 1.2.1

   Sep 2, 2026
   • Release date: August 24th, 2026
   • Updated compatibility for WordPress 7.1.
   • Removed the obsolete manual textdomain loading call.

3. Layouts for Divi 1.2

   Aug 24, 2026
   • Release date: June 23rd, 2026
   • Security: Removed unauthenticated AJAX access — handle_import and handle_sync now require a logged-in user
   • Security: Added nonce verification before reading POST data in all AJAX handlers
   • Security: Added wp_unslash() to all $_POST reads before sanitization
   • Security: Added current_user_can() capability checks to handle_import (edit_posts) and template_sync (manage_options)
   • Security: Fixed SQL injection vulnerability — replaced raw query with $wpdb->prepare() in create_page()
   • Security: Replaced file_get_contents() for remote URLs with wp_remote_get() (WordPress HTTP API)
   • Security: Sanitized $_GET[‘page’] with sanitize_key() before use
   • Security: Added nonce to sync AJAX call in admin.js
   • PCP: Moved lfd_layouts_function() out of lfd_menu() method — now a proper class method lfd_layouts_page()
   • PCP: Changed menu capability from ‘administrator’ (role) to ‘manage_options’ (capability)
   • PCP: Fixed wp_register_style() version from float 1.0 to string ‘2.0’; corrected 5th parameter to ‘all’
   • PCP: Replaced exit with wp_die() at end of all AJAX handlers
   • PCP: Removed enqueue of unregistered script lfd-admin-live-script
   • Code: Fixed return esc_html_e() bug — esc_html_e() returns void; changed to return 0
   • Code: Removed unused $result = array() variable in create_page()
   • Code: Cleaned up return $result = array(…) to return array(…) in lfd_get_new_image()
   • Code: Removed leftover commented-out include_once lines in lfd_include_files()
   • Code: Added strict true comparison to in_array() calls
   • Code: Cast $template_id and $media_id to int before use in sprintf() URL builders