Peter's Post Notes changelog and version history

20261 release

1. Peter's Post Notes 2.0.0Latest

   Oct 3, 2026
   • The plugin is under new ownership. Security and compatibility release. Requires WordPress 6.0+ and PHP 7.4+.
   • Security: all actions now require a valid nonce (fixes cross-site request forgery on editing notes, adding dashboard notes and adding notes on save).
   • Security: all output is escaped (fixes stored XSS through post titles and note content in the dashboard widgets, the meta box and the post list).
   • Security: notes on a post can only be read or changed by users who can edit that post. Private notes can only be changed by their author.
   • Security: settings are validated against the real roles, capabilities and post types. All database queries are prepared.
   • Block editor support: add, edit and delete notes instantly. A note left in the box is added when the post is saved.
   • Your own notes have a highlighted background in the notes box and both dashboard widgets, so they stand out from your team’s notes.
   • Replaced the deprecated tw-sack library with the WordPress REST API.
   • The “Latest note” column now appears for pages and every enabled post type, and loads with a single query.
   • Dashboard widget no longer uses query_posts().
   • Database: added a primary key and indexes to the notes tables. Existing notes are migrated automatically on update.
   • Fixed accented characters and emoji being lost on sites whose notes tables use the latin1 charset.
   • PHP 8.x compatibility fixes.
   • Text domain changed to “peters-post-notes” for wordpress.org language packs.
   • The charset setting was removed; the site charset is used.