Orphans · Version history
Orphans changelog and version history
- Latest version
- 3.4.6
- Nov 7, 2026 (2 days ago)
- Releases
- 17
- since 2024
- In the last year
- 5
- about one every 49 days
- Tested up to
- WordPress 7.0.8
- PHP 8.0 or later
Releases each year
- 20242 releases
- 202510 releases
- 20265 releases
20265 releases
Orphans 3.4.6Latest
- Fixed Stored Cross-Site Scripting (XSS) via the comment parameter – the protected-tags placeholder digest was predictable, which allowed an unauthenticated attacker to restore raw markup inside an HTML attribute. The digest is now salted with a site-specific key. (CVE-2026-124216). Props for Santh.
Orphans 3.4.5
- Build system converted from Grunt to the Bun bundler (bun run build).
- Developer documentation moved from readme.txt to README.md – the WordPress.org readme is now end-user focused only.
- New bun run update-libs task to update the vendored iWorks libraries.
- Translation files regenerated with wp-cli (i18n make-pot / update-po).
- Security hardening: capability check (new iworks/orphans/capability filter, default manage_options) is now enforced for configuration import and export.
- Security hardening: imported option names are whitelisted to plugin options only – arbitrary options can no longer be overwritten.
- Security hardening: uploaded import file is fully validated before parsing.
- Security hardening: orphan terms are escaped with preg_quote() before building replacement patterns.
- Export file name is now properly quoted in the Content-Disposition header.
- Import/export admin scripts are loaded only on the Orphans settings screen.
- The iworks_orphans_capability filter, previously documented, is now actually applied – renamed to iworks/orphans/capability with the old name kept as a deprecated fallback.
- All iworks_orphan_* (and orphans_*) filters renamed to the namespaced iworks/orphans/... schema – legacy names still work as deprecated (3.6.0) fallbacks.
- Fixed release packaging: .git*, .gitmodules, .github/ and .editorconfig files are no longer included in the ZIPs.
- Fixed build: the https://github.com/iworks/sierotki placeholder replacement no longer corrupts the IWORKS_ORPHANS_PLUGIN_URL constant (a fatal error on activation).
- Empty banner-only sierotki-admin/sierotki-frontend JS and CSS bundles are no longer shipped.
- Plugin root, plugin basename and assets URL are now derived from the plugin constants instead of relative directory guessing.
Orphans 3.4.4
- Updated the iWorks Options module to version 3.1.1.
- Fixed issue in external simple_html_dom – missing global $debug_object. #21 Props for Marek Szymański.
Orphans 3.4.3
- Updated the iWorks Options module to version 3.1.0.
- Updated the iWorks Rate module to version 2.3.2.
Orphans 3.4.2
- Updated & enhaced build process.
202510 releases
Orphans 3.4.1
- Updated the iWorks Options module to version 3.0.8.
Orphans 3.4.0
- Resolved conflict arising from differing implementations of the acf/format_value filter in Advanced Custom Fields and Secure Custom Fields plugins.
- Refactored codebase by separating Secure Custom Fields integration into its own dedicated file.
- Refactored codebase by separating Advanced Custom Fields integration into its own dedicated file.
Orphans 3.3.9
- Integration with the Secure Custom Fields plugin has been added.
- Updated the iWorks Options module to version 3.0.7.
- Updated the iWorks Rate module to version 2.3.1.
Orphans 3.3.8
- Replaced logo.png by logo.svg.
- Updated the iWorks Options module to version 3.0.2.
- Updated the iWorks Rate module to version 2.3.0.
Orphans 3.3.7
- Enhanced PHPDoc documentation across the codebase for better maintainability.
- Improved code organization and added proper escaping for output security.
- Added constants for plugin paths and URLs to improve code reliability.
- Fixed URL escaping in admin interface for better security.
- Updated documentation with more detailed function descriptions and parameter information.
- Improved code comments and inline documentation for better developer experience.
- Updated the iWorks Options module to version 3.0.1.
Orphans 3.3.6
- Enhanced integration with the Bricks Builder (Bricks Theme). #16. Props for Cactoo.
- Removed replacements for translation functions within the admin interface.
- Updated the iWorks Options module to version 3.0.0.
Orphans 3.3.5
- The issue with the saving multiple option value has been resolved.
Orphans 3.3.4
- The issue with the saving options has been resolved. #14. Props for e-poka.
Orphans 3.3.3
- Added translation support to GitHub releases.
- Improved build process for better performance and efficiency.
- Updated the iWorks Options module to version 2.9.8.
- Updated the iWorks Rate module to version 2.2.3.
- Enhanced plugin update mechanism for smoother updates from GitHub releases.
- Added escaping functions in multiple areas for improved security.
Orphans 3.3.2
- Check for iworks_options object has been added. #12. Props for maciejsb.
20242 releases
Orphans 3.3.1
- Translation loading time has been fixed.
Orphans 3.3.0
- Updated the iWorks Rate module to version 2.2.1.
- The configuration import ability has been added. #10
- The configuration export ability has been added. #9
- Translation loading time has been fixed.
Questions about Orphans’s releases
What is the latest version of Orphans?
3.4.6, released on Nov 7, 2026 (2 days ago). It’s tested up to WordPress 7.0.8 and needs PHP 8.0 or later.
How often is Orphans updated?
5 releases in the last year, about one every 49 days. Its first release on WordPress.org dates from December 2024.
Know when your rivals ship
Track your plugin and its rivals: TrackWP sees each new release in the nightly snapshot and alerts you, with what it did to their rank.
Start freeRelease dates come from the day each version’s folder was made in Orphans’s WordPress.org SVN repository; the notes from its readme’s changelog, as its authors wrote it.