Custom Recovery Mode Email

2.0.5

• Fix: emails sent with an empty “Mail Sender Name” arrived with “WordPress” as the From name instead of falling back to the Site Title.
• Fix: the “Mail Sender Name” placeholder now shows the actual Site Title (as saved in Settings → General) instead of the generic “Website Name” text.

2.0.4

• Feature: the Recovery Mode recipient field now accepts multiple email addresses separated by commas.
• Improvement: recipient lists are sanitized, validated and deduplicated before being saved and passed to WordPress mail notifications.

2.0.3

• Fix: the sender email example no longer includes the “www.” prefix (other subdomains, e.g. erp.example.com, are kept as-is).
• Improvement: in Multisite, the per-site sender name/email fields now show the actual network-level value as a placeholder when left empty, instead of a generic example.

2.0.2

• Fix: disabled administrative notification toggles now cancel the corresponding wp_mail call through pre_wp_mail instead of returning invalid or empty email data.
• Fix: successful plugin/theme update emails are reliably suppressed when their toggle is disabled.
• Fix: mixed plugin/theme update results now follow the failed-update notification setting.
• Compatibility: removed the remaining PHP 8-only syntax so the declared PHP 7.4 minimum is genuinely supported.
• Hardening: notification and recipient filters run last so later plugin callbacks cannot accidentally undo the configured policy.
• Hardening: sender overrides no longer leak to a later email when another plugin short-circuits wp_mail.

2.0.1

• Fix: replaced PHP 8.0+/8.1+ syntax (constructor property promotion, readonly properties) with PHP 7.4-compatible code, fixing a fatal parse error on servers running PHP 7.4.
• Minor: small admin CSS adjustments.

2.0.0

• Feature: new “WPVulnerability Email” field below the Mail Sender Email, shown only when the WPVulnerability plugin is active. The plugin defines the WPVULNERABILITY_MAIL constant (only if not already defined elsewhere) using the configured value, or a fallback of wpvulnerability@ if the field is empty.
• Feature: new sidebar banner promoting the Dixitalmedia plugins on WordPress.org, dismissible independently from the FactuPress banner.
• Multisite: the new WPVulnerability email can be set network-wide and overridden per site, following the same pattern as the recovery email and the sender override.
• Major: full visual redesign of the admin settings page. Each section is now grouped into a card with its own icon, title and description, replacing the previous flat layout.
• Major: complete internal rewrite. The plugin now follows an OOP architecture with namespaces, autoloading via Composer, a service container, and dedicated classes for hooks, services, settings and lifecycle. The public behavior is unchanged; existing settings are preserved.
• New: hero header on top of the settings page summarising the plugin scope at a glance.
• New: dedicated card for the Notifications section, with refined toggle switches.
• New: callout component for Multisite-context notices (replaces the previous generic admin notice on per-site pages).
• New: action bar at the bottom of the form with a loading state and spinner when saving, plus aria-busy for assistive technologies.
• Improvement: admin assets reorganised into assets/css/ and assets/js/ for clarity. Inline <h2> styles removed and replaced with proper CSS classes.
• Improvement: focus states on inputs and switches now use :focus-visible to avoid showing outlines on mouse clicks.
• Improvement: prefers-reduced-motion is honoured for the save spinner animation.
• Compatibility: tested up to WordPress 6.9.4.