2.11.0.2 - 08/12/2026
Hotfix
- Security: Fixed possible XSS issue in Button module code field (#5429)
- Security: Fixed possible arbitrary shortcode execution in foreign module render output (#5438)
- Security: Fixed possible XSS issue in Search module no results field (#5455)
- Popup Module: Fixed corrupt serialization in module templates (#5397)
- MultiSite: Fixed
flush_rewrite_rulesfiring on everyadmin_initafter a version change (#5442) - MultiSite: Fixed
run_multisitewriting the version only after a full loop (#5443) - UI: Fixed overlays when using an RTL language (#5413)
- UI: Fixed overlays never showing for a global column (#5418)
- History: Only fire didAddModule for new modules in the settings preview callback (#5501)