Correção
- Improve handling and security of transfer token to prevent misuse (thanks to Trang Si Hoang for reporting this)
- Improve memory handling during database backup to make it more unlikely to hit memory limits
Segurança
- Fix CVE-2026-41558, which allowed for authentication bypass on pages, such as wp-login.php supplied by other plugins (such as 2fa plugins)