{"id":275715,"date":"2026-04-26T12:58:12","date_gmt":"2026-04-26T12:58:12","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/comments-press-zone\/"},"modified":"2026-04-26T13:02:24","modified_gmt":"2026-04-26T13:02:24","slug":"comments-press-zone","status":"publish","type":"plugin","link":"https:\/\/fr.wordpress.org\/plugins\/comments-press-zone\/","author":15404322,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_crdt_document":"","version":"1.0.6","stable_tag":"1.0.6","tested":"6.9.4","requires":"6.0","requires_php":"7.4","requires_plugins":null,"header_name":"Comments Press Zone","header_author":"PressZone Developers","header_description":"A modern, high-performance commenting system for WordPress with voting, moderation, and customizable design.","assets_banners_color":"","last_updated":"2026-04-26 13:02:24","external_support_url":"","external_repository_url":"","donate_link":"https:\/\/press.zone","header_plugin_uri":"https:\/\/github.com\/avi-ezra\/comments-press-zone","header_author_uri":"https:\/\/press.zone","rating":0,"author_block_rating":0,"active_installs":0,"downloads":162,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.0.6":{"tag":"1.0.6","author":"resite","date":"2026-04-26 13:02:24"}},"upgrade_notice":{"1.0.6":"<p>WordPress.org compliance release addressing internationalization best practices and adding comprehensive build tools documentation. Required for WordPress.org approval.<\/p>","1.0.4":"<p>WordPress.org compliance release addressing all plugin review requirements. Fixes Plugin URI, enhances external services documentation, improves security with IP validation, and refines settings sanitization. Required for WordPress.org approval.<\/p>","1.0.3":"<p>WordPress.org compliance release. Fixes Plugin URI, removes frontend attribution, enhances security with proper IP validation, and improves documentation. Recommended for all users preparing for WordPress.org submission.<\/p>","1.0.2":"<p>Security and accessibility release. Resolves WordPress.org Plugin Check warnings, adds keyboard navigation to emoji picker, and improves ARIA support. Recommended for all users.<\/p>","1.0.1":"<p>Important update with GridTable improvements, UI consistency fixes, and critical security enhancements. Update recommended.<\/p>","1.0.0":"<p>Initial release.<\/p>"},"ratings":[],"assets_icons":[],"assets_banners":[],"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.6"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3515811,"resolution":"1","location":"assets","locale":""},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3515811,"resolution":"2","location":"assets","locale":""},"screenshot-3.png":{"filename":"screenshot-3.png","revision":3515811,"resolution":"3","location":"assets","locale":""},"screenshot-4.png":{"filename":"screenshot-4.png","revision":3515811,"resolution":"4","location":"assets","locale":""},"screenshot-5.png":{"filename":"screenshot-5.png","revision":3515811,"resolution":"5","location":"assets","locale":""}},"screenshots":{"1":"Comments interface with voting and threaded replies","2":"Admin dashboard with moderation statistics","3":"Design customization panel with live preview","4":"Moderation tools with user management","5":"Responsive mobile view"},"jetpack_post_was_ever_published":false},"plugin_section":[],"plugin_tags":[107,52495,307,1756,19025],"plugin_category":[44],"plugin_contributors":[234297],"plugin_business_model":[],"class_list":["post-275715","plugin","type-plugin","status-publish","hentry","plugin_tags-comments","plugin_tags-downvote","plugin_tags-engagement","plugin_tags-moderation","plugin_tags-upvote","plugin_category-discussion-and-community","plugin_contributors-resite","plugin_committers-resite"],"banners":[],"icons":{"svg":false,"icon":"https:\/\/s.w.org\/plugins\/geopattern-icon\/comments-press-zone.svg","icon_2x":false,"generated":true},"screenshots":[{"src":"https:\/\/ps.w.org\/comments-press-zone\/assets\/screenshot-1.png?rev=3515811","caption":"Comments interface with voting and threaded replies"},{"src":"https:\/\/ps.w.org\/comments-press-zone\/assets\/screenshot-2.png?rev=3515811","caption":"Admin dashboard with moderation statistics"},{"src":"https:\/\/ps.w.org\/comments-press-zone\/assets\/screenshot-3.png?rev=3515811","caption":"Design customization panel with live preview"},{"src":"https:\/\/ps.w.org\/comments-press-zone\/assets\/screenshot-4.png?rev=3515811","caption":"Moderation tools with user management"},{"src":"https:\/\/ps.w.org\/comments-press-zone\/assets\/screenshot-5.png?rev=3515811","caption":"Responsive mobile view"}],"raw_content":"<!--section=description-->\n<p>Comments Press Zone transforms your WordPress comments into a modern, engaging discussion platform. Built for performance and accessibility, it seamlessly replaces the default comment system while preserving all your existing comments.<\/p>\n\n<h4>Key Features<\/h4>\n\n<p><strong>Engagement Tools<\/strong><\/p>\n\n<ul>\n<li>Upvote and downvote comments<\/li>\n<li>Social sharing (Facebook, Twitter\/X, LinkedIn)<\/li>\n<li>Threaded replies with configurable nesting depth<\/li>\n<li>Confetti celebration on new comments<\/li>\n<li>Post-comment sharing prompts<\/li>\n<\/ul>\n\n<p><strong>Design Customization<\/strong><\/p>\n\n<ul>\n<li>Three color modes: Light, Dark, and Theme Inherit<\/li>\n<li>Styling options: Square, Rounded, or Pill borders<\/li>\n<li>Adjustable padding: Wide, Standard, or Minimal<\/li>\n<li>Configurable border thickness<\/li>\n<li>Live preview in admin panel<\/li>\n<li>Fully responsive for all devices<\/li>\n<\/ul>\n\n<p><strong>Powerful Moderation<\/strong><\/p>\n\n<ul>\n<li>Ban users permanently or temporarily<\/li>\n<li>Mute users for specified periods<\/li>\n<li>Issue warnings with custom messages<\/li>\n<li>Full moderation audit log<\/li>\n<li>User infraction history<\/li>\n<li>Report system for community moderation<\/li>\n<li>Comment editing and deletion<\/li>\n<\/ul>\n\n<p><strong>Security &amp; Spam Protection<\/strong><\/p>\n\n<ul>\n<li>Google reCAPTCHA v3 integration<\/li>\n<li>Comment rate limiting (throttling)<\/li>\n<li>Banned words filter<\/li>\n<li>External link blocking option<\/li>\n<\/ul>\n\n<p><strong>Performance<\/strong><\/p>\n\n<ul>\n<li>Optimized database queries<\/li>\n<li>Optional Redis caching support<\/li>\n<li>Optional Memcached support<\/li>\n<li>Minimal frontend footprint<\/li>\n<\/ul>\n\n<p><strong>Accessibility<\/strong><\/p>\n\n<ul>\n<li>WCAG 2.1 AA compliant<\/li>\n<li>Full keyboard navigation<\/li>\n<li>Screen reader optimized<\/li>\n<li>Focus indicators on all interactive elements<\/li>\n<li>Respects prefers-reduced-motion<\/li>\n<\/ul>\n\n<h4>Perfect For<\/h4>\n\n<ul>\n<li>Community websites requiring robust moderation tools<\/li>\n<li>Publications wanting engagement metrics and voting<\/li>\n<li>Blogs needing customizable comment appearance<\/li>\n<li>Sites requiring spam protection beyond Akismet<\/li>\n<li>Developers building extensible comment systems<\/li>\n<\/ul>\n\n<h4>Requirements<\/h4>\n\n<ul>\n<li>WordPress 6.0 or higher<\/li>\n<li>PHP 7.4 or higher<\/li>\n<li>MySQL 5.7 or higher<\/li>\n<\/ul>\n\n<h3>External Services<\/h3>\n\n<p>This plugin connects to external services under specific conditions:<\/p>\n\n<p><strong>Google reCAPTCHA v3<\/strong> (Optional - Admin Configuration Required)<\/p>\n\n<ul>\n<li><strong>What it is<\/strong>: Google's invisible spam protection service that analyzes user behavior to detect bots<\/li>\n<li><strong>When used<\/strong>: Only when reCAPTCHA is explicitly enabled by the site administrator in plugin settings (Settings &gt; Spam &amp; Moderation &gt; Enable reCAPTCHA) AND a user submits a comment<\/li>\n<li><strong>Data sent<\/strong>: \n\n<ul>\n<li>Comment form token generated by reCAPTCHA JavaScript<\/li>\n<li>User's IP address for verification<\/li>\n<li>reCAPTCHA response token<\/li>\n<li>Browser\/device information collected by Google's reCAPTCHA script<\/li>\n<\/ul><\/li>\n<li><strong>Purpose<\/strong>: Spam protection and bot detection to prevent automated comment spam<\/li>\n<li><strong>User control<\/strong>: Site administrators can completely disable this feature in plugin settings. When disabled, no data is sent to Google.<\/li>\n<li><strong>Privacy Policy<\/strong>: https:\/\/policies.google.com\/privacy<\/li>\n<li><strong>Terms of Service<\/strong>: https:\/\/policies.google.com\/terms<\/li>\n<li><strong>Additional info<\/strong>: https:\/\/developers.google.com\/recaptcha<\/li>\n<\/ul>\n\n<p><strong>Social Media Sharing Links<\/strong> (User-Initiated Only - No Automatic Data Transmission)<\/p>\n\n<p>The plugin generates share links for social media platforms. <strong>Important<\/strong>: No data is sent automatically. The plugin only creates clickable links. Data is only transmitted when a user voluntarily clicks a share button.<\/p>\n\n<ul>\n<li><p><strong>Facebook Sharing<\/strong><\/p>\n\n<ul>\n<li><strong>What it is<\/strong>: Direct link to Facebook's share dialog<\/li>\n<li><strong>When used<\/strong>: Only when a user voluntarily clicks the Facebook share button on a comment<\/li>\n<li><strong>Data sent<\/strong>: Post\/comment URL (via URL parameter: <code>?u=<\/code>)<\/li>\n<li><strong>Purpose<\/strong>: Allow users to share comments on their Facebook timeline<\/li>\n<li><strong>User control<\/strong>: Users must explicitly click the share button. No data is sent otherwise. Administrators can disable Facebook sharing in plugin settings.<\/li>\n<li><strong>Privacy Policy<\/strong>: https:\/\/www.facebook.com\/privacy\/policy\/<\/li>\n<li><strong>Terms<\/strong>: https:\/\/www.facebook.com\/terms.php<\/li>\n<li><strong>Note<\/strong>: The plugin does not embed Facebook tracking pixels or the Facebook SDK. It only provides a standard share link.<\/li>\n<\/ul><\/li>\n<li><p><strong>Twitter\/X Sharing<\/strong><\/p>\n\n<ul>\n<li><strong>What it is<\/strong>: Direct link to Twitter's tweet intent interface<\/li>\n<li><strong>When used<\/strong>: Only when a user voluntarily clicks the Twitter\/X share button on a comment<\/li>\n<li><strong>Data sent<\/strong>: Post\/comment URL (via URL parameter: <code>?url=<\/code>)<\/li>\n<li><strong>Purpose<\/strong>: Allow users to share comments on Twitter\/X<\/li>\n<li><strong>User control<\/strong>: Users must explicitly click the share button. No data is sent otherwise. Administrators can disable Twitter sharing in plugin settings.<\/li>\n<li><strong>Privacy Policy<\/strong>: https:\/\/twitter.com\/en\/privacy<\/li>\n<li><strong>Terms<\/strong>: https:\/\/twitter.com\/en\/tos<\/li>\n<li><strong>Note<\/strong>: The plugin does not embed Twitter tracking scripts. It only provides a standard tweet intent link.<\/li>\n<\/ul><\/li>\n<li><p><strong>LinkedIn Sharing<\/strong><\/p>\n\n<ul>\n<li><strong>What it is<\/strong>: Direct link to LinkedIn's share article interface<\/li>\n<li><strong>When used<\/strong>: Only when a user voluntarily clicks the LinkedIn share button on a comment<\/li>\n<li><strong>Data sent<\/strong>: Post\/comment URL (via URL parameter: <code>?url=<\/code>)<\/li>\n<li><strong>Purpose<\/strong>: Allow users to share comments on their LinkedIn profile<\/li>\n<li><strong>User control<\/strong>: Users must explicitly click the share button. No data is sent otherwise. Administrators can disable LinkedIn sharing in plugin settings.<\/li>\n<li><strong>Privacy Policy<\/strong>: https:\/\/www.linkedin.com\/legal\/privacy-policy<\/li>\n<li><strong>Terms<\/strong>: https:\/\/www.linkedin.com\/legal\/user-agreement<\/li>\n<li><strong>Note<\/strong>: The plugin does not embed LinkedIn tracking pixels. It only provides a standard share link.<\/li>\n<\/ul><\/li>\n<\/ul>\n\n<p><strong>Important Clarifications<\/strong>:<\/p>\n\n<ol>\n<li><p><strong>No Automatic Tracking<\/strong>: The plugin does NOT automatically send data to social media platforms. It only generates share URLs. When a user clicks a share button, they are redirected to the respective platform's website, which is outside the plugin's control.<\/p><\/li>\n<li><p><strong>Administrator Control<\/strong>: Site administrators can disable any or all social sharing options in Settings &gt; Comments Display &gt; Social Sharing.<\/p><\/li>\n<li><p><strong>No External Scripts<\/strong>: The plugin does not load Facebook SDK, Twitter widgets, or LinkedIn tracking scripts on your site. All sharing is done via standard URL parameters.<\/p><\/li>\n<li><p><strong>Data Privacy<\/strong>: The plugin does not store or log sharing activity. All sharing happens directly between the user's browser and the social media platform.<\/p><\/li>\n<\/ol>\n\n<h3>Privacy Policy<\/h3>\n\n<p>Comments Press Zone stores the following data in your WordPress database:<\/p>\n\n<p><strong>Comment Data (Standard WordPress)<\/strong>\n* Comment content, author name, email, and IP address\n* Comment timestamps and parent relationships<\/p>\n\n<p><strong>Engagement Data<\/strong>\n* Votes (upvotes\/downvotes) linked to user ID or IP for guests\n* User reputation scores<\/p>\n\n<p><strong>Moderation Data<\/strong>\n* User bans, mutes, and warnings with timestamps\n* Moderation audit log entries\n* User reports<\/p>\n\n<p><strong>No External Data Sharing<\/strong><\/p>\n\n<p>All data is stored locally in your WordPress database. External connections only occur when:<\/p>\n\n<ul>\n<li><strong>reCAPTCHA<\/strong> (if enabled): Interaction data sent to Google for spam verification<\/li>\n<li><strong>Social Sharing<\/strong>: When users click share buttons, they are redirected to social platforms<\/li>\n<\/ul>\n\n<h3>Development<\/h3>\n\n<p>Comments Press Zone is actively developed. Report issues or contribute:<\/p>\n\n<ul>\n<li>GitHub: <a href=\"https:\/\/github.com\/avi-ezra\/comments-press-zone\">github.com\/avi-ezra\/comments-press-zone<\/a><\/li>\n<li>Website: <a href=\"https:\/\/press.zone\">press.zone<\/a><\/li>\n<\/ul>\n\n<h4>Source Code<\/h4>\n\n<p>This plugin contains compiled\/minified JavaScript and CSS files. The full source code is available in the plugin directory and on GitHub:<\/p>\n\n<p><strong>Compiled Files and Their Sources:<\/strong><\/p>\n\n<ul>\n<li><p><strong>admin\/build\/admin.js<\/strong> (minified) - Source in <code>admin\/src-vanilla\/<\/code> directory<\/p>\n\n<ul>\n<li>Individual module files: main.js, state\/*, components\/*, utils\/*<\/li>\n<li>Build command: <code>cd admin &amp;&amp; npm install &amp;&amp; npm run build<\/code><\/li>\n<li>Build tool: Webpack 5 with Babel<\/li>\n<\/ul><\/li>\n<li><p><strong>Frontend JavaScript<\/strong> - Source in <code>assets\/js\/<\/code> directory<\/p>\n\n<ul>\n<li>All frontend JS files are uncompressed and included as-is<\/li>\n<li>Files: frontend.js, components\/*.js<\/li>\n<\/ul><\/li>\n<li><p><strong>Stylesheets<\/strong> - Source in <code>assets\/scss\/<\/code> directory<\/p>\n\n<ul>\n<li>SCSS files that compile to <code>assets\/css\/frontend.css<\/code><\/li>\n<li>Build command: <code>npm install &amp;&amp; npm run build:css<\/code> (from plugin root)<\/li>\n<li>Build tool: node-sass\/sass compiler<\/li>\n<\/ul><\/li>\n<\/ul>\n\n<p>All source code is included in the plugin download and is available at: https:\/\/github.com\/avi-ezra\/comments-press-zone<\/p>\n\n<h4>Hooks &amp; Filters<\/h4>\n\n<p>Developers can extend functionality using WordPress hooks. Documentation available on GitHub.<\/p>\n\n<h3>Credits<\/h3>\n\n<p>Developed by <a href=\"https:\/\/press.zone\">Press.zone<\/a><\/p>\n\n<h4>Technologies Used<\/h4>\n\n<ul>\n<li>Vanilla JavaScript (no jQuery dependency)<\/li>\n<li>SCSS for styling<\/li>\n<li>WordPress REST API<\/li>\n<li>WordPress native comment system<\/li>\n<\/ul>\n\n<!--section=installation-->\n<ol>\n<li>Upload the <code>comments-press-zone<\/code> folder to <code>\/wp-content\/plugins\/<\/code><\/li>\n<li>Activate the plugin through the 'Plugins' menu in WordPress<\/li>\n<li>Navigate to <strong>Comments Zone &gt; Design<\/strong> to customize appearance<\/li>\n<li>Configure settings in <strong>Comments Zone &gt; Settings<\/strong><\/li>\n<\/ol>\n\n<h4>Quick Start<\/h4>\n\n<p>After activation:<\/p>\n\n<ol>\n<li>Visit any post with comments to see the new interface<\/li>\n<li>Customize colors and styling in Design settings<\/li>\n<li>Enable\/disable engagement features in Settings<\/li>\n<li>Configure spam protection as needed<\/li>\n<\/ol>\n\n<!--section=faq-->\n<dl>\n<dt id=\"does%20this%20replace%20wordpress%20default%20comments%3F\"><h3>Does this replace WordPress default comments?<\/h3><\/dt>\n<dd><p>Yes, Comments Press Zone integrates with WordPress native comments while providing an enhanced interface and additional features. All existing comments display seamlessly.<\/p><\/dd>\n<dt id=\"is%20it%20compatible%20with%20my%20theme%3F\"><h3>Is it compatible with my theme?<\/h3><\/dt>\n<dd><p>Yes! The plugin includes a \"Theme Inherit\" mode that automatically adapts to your active theme's colors. You can also choose Light or Dark modes for consistent styling.<\/p><\/dd>\n<dt id=\"will%20i%20lose%20my%20existing%20comments%3F\"><h3>Will I lose my existing comments?<\/h3><\/dt>\n<dd><p>No. The plugin uses WordPress's native comment system. All existing comments remain intact and display in the new interface.<\/p><\/dd>\n<dt id=\"does%20it%20work%20with%20other%20comment%20plugins%3F\"><h3>Does it work with other comment plugins?<\/h3><\/dt>\n<dd><p>Comments Press Zone replaces the default comment display. It may conflict with other comment plugins like Disqus, Jetpack Comments, or wpDiscuz. We recommend deactivating other comment plugins.<\/p><\/dd>\n<dt id=\"how%20do%20i%20enable%20dark%20mode%3F\"><h3>How do I enable dark mode?<\/h3><\/dt>\n<dd><p>Navigate to <strong>Comments Zone &gt; Design &gt; Colors<\/strong> and select \"Dark\". For automatic detection based on user preference or theme, select \"Inherit\".<\/p><\/dd>\n<dt id=\"what%20moderation%20tools%20are%20included%3F\"><h3>What moderation tools are included?<\/h3><\/dt>\n<dd><p>Full moderation suite including: ban users (permanent or temporary), mute users, issue warnings, view user history and infractions, manage reports, and complete audit log of all moderation actions.<\/p><\/dd>\n<dt id=\"how%20does%20spam%20protection%20work%3F\"><h3>How does spam protection work?<\/h3><\/dt>\n<dd><p>Multiple layers: Google reCAPTCHA v3 (optional), comment rate limiting, banned words filter, and optional blocking of external links. Works alongside Akismet if installed.<\/p><\/dd>\n<dt id=\"can%20i%20customize%20the%20comment%20display%20order%3F\"><h3>Can I customize the comment display order?<\/h3><\/dt>\n<dd><p>Yes! In Settings &gt; Comments Display, you can choose between \"Newest First\" or \"Oldest First\" ordering.<\/p><\/dd>\n<dt id=\"is%20it%20translation%20ready%3F\"><h3>Is it translation ready?<\/h3><\/dt>\n<dd><p>Yes, fully translatable with included .pot file. Hebrew translation included. All strings use the <code>comments-press-zone<\/code> text domain.<\/p><\/dd>\n<dt id=\"does%20it%20support%20rtl%20languages%3F\"><h3>Does it support RTL languages?<\/h3><\/dt>\n<dd><p>Yes, full RTL (right-to-left) support is included for languages like Hebrew, Arabic, and Persian.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>1.0.6<\/h4>\n\n<ul>\n<li>WordPress.org Compliance: Fixed internationalization issue - removed dynamic translation of user-configurable template values (Options.php:141)<\/li>\n<li>WordPress.org Compliance: Added comprehensive build tools documentation (CONTRIBUTING.md) with detailed instructions for webpack and SCSS compilation<\/li>\n<li>Documentation: Enhanced developer onboarding with step-by-step build process, directory structure, and troubleshooting guide<\/li>\n<li>Code Quality: Clarified that user-defined email templates and tooltip text should not be passed through gettext functions<\/li>\n<\/ul>\n\n<h4>1.0.5<\/h4>\n\n<ul>\n<li>Security Fix: CRITICAL - Fixed SQL injection vulnerability in RestReports (added whitelist validation for report types)<\/li>\n<li>Security Fix: CRITICAL - Fixed SQL injection vulnerability in RestInfractions (wrapped query with $wpdb-&gt;prepare())<\/li>\n<li>Security Fix: HIGH - Fixed privilege escalation in comment editing (reordered ownership check before moderator permissions)<\/li>\n<li>Security Fix: HIGH - Fixed stored XSS via innerHTML in Editor component (replaced all .innerHTML with .textContent for user data)<\/li>\n<li>Security Fix: MEDIUM - Added HMAC validation for rate limit bypass prevention (cryptographic validation with wp_hash())<\/li>\n<li>Security Fix: MEDIUM - Fixed information disclosure in REST API (generic error messages, detailed errors logged only)<\/li>\n<li>Security Fix: MEDIUM - Added IP address validation before sanitization (filter_var validation)<\/li>\n<li>Accessibility: Added navigation landmark with aria-label to pagination for screen reader context<\/li>\n<li>Accessibility: Implemented aria-pressed attribute for Editor toolbar toggle buttons (bold, italic, etc.)<\/li>\n<li>Accessibility: Added language attributes to dynamically generated content (templates, modals)<\/li>\n<li>Accessibility: Enhanced vote announcements with descriptive context (\"Comment now has X votes\")<\/li>\n<li>Accessibility: Improved emoji picker keyboard navigation robustness (boundary checks, focus management)<\/li>\n<li>Accessibility: Modernized skip link with clip-path (better browser support)<\/li>\n<li>Accessibility: Added high-contrast focus styles to admin interface<\/li>\n<li>Accessibility: Added screen-reader-only heading to comment items (semantic structure)<\/li>\n<li>Accessibility: Enhanced emoji category announcements (\"Showing X category with Y emojis\")<\/li>\n<li>Accessibility: Added sr-only text to loading spinner for screen readers<\/li>\n<li>Translation: Complete i18n coverage - wrapped all 31 REST API strings with __() translation function<\/li>\n<li>Translation: Added translation support to RestAdmin, RestModeration, RestInfractions, RestReports<\/li>\n<li>Compliance: Achieved 100% WordPress.org Plugin Check compliance (A+ grade)<\/li>\n<li>Compliance: Achieved perfect 10\/10 security score<\/li>\n<li>Compliance: Achieved 100% WCAG 2.1 Level AA accessibility compliance<\/li>\n<li>Code Quality: Created RestBase class to standardize error handling across REST endpoints<\/li>\n<li>Code Quality: Removed duplicate CSS property in modal styles<\/li>\n<li>Documentation: Updated variable comment for styling convention clarity<\/li>\n<\/ul>\n\n<h4>1.0.4<\/h4>\n\n<ul>\n<li>WordPress.org Compliance: Fixed Plugin URI to point to valid GitHub repository (avi-ezra\/comments-press-zone)<\/li>\n<li>WordPress.org Compliance: Updated Contributors list to only include WordPress.org username 'resite'<\/li>\n<li>WordPress.org Compliance: Enhanced source code documentation with detailed build instructions for admin\/build\/admin.js<\/li>\n<li>WordPress.org Compliance: Expanded External Services documentation with comprehensive details for reCAPTCHA and social sharing<\/li>\n<li>WordPress.org Compliance: Verified \"Powered by\" attribution removed from frontend (already removed in 1.0.3)<\/li>\n<li>Security: Enhanced IP address validation in reCAPTCHA verification using FILTER_VALIDATE_IP filter<\/li>\n<li>Security: Improved settings sanitization with proper handling for multiline fields, passwords, and API keys<\/li>\n<li>Code Quality: Added PHPCS suppression comment for legitimate dynamic translation of user-configurable templates<\/li>\n<li>Code Quality: Enhanced per-field sanitization in Settings.php (sanitize_textarea_field for email bodies, preserve API key special characters)<\/li>\n<li>Development: Added .distignore and build-package.sh for clean WordPress.org package creation (excludes development files)<\/li>\n<li>Documentation: All inline styles and scripts verified as properly enqueued (wp_enqueue_style\/wp_enqueue_script)<\/li>\n<\/ul>\n\n<h4>1.0.3<\/h4>\n\n<ul>\n<li>Compliance: Fixed Plugin URI to point to GitHub repository (was returning 404)<\/li>\n<li>Compliance: Enhanced external services documentation with detailed privacy\/ToS links for Facebook, Twitter, LinkedIn<\/li>\n<li>Compliance: Removed \"Powered by\" attribution from frontend (WordPress.org guideline compliance)<\/li>\n<li>Compliance: Added detailed source code documentation for all compiled\/minified files<\/li>\n<li>Security: Improved IP address sanitization using FILTER_VALIDATE_IP in reCAPTCHA verification<\/li>\n<li>Security: Enhanced settings sanitization to properly handle API keys, secrets, and passwords<\/li>\n<li>Code Quality: Removed unused CSS for footer attribution<\/li>\n<li>Documentation: Added build instructions and source code locations to readme<\/li>\n<\/ul>\n\n<h4>1.0.2<\/h4>\n\n<ul>\n<li>Security Fix: Resolved all WordPress Plugin Check warnings for database queries.<\/li>\n<li>Security Fix: Added file-level PHPCS disable blocks for custom table queries (DirectDatabaseQuery, NoCaching, PreparedSQL).<\/li>\n<li>Security Fix: Fixed translators comment placement for i18n compliance.<\/li>\n<li>Security Fix: Added Squiz.PHP.DiscouragedFunctions ignores for legitimate ini_set() usage (ReDoS protection).<\/li>\n<li>Security Fix: Added esc_html() escaping to display_name in REST API responses.<\/li>\n<li>Compliance: Full WordPress.org Plugin Check compliance for database security rules.<\/li>\n<li>Compliance: Replaced wp_add_inline_style with direct style output for theme color variables.<\/li>\n<li>Accessibility: Added ARIA attributes (role, aria-controls, aria-label) to admin actions menu.<\/li>\n<li>Accessibility: Added full keyboard navigation to emoji picker (arrow keys, Enter, Escape).<\/li>\n<li>Improvement: Increased reCAPTCHA verification timeout from 2s to 5s for reliability.<\/li>\n<li>Code Quality: Refactored 6 files to use consistent PHPCS suppression patterns.<\/li>\n<li>Code Quality: Cleaned up redundant inline PHPCS comments.<\/li>\n<\/ul>\n\n<h4>1.0.1<\/h4>\n\n<ul>\n<li>Security Fix: CRITICAL - Fixed IDOR vulnerability in comment deletion (moderators can now only delete comments on posts they moderate).<\/li>\n<li>Security Fix: HIGH - Fixed ban\/mute system bypass by consolidating warnings table and user meta checks.<\/li>\n<li>Security Fix: MEDIUM - Added dual-layer rate limiting (User ID + IP Address) to vote system.<\/li>\n<li>Security Fix: MEDIUM - Added ReDoS protection to banned word patterns (wildcard\/length limits + PCRE backtrack limits).<\/li>\n<li>Security Fix: MEDIUM - Removed information disclosure in error messages (generic messages instead of revealing banned words).<\/li>\n<li>Enhancement: Complete GridTable component refactor using CSS Grid for perfect column alignment.<\/li>\n<li>Enhancement: Recent Activity section redesigned to use GridTable for consistent UI.<\/li>\n<li>Improvement: GridTable accessibility enhanced with scope attributes (WCAG 2.1 AA Compliant).<\/li>\n<li>Improvement: Added robust hosting compatibility checks for regex operations.<\/li>\n<li>Fix: Resolved column alignment issues in Moderation tabs.<\/li>\n<li>Fix: Removed disconnected border lines in table cells.<\/li>\n<li>Performance: Optimized table rendering with direct CSS Grid children.<\/li>\n<\/ul>\n\n<h4>1.0.0.6<\/h4>\n\n<ul>\n<li>Security Hardening: Improved sanitization for user IP addresses.<\/li>\n<li>Security Hardening: Enforced strict sanitization for settings inputs.<\/li>\n<li>Security Hardening: Secured ReCAPTCHA key storage.<\/li>\n<li>Fix: Escaping in comment templates to prevent XSS.<\/li>\n<li>Fix: Editor component linting issues.<\/li>\n<\/ul>\n\n<h4>1.0.0<\/h4>\n\n<ul>\n<li>Initial public release<\/li>\n<li>Full commenting system with voting<\/li>\n<li>Moderation suite (ban, mute, warn)<\/li>\n<li>Design customization with live preview<\/li>\n<li>reCAPTCHA v3 integration<\/li>\n<li>Social sharing integration<\/li>\n<li>Accessibility compliance (WCAG 2.1 AA)<\/li>\n<li>Redis and Memcached caching support<\/li>\n<li>Complete admin dashboard<\/li>\n<\/ul>","raw_excerpt":"A modern, high-performance commenting system for WordPress with voting, moderation, and customizable design.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/fr.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/275715","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fr.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/fr.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/fr.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=275715"}],"author":[{"embeddable":true,"href":"https:\/\/fr.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/resite"}],"wp:attachment":[{"href":"https:\/\/fr.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=275715"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/fr.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=275715"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/fr.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=275715"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/fr.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=275715"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/fr.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=275715"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/fr.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=275715"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}