Release WP Job Manager 2.4.2

[donnchawp]

Important

Merging this PR will build and publish the new version automatically as a GitHub release, then deploy the new version on the WordPress.org plugin repository.

WP Job Manager 2.4.2

Note

These release notes between the two --- lines will be the final changelog entry for the release. Edit them freely here before merging.

Release Notes

---

• Fix Job Dashboard actions menu on Safari (Fix Job Dashboard actions menu on Safari #2947)
• Harden submit-form session cookies (Harden submit-form session cookies #2945)
• Fixes a REST API information disclosure where the body, excerpt, and existence of listings restricted by view-capability were exposed to denied viewers. Restricted listings now return 404 indistinguishable from a missing post, including HEAD probes and listings that are also password-protected.
• Fixes a data-loss bug where editors opening a password-protected listing in the block editor would save empty meta values (location, company name, application target).
• Fixes a series of information disclosure issues affecting password-protected and capability-restricted job listings.
• Harden stats AJAX endpoint input validation and rate limiting (Harden stats AJAX endpoint input validation and rate limiting #2938)
• Company logo uploads now accept WebP images by default
• New filter job_manager_company_logo_allowed_mime_types allows customizing allowed file types for the company logo field
• The salary currency field on the job submission form now correctly reflects the configured default currency in its placeholder and helper text.
• Filled job listings are no longer exposed via the REST API.
• Job categories are now included in the job RSS feed XML output.
• Added featured=true query parameter support to the job RSS feed to allow filtering by featured listings only.
• Fixed PHP 8+ undefined array key warning in the widget caching methods.
• Updated Twitter profile links to use the new x.com domain and updated related labels to "X / Twitter" to reflect the platform rebrand.
• Added a Settings link to the plugin action links on the Plugins screen for quicker access to plugin settings.

---

Release

Note

Click 'Ready for Review', ping the team, review the PR and merge. Upon merging, automation will:

• Write the release notes above to the changelog
• Create and tag a new GitHub release
• Deploy the release to WordPress.org

---

Plugin build for 757943b
📦 Download plugin zip
▶️ Open in playground

[github-actions]

Please perform the following tests with the built package in a new installation before publishing:

• Follow the setup guide to create WPJM default pages.
• Check that the installed version is correct on the Plugins page.
• Create a new account and login with it.
• Go to the 'Post a Job' page and post a new job.
• Switch to the administrator and approve the newly posted job in admin.
• Visit the 'Jobs' page with the non-admin user and make sure that the job is displayed.

[github-actions]

✅ WP Job Manager 2.4.2 release created!