Fixed a security vulnerability in the post metabox AJAX endpoint: added nonce verification, capability checks, and a post meta whitelist (CVE-2026-57783)
Fixed an issue where the API key could be reset by transient network or server errors instead of only definitive authentication failures
Improved displaying of the player and playback controls on the mobile lock screen
- Fixed an issue where certain shortcode inputs were not properly sanitized
- Fixed display of saved multilingual settings in the Multilingual tab