Release v1.2.8.2
Asset CleanUp Pro v1.2.8.2
What's new in v1.2.8.2
Asset CleanUp Pro v1.2.8.2 was released on . Upgrading to the premium plugin allows you to unload unused styles & scripts on extra pages such as: Taxonomy pages such as default WordPress’ categories, tags and custom created ones such as produ... See the full changelog below and compare with the complete version history.
Release details
Released
2.6 MB
File available
Changelog
* **Added:** Roll back Asset CleanUp Pro to an eligible previous version from "Tools" (plugin's menu) - "Rollback", with version selection and confirmation before installation. Existing settings are preserved.
* **Security — Admin Bar:** Fixed a reflected cross-site scripting (XSS) vulnerability in the admin bar by validating asset unload parameters and escaping dynamic output (CVE-2026-92236). Reported by 'Huseyn (mekhatai) Gadashov' via Wordfence.
* **Security — Comment Content XSS:** Completed the fix for the stored cross-site scripting via comment content (follow-up to CVE-2026-13354). The final cleanup of the plugin's temporary `data-wpacu-*` attributes on ` ` tags — previously two whole-document replacements — is now scoped to each ` ` tag and uses bounded, quote-aware patterns. Reported by 'crow' via Wordfence.
* **Security — Front-end HTML Cleanup:** Removed the last remaining whole-document replacement from the HTML cleanup step (it stripped `data-wpacu-style-handle` from ` ` tags); that cleanup now runs through the same tag-scoped methods. Found during the internal review that followed the report above. Every temporary-attribute cleanup is now confined to the tag it belongs to and cannot touch any other part of the page, including user-submitted content.
Compatibility
- Requires WordPress
- 4.7
- Tested up to
- 7.1.3
- Requires PHP
- 5.6
Verified safe
Asset CleanUp Pro v1.2.8.2 scanned clean with no security threats detected.
View full scan report