From b7b0a53b5175f44bb130a32be6dfe6e9c58a9626 Mon Sep 17 00:00:00 2001 From: Joe Fusco Date: Fri, 23 Oct 2026 11:39:52 -0400 Subject: [PATCH 1/5] fix(previews): align the Requires PHP and Tested up to headers The plugin header said "8.2+", which Plugin Check rejects, and readme.txt still said PHP 7.4 from before 1.0.2 raised the minimum to 8.2. readme.txt also said Tested up to 6.9 while the plugin header said 7.0; both now say 7.0. --- plugins/hwp-previews/hwp-previews.php | 2 +- plugins/hwp-previews/readme.txt | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/plugins/hwp-previews/hwp-previews.php b/plugins/hwp-previews/hwp-previews.php index de7d76eb..0bb622ee 100644 --- a/plugins/hwp-previews/hwp-previews.php +++ b/plugins/hwp-previews/hwp-previews.php @@ -12,7 +12,7 @@ * Domain Path: /languages * Requires at least: 6.0 * Tested up to: 7.0 - * Requires PHP: 8.2+ + * Requires PHP: 8.2 * License: GPLv2 or later * License URI: https://www.gnu.org/licenses/gpl-2.0.html * diff --git a/plugins/hwp-previews/readme.txt b/plugins/hwp-previews/readme.txt index 7a2ce917..af9a2651 100644 --- a/plugins/hwp-previews/readme.txt +++ b/plugins/hwp-previews/readme.txt @@ -2,8 +2,8 @@ Contributors: colin-murphy, joefusco, thdespou, ahuseyn, wpengine Tags: GraphQL, Headless, Previews, WPGraphQL, React, Rest Requires at least: 6.0 -Tested up to: 6.9 -Requires PHP: 7.4 +Tested up to: 7.0 +Requires PHP: 8.2 Stable tag: 1.0.2 License: GPL-2.0 License URI: https://www.gnu.org/licenses/gpl-2.0.html From 783e17c36af1dc9e11ca2bd4799efb4f70c29248 Mon Sep 17 00:00:00 2001 From: Joe Fusco Date: Fri, 23 Oct 2026 11:40:15 -0400 Subject: [PATCH 2/5] fix(previews): block direct access to the files Plugin Check flagged --- plugins/hwp-previews/activation.php | 4 ++++ plugins/hwp-previews/deactivation.php | 4 ++++ plugins/hwp-previews/src/Templates/admin.php | 4 ++++ plugins/hwp-previews/src/Templates/iframe.php | 4 ++++ 4 files changed, 16 insertions(+) diff --git a/plugins/hwp-previews/activation.php b/plugins/hwp-previews/activation.php index 7c6d928b..fe4ef909 100644 --- a/plugins/hwp-previews/activation.php +++ b/plugins/hwp-previews/activation.php @@ -9,6 +9,10 @@ declare(strict_types=1); +if ( ! defined( 'ABSPATH' ) ) { + exit; +} + /** * Runs when the plugin is activated. */ diff --git a/plugins/hwp-previews/deactivation.php b/plugins/hwp-previews/deactivation.php index 0d81bb14..9a9bff91 100644 --- a/plugins/hwp-previews/deactivation.php +++ b/plugins/hwp-previews/deactivation.php @@ -10,6 +10,10 @@ * @since 0.0.1 */ +if ( ! defined( 'ABSPATH' ) ) { + exit; +} + /** * Runs when the plugin is deactivated. */ diff --git a/plugins/hwp-previews/src/Templates/admin.php b/plugins/hwp-previews/src/Templates/admin.php index b912e020..ed1ed0de 100644 --- a/plugins/hwp-previews/src/Templates/admin.php +++ b/plugins/hwp-previews/src/Templates/admin.php @@ -12,6 +12,10 @@ use HWP\Previews\Integration\Faust_Integration; use HWP\Previews\Preview\Post\Post_Settings_Service; +if ( ! defined( 'ABSPATH' ) ) { + exit; +} + $hwp_previews_tabs_config = (array) get_query_var( 'hwp_previews_main_page_config' ); $hwp_previews_current_tab = (string) ( $hwp_previews_tabs_config['current_tab'] ?? '' ); $hwp_previews_tabs = (array) ( $hwp_previews_tabs_config['tabs'] ?? [] ); diff --git a/plugins/hwp-previews/src/Templates/iframe.php b/plugins/hwp-previews/src/Templates/iframe.php index 242d93d1..0baa2687 100644 --- a/plugins/hwp-previews/src/Templates/iframe.php +++ b/plugins/hwp-previews/src/Templates/iframe.php @@ -11,6 +11,10 @@ declare(strict_types=1); +if ( ! defined( 'ABSPATH' ) ) { + exit; +} + $hwp_previews_url_template = \HWP\Previews\Preview\Template\Template_Resolver_Service::get_query_variable(); ?> From 103fa1331e7f803877afecf0e1d21d91d9549b56 Mon Sep 17 00:00:00 2001 From: Joe Fusco Date: Fri, 23 Oct 2026 21:39:23 -0400 Subject: [PATCH 3/5] fix(previews): set Tested up to 6.9, the newest WordPress the CI matrix runs The codeception matrix tests WordPress 6.7 through 6.9, so claiming 7.0 overstated what's tested. --- plugins/hwp-previews/hwp-previews.php | 2 +- plugins/hwp-previews/readme.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/plugins/hwp-previews/hwp-previews.php b/plugins/hwp-previews/hwp-previews.php index 0bb622ee..34f2db95 100644 --- a/plugins/hwp-previews/hwp-previews.php +++ b/plugins/hwp-previews/hwp-previews.php @@ -11,7 +11,7 @@ * Text Domain: hwp-previews * Domain Path: /languages * Requires at least: 6.0 - * Tested up to: 7.0 + * Tested up to: 6.9 * Requires PHP: 8.2 * License: GPLv2 or later * License URI: https://www.gnu.org/licenses/gpl-2.0.html diff --git a/plugins/hwp-previews/readme.txt b/plugins/hwp-previews/readme.txt index af9a2651..013b484f 100644 --- a/plugins/hwp-previews/readme.txt +++ b/plugins/hwp-previews/readme.txt @@ -2,7 +2,7 @@ Contributors: colin-murphy, joefusco, thdespou, ahuseyn, wpengine Tags: GraphQL, Headless, Previews, WPGraphQL, React, Rest Requires at least: 6.0 -Tested up to: 7.0 +Tested up to: 6.9 Requires PHP: 8.2 Stable tag: 1.0.2 License: GPL-2.0 From 321b35861da0316389fa532d0e7fabe3f19cb824 Mon Sep 17 00:00:00 2001 From: Joe Fusco Date: Fri, 23 Oct 2026 21:39:23 -0400 Subject: [PATCH 4/5] fix(previews): declare GPL-2.0-or-later consistently The plugin header said GPLv2 or later, but readme.txt and composer.json said GPL-2.0, which reads as GPL-2.0-only. --- plugins/hwp-previews/composer.json | 2 +- plugins/hwp-previews/readme.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/plugins/hwp-previews/composer.json b/plugins/hwp-previews/composer.json index 92f2e23e..1f888f16 100644 --- a/plugins/hwp-previews/composer.json +++ b/plugins/hwp-previews/composer.json @@ -2,7 +2,7 @@ "name": "wpengine/hwp-previews", "type": "wordpress-plugin", "description": "A WordPress plugin for headless previews.", - "license": "GPL-2.0", + "license": "GPL-2.0-or-later", "version": "1.0.2", "authors": [ { diff --git a/plugins/hwp-previews/readme.txt b/plugins/hwp-previews/readme.txt index 013b484f..dccab9a2 100644 --- a/plugins/hwp-previews/readme.txt +++ b/plugins/hwp-previews/readme.txt @@ -5,7 +5,7 @@ Requires at least: 6.0 Tested up to: 6.9 Requires PHP: 8.2 Stable tag: 1.0.2 -License: GPL-2.0 +License: GPLv2 or later License URI: https://www.gnu.org/licenses/gpl-2.0.html Headless Previews solution for WordPress: fully configurable preview URLs via the settings page which is framework agnostic. From f2a0be87789591af1088f4cf0553808cb12bfc81 Mon Sep 17 00:00:00 2001 From: Joe Fusco Date: Mon, 26 Oct 2026 17:04:23 -0400 Subject: [PATCH 5/5] fix(previews): put the deactivation.php docblock before declare() --- plugins/hwp-previews/deactivation.php | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/plugins/hwp-previews/deactivation.php b/plugins/hwp-previews/deactivation.php index 9a9bff91..8f3fa2bc 100644 --- a/plugins/hwp-previews/deactivation.php +++ b/plugins/hwp-previews/deactivation.php @@ -1,7 +1,4 @@