WP Job Manager

2.4.6 – 2026-08-19

• Allow reusing a submitter’s saved company logo on a new listing (#3082)
• Allow reusing a listing’s existing logo on edit when authored by another user (#3060)
• Fix notice dismiss button colliding with core styles (#3036)
• Fix unreadable notice-banner button text on Settings (#3029)
• Decode HTML entities in plain-text job title contexts (#3026)
• Indicate WordPress 7.0 compatibility (#3015)
• Verify the TLS certificate on the geocoding request (#3014)
• Exclude password-protected listings from the promoted jobs feed (#3012)
• Only accept a manual listing expiry from the gated admin edit (#3011)

• Prevent the edit-job form from creating a new listing for an unauthorized or logged-out request.

• Enforce company-logo attachment ownership when saving a job listing as a draft.

• Apply the post-password check to the [job] and [job_apply] shortcodes.

2.4.5 – 2026-07-01

• Escape URLs in two sprintf href templates with esc_url() (#2996)
• Validate attachment ownership when reusing a company logo by ID (#2995)
• Honor restrictive filter_post_status=publish for logged-out visitors (#2994)

2.4.4 – 2026-06-24

• Fix: Restore the frontend styles and scripts that were missing from the 2.4.3 package. The 2.4.3 release was built without its compiled CSS and JavaScript, leaving the employer job dashboard unstyled and breaking frontend features such as the job application form. (#2990)

2.4.3 – 2026-06-24

• Apply the View Job Capability to WordPress search and oEmbed output.
• Apply the View Job Capability to the REST search endpoint (#2984)
• Fail closed correctly when an author filter resolves to no valid IDs (#2983)
• Apply the View Job Capability to job listing feeds (#2982)
• Enforce listing submission limit when publishing a previewed listing (#2981)
• Restore PHP 8.4 test coverage modernise bootstrap error handler (#2970)
• Fix: Promote button data-href attribute now correctly quoted in job listings table.
• Fix: Promote URL in inline script now escaped with esc_js().
• Author filter follow-up: centralize parsing, close AJAX array bypass (#2958)
• Add square-format hint and configurable max size for company logo uploads (#2957)
• “Remove “See what’s new in 2.3″ from Job Statistics Banner”
• New: The [jobs] shortcode now supports an author attribute to filter listings by user ID (e.g. [jobs author="42"] or [jobs author="1,2,3"])

2.4.2 – 2026-05-12

• Fix Job Dashboard actions menu on Safari (#2947)
• Harden submit-form session cookies (#2945)
• Fixes a REST API information disclosure where the body, excerpt, and existence of listings restricted by view-capability were exposed to denied viewers. Restricted listings now return 404 indistinguishable from a missing post, including HEAD probes and listings that are also password-protected.
• Fixes a data-loss bug where editors opening a password-protected listing in the block editor would save empty meta values (location, company name, application target).
• Fixes a series of information disclosure issues affecting password-protected and capability-restricted job listings.
• Harden stats AJAX endpoint input validation and rate limiting (#2938)
• Company logo uploads now accept WebP images by default
• New filter job_manager_company_logo_allowed_mime_types allows customizing allowed file types for the company logo field
• The salary currency field on the job submission form now correctly reflects the configured default currency in its placeholder and helper text.
• Filled job listings are no longer exposed via the REST API.
• Job categories are now included in the job RSS feed XML output.
• Added featured=true query parameter support to the job RSS feed to allow filtering by featured listings only.
• Fixed PHP 8+ undefined array key warning in the widget caching methods.
• Updated Twitter profile links to use the new x.com domain and updated related labels to “X / Twitter” to reflect the platform rebrand.
• Added a Settings link to the plugin action links on the Plugins screen for quicker access to plugin settings.