Decryption key:
JCH Optimize Pro For Joomla v9.4.2
Version 9.4.2Stable
Joomla 5.0 Joomla 5.1 Joomla 5.2 Joomla 5.3 Joomla 5.4 Joomla 6.0 Joomla 6.1
Released on: Saturday, 10 October 2026
What's new
Version 9.4.2 is a security and maintenance release, and we recommend all users update. Sites that connect to Redis through a Unix socket should update immediately: since 9.4.0, those connections failed and JCH Optimize fell back to filesystem storage.
Security: this release stops CSS and JavaScript files outside the site root from being read through encoded slashes in their URLs when files are combined, and stops combining files from fetching files from private network addresses. It also fixes cross-site scripting in the Critical JavaScript Configure Helper, keeps the Download ID out of settings exports, lets the request that starts a Recache be used only once, and waits for an administrator before applying the .htaccess changes and plugin ordering after an update.
Page Cache: tag pages no longer show an error page after their content for guests, and are cached again. Pages left unoptimized for a single request are no longer cached and served to every visitor. Page Cache's cookies now follow the Cookie Path, Cookie Domain and Force HTTPS settings in Global Configuration, and cover the whole site, so logged-in users are no longer served captured guest pages.
Optimize Fonts: with Optimize CSS Delivery on, the
@font-face rules used above the fold stay in the critical CSS, so fonts are no longer delayed. Stylesheets listed in "Optimize these files" are no longer removed from the page while Optimize Fonts is off.
Installation and updates: new installs now run the post-install tasks, upgrading from the free version to Pro enables the plugins Pro adds, sites keep a single update site with the Download ID, and uninstalling leaves no files behind.
Recache: Recache works again on servers that can't run PHP from the command line, where it cached no pages, and errors there are now logged. Its default Concurrency is lowered from 10 to 5, so a recache leaves PHP workers free for visitors.
Several bugs were fixed, including Save Changes in the Critical JavaScript Configure Helper, Recache on servers that can't reach the cache storage from the command line, the dashboard's bulk settings buttons, browsers autofilling the Redis password, and duplicated @imports. See the CHANGELOG for details.
Developed and tested on up to PHP 8.5.11 and Joomla! 6.1.4