LaunchGuard Pro – Coming Soon & Maintenance Mode v1.3.0

LaunchGuard Pro – Coming Soon & Maintenance Mode v1.3.0
## 1.3.0 [10th September 2026]

### Security

- Fixed several security issues; most importantly, an unverifiable license no longer switches the coming soon / maintenance page off for the public

### Fixed

- Analytics dashboard never loaded its charts, exports or data endpoint
- Maintenance mode published itself thirty days after activation
- Progress bar was stuck at 0% for launch dates more than sixty days away
- Custom CSS and jQuery were dropped from full HTML templates
- Visitors whose location resolved were silently missing from analytics
- Translations never loaded, and a translated apostrophe broke the countdown and signup form
- Password button style could not be saved, and duplicate emails discarded the real signup

### Changed

- Activation no longer sets a launch date; one is required only in coming soon mode
- Geolocation is cached and looked up only for new visitors
- No PHP session on front-end requests, which had disabled page caching site-wide

LaunchGuard Pro – Coming Soon & Maintenance Mode v1.2.5
## 1.2.5 [22nd August 2026]

### Security

- Fixed a coming soon / maintenance mode bypass that allowed any visitor to reach the site by adding an Elementor query argument or referrer to the request
- Enforced TLS certificate validation on all licensing and update requests; the previous fallback could allow a network attacker to control the update package
- Hardened every licensing payload against PHP object injection by restricting unserialization to plain data
- Replaced the shared, non-expiring password protection cookie with per-visitor random tokens that expire server side and are revoked on logout or password change
- Added brute force throttling to the password protection endpoint
- Access passwords are now stored as a hash instead of clear text, and are excluded from settings exports
- Added nonce verification and rate limiting to the public analytics tracking endpoints
- Added nonce verification to the analytics data, export, migration, and site logo admin endpoints
- Added a capability check to the license activation and deactivation handlers
- Custom template CSS/JS and SEO head markup now require the unfiltered_html capability
- Visitor IP addresses are read from REMOTE_ADDR only and are no longer taken from spoofable forwarded headers
- Analytics values are escaped before being rendered in the admin dashboard
- Geolocation lookups now use HTTPS and can be disabled with the launchguard_enable_geolocation filter
- Removed the license check fallback that treated any stored value as a valid license

### Changed

- Uninstalling now drops the analytics tables so visitor data is not left behind
- Removed the obfuscated base64 helpers in the license base class

LaunchGuard Pro – Coming Soon & Maintenance Mode v1.2.4
## 1.2.4 [10th August 2026]

### Removed

- Promotion notice feature and all of its assets, AJAX handler, and dismissal logic
- Dashboard feed widget and its remote feed requests, transients, and styles

LaunchGuard Pro – Coming Soon & Maintenance Mode v1.2.3
## 1.2.3 [9th August 2026]
### Fixed

- Security issue where data returned by the promotions API could be injected as script into the WordPress admin area
- Promotion links and images are now restricted to http(s) and mailto addresses

### Updated

- Security improved

LaunchGuard Pro – Coming Soon & Maintenance Mode v1.1.2
## 1.1.2 [17th March 2026]

### Added

- Dashboard feed widget with styled RSS posts, banner image, badges, and footer links on the WordPress dashboard
- WordPress admin submenu items for quick navigation to all plugin sections
- Enhanced submenu highlighting with automatic active state management on tab switching and page refresh