Version 5.0.1

June 9, 2026

Security

  • Bumped the Craft 5 constraint from ^5.0 to ^5.9.18 so consumers no longer install Craft versions affected by GHSA-gj2p-p9m4-c8gw, GHSA-qrgm-p9w5-rrfw, and GHSA-33m5-hqp9-97pw, all patched in Craft 5.9.18. Craft 4 support (^4.4.7.1) is unchanged.
  • Removed an unused scaffolding file (src/web/twig/EntryLinkHelper.php) that contained a rand()-based "password" Twig function. The file was never registered as a Twig extension, but it sat alongside the real one and could have been wired up by mistake.

Fixed

  • Multi-author entries (Craft 5): co-authors who don't have the savepeerentries permission can now retrieve the edit URL for entries they co-author. Previously the check only looked at $entry->authorId (the primary author) and incorrectly denied other listed authors.

Changed

  • Removed two redundant UrlManager URL rule registrations from the plugin init. The endpoint is reached through Craft's action-controller routing (/actions/entry-editor-links/entry-processor/cp-link), so the explicit rules were unused dead code.

Version 5.0.0

March 28, 2024

Added

  • The plugin now supports Craft 5.
  • The version number has jumped to v5 to reflect the Craft version compatibility.
  • The documentation has been updated.
  • The functionality of the plugin have not changed.

Version 1.0.3

June 4, 2023

Added

  • The documentation now includes a note on updating the server rules to not cache the plugin's API endpoint. This is necessary if you're using FastCGI Cache.

Version 1.0.2

May 3, 2023

Fixed

  • Corrected "john-f-morton" change to "johnfmorton" namespace in the documentation.

Version 1.0.1

April 30, 2023

Fixed

  • Corrected "john-f-morton" to "johnfmorton" in composer.json file.

Version 1.0.0

April 30, 2023
  • Initial release