Security hardening on the public reviewer endpoints and removal of attribution from the preview page. Source code for the bundled assets now ships with the plugin.<\/p>","0.9.1":"
Sidebar now works on Pages and custom post types. Admin menu promoted to top-level. Post-deletion cascade added.<\/p>","0.9.0":"
First public pre-release of Editant.<\/p>"},"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3544459,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3544459,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256},"icon.svg":{"filename":"icon.svg","revision":3544459,"resolution":false,"location":"assets","locale":false}},"assets_banners":{"banner-1544x500.jpg":{"filename":"banner-1544x500.jpg","revision":3544459,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":501},"banner-772x250.jpg":{"filename":"banner-772x250.jpg","revision":3544459,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["0.9.3"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3544459,"resolution":"1","location":"assets","locale":"","width":957,"height":988},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3544459,"resolution":"2","location":"assets","locale":"","width":951,"height":988},"screenshot-3.png":{"filename":"screenshot-3.png","revision":3544459,"resolution":"3","location":"assets","locale":"","width":955,"height":988},"screenshot-4.png":{"filename":"screenshot-4.png","revision":3544459,"resolution":"4","location":"assets","locale":"","width":953,"height":989}},"screenshots":{"1":"The block editor sidebar with active review threads on the current item.","2":"The reviewer-facing preview page showing the rendered content, comment panel, and decision buttons.","3":"The admin dashboard listing every item in review, with reviewer counts and decision summaries.","4":"The detail view showing all links, threads, and decisions for a single item on one screen."}},"plugin_section":[],"plugin_tags":[8196,8533,8485,110,8197],"plugin_category":[53],"plugin_contributors":[264052],"plugin_business_model":[],"class_list":["post-314170","plugin","type-plugin","status-publish","hentry","plugin_tags-approval","plugin_tags-audit","plugin_tags-editorial","plugin_tags-review","plugin_tags-workflow","plugin_category-ratings-and-reviews","plugin_contributors-editant","plugin_committers-editant"],"banners":{"banner":"https:\/\/ps.w.org\/editant\/assets\/banner-772x250.jpg?rev=3544459","banner_2x":"https:\/\/ps.w.org\/editant\/assets\/banner-1544x500.jpg?rev=3544459","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":"https:\/\/ps.w.org\/editant\/assets\/icon.svg?rev=3544459","icon":"https:\/\/ps.w.org\/editant\/assets\/icon.svg?rev=3544459","icon_2x":false,"generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/editant\/assets\/screenshot-1.png?rev=3544459","caption":"The block editor sidebar with active review threads on the current item."},{"src":"https:\/\/ps.w.org\/editant\/assets\/screenshot-2.png?rev=3544459","caption":"The reviewer-facing preview page showing the rendered content, comment panel, and decision buttons."},{"src":"https:\/\/ps.w.org\/editant\/assets\/screenshot-3.png?rev=3544459","caption":"The admin dashboard listing every item in review, with reviewer counts and decision summaries."},{"src":"https:\/\/ps.w.org\/editant\/assets\/screenshot-4.png?rev=3544459","caption":"The detail view showing all links, threads, and decisions for a single item on one screen."}],"raw_content":"\n
Editant is a content review and approval plugin for WordPress. Generate a secure preview link for any post, page, or custom post type and share it with reviewers - clients, stakeholders, internal teams, regulators - who can read the rendered content, leave threaded feedback, and approve or request changes. No WordPress login required for reviewers.<\/p>\n\n
Everything runs on your own WordPress instance. There is no SaaS backend, no per-seat fee, and no reviewer data leaves your server.<\/p>\n\n
.pot<\/code> file shipped.<\/li>\n- GDPR data exporter and eraser hooked into WordPress core privacy tools.<\/li>\n<\/ul>\n\n
Coming next (Pro)<\/h4>\n\n
Editant Pro will add inline (text-anchored) commenting, tracked-changes-style suggestions, multi-reviewer quorum approvals, signed audit trails, deadlines and reminders, per-link access control (passwords, IP allow-lists, view-once links), white-labelling and branding for the reviewer page, and AI-assisted review features using your own provider keys.<\/p>\n\n
Privacy<\/h4>\n\n
Editant stores reviewer comments and decisions in your own database. IP addresses and user agents are hashed with a per-site salt before storage. No data is sent to any external service from the free plugin. AI features (Pro) require you to bring your own provider key (OpenAI, Anthropic, Azure OpenAI, or local models via Ollama) - Editant never proxies AI calls.<\/p>\n\n
Development<\/h3>\n\n
Editant is open source under the GPL. The full source for the admin and reviewer interfaces (React\/JSX and SCSS) ships in this plugin under assets\/src\/<\/code>. Running the build below produces the files in assets\/build\/<\/code> that ship with the plugin.<\/p>\n\nTo rebuild from source:<\/p>\n\n
\n- Install Node.js 22 or later and PHP 8.1 or later.<\/li>\n
- From the plugin directory, run
composer install<\/code> and npm install<\/code>.<\/li>\n- Run
npm run build<\/code>.<\/li>\n<\/ol>\n\nConfiguration files included in the plugin: webpack.config.js<\/code>, package.json<\/code>, composer.json<\/code>. Third-party dependencies are declared in package.json<\/code> (JavaScript) and composer.json<\/code> (PHP). The build pipeline uses @wordpress\/scripts<\/code>.<\/p>\n\n\n\n- Upload the plugin to your
\/wp-content\/plugins\/<\/code> directory, or install via Plugins -> Add New.<\/li>\n- Activate Editant through the Plugins menu.<\/li>\n
- Open any post, page, or supported custom post type in the block editor, click the Editant icon in the sidebar, and generate a review link.<\/li>\n
- Copy the link and send it to your reviewer.<\/li>\n<\/ol>\n\n
Requirements:<\/p>\n\n
\n- WordPress 6.6 or later<\/li>\n
- PHP 8.1 or later<\/li>\n
- MySQL 5.7+ or MariaDB 10.4+<\/li>\n
- Pretty permalinks enabled (Settings -> Permalinks set to anything other than \"Plain\")<\/li>\n
- The WordPress block editor (Gutenberg). The Classic Editor plugin is not supported.<\/li>\n<\/ul>\n\n\n
\nDo reviewers need a WordPress account?<\/h3><\/dt>\nNo. Reviewers click the link you send them and access the preview directly. You can optionally require them to enter a name, or a name plus email, before they can comment.<\/p><\/dd>\n
What content can I send for review?<\/h3><\/dt>\nPosts, pages, and any public custom post type. Each is handled the same way - generate a link, share it, collect feedback and decisions.<\/p><\/dd>\n
Can I revoke a link after sharing it?<\/h3><\/dt>\nYes. From the dashboard, open the link and click Revoke. The token is invalidated immediately and any subsequent access returns a 404.<\/p><\/dd>\n
What happens when a link expires?<\/h3><\/dt>\nThe link returns a 404. You can regenerate it (which produces a fresh token and soft-revokes the old one) or extend the expiry from the dashboard.<\/p><\/dd>\n
My reviewer link returns \"Page not found\". What's wrong?<\/h3><\/dt>\nThis is almost always a WordPress rewrite-rules cache that has not picked up Editant's review URLs yet. Go to Settings -> Permalinks, do not change anything, and click Save Changes. That regenerates the rewrite rules and the review URLs become routable.<\/p>\n\n
This can happen the first time you activate Editant, or after changing your permalink structure. Editant tries to refresh rewrite rules automatically on activation, but on some hosts the refresh does not always stick. The same fix applies if the symptom returns later.<\/p>\n\n
Also confirm that Settings -> Permalinks is not set to \"Plain\". Editant requires pretty permalinks; any of the other settings (Post name, Day and name, etc.) is fine.<\/p><\/dd>\n
Does this work with custom post types?<\/h3><\/dt>\nYes. Editant supports any public custom post type registered with show_in_rest<\/code> and public<\/code> set to true.<\/p><\/dd>\nIs reviewer data sent anywhere outside my site?<\/h3><\/dt>\nNo. Comments, decisions, and reviewer details are stored in your WordPress database. IP addresses and user agents are hashed before storage with a per-site salt.<\/p><\/dd>\n
Can I customise the preview page styling?<\/h3><\/dt>\nThe reviewer preview page ships with neutral, self-contained styles. Custom branding, brand colours, logos, and UI-based styling controls for the reviewer page are planned as part of Editant Pro.<\/p>\n\n
For developers, the preview renderer also exposes filter hooks (editant_template_path<\/code> for full template overrides, and editant_preview_html_head<\/code> \/ editant_preview_html_footer<\/code> for injecting custom markup into the page head and footer) that allow theme-side customisation. See the plugin source for usage.<\/p><\/dd>\nDoes Editant work with the Classic Editor?<\/h3><\/dt>\nNo. Editant is a block editor plugin. The sidebar where you create and manage review links registers against the WordPress block editor (Gutenberg). If you use the Classic Editor plugin, or have classic mode enabled on a per-post basis, the Editant sidebar will not appear on those posts.<\/p><\/dd>\n
How do I uninstall completely?<\/h3><\/dt>\nDeactivate and delete the plugin from the Plugins page. Editant's uninstall.php<\/code> removes the four custom database tables (editant_links<\/code>, editant_reviewers<\/code>, editant_comments<\/code>, editant_approvals<\/code>), the per-site hash salt, the plugin settings, and the registered capabilities.<\/p><\/dd>\nIs this multisite-compatible?<\/h3><\/dt>\nYes. Each subsite gets its own set of tables and links. Network activation is supported.<\/p><\/dd>\n\n<\/dl>\n\n\n
0.9.2<\/h4>\n\n\n- Security: explicit boundary sanitisation added across the reviewer-facing public endpoints (identity capture, comments, decisions).<\/li>\n
- Removed the \"Powered by Editant\" attribution from the reviewer preview page.<\/li>\n
- Source code for the bundled JavaScript and CSS now ships with the plugin under
assets\/src\/<\/code>, alongside the build configuration (composer.json<\/code>, package.json<\/code>, webpack.config.js<\/code>).<\/li>\n- Documentation: added a Development section to the readme covering source layout and rebuild steps. Clarified the preview-page customisation filter hooks available to theme developers.<\/li>\n<\/ul>\n\n
0.9.1<\/h4>\n\n\n- Editor sidebar now appears on Pages and any public custom post type, not just Posts (migrated from
@wordpress\/edit-post<\/code> to @wordpress\/editor<\/code>).<\/li>\n- Admin menu promoted from a submenu under Posts to a top-level menu item.<\/li>\n
- Menu icon is now theme-aware: the SVG silhouette recolours per WordPress admin colour scheme.<\/li>\n
- Permanently deleting a post now also removes its associated Editant links, reviewers, comments, and decisions.<\/li>\n
- User-facing labels in the admin dashboard made post-type-neutral (\"item\", \"title\", \"content\" rather than \"post\").<\/li>\n
- Documentation: clarified that Editant requires the block editor and that the Classic Editor plugin is not supported.<\/li>\n
- Documentation: added FAQ entry covering the rewrite-rules refresh required when reviewer links return 404 immediately after install.<\/li>\n
- Internal: repository interface layer introduced across the four data-path repositories; multisite-aware activator dispatcher.<\/li>\n<\/ul>\n\n
0.9.0<\/h4>\n\n
Initial pre-release.<\/p>\n\n
Reviewer experience<\/strong><\/p>\n\n\n- Tokenised preview links with configurable expiry, revocation, and regeneration.<\/li>\n
- Login-free access; optional name or name + email identity capture.<\/li>\n
- Threaded comments and approve \/ request changes decisions.<\/li>\n<\/ul>\n\n
Authoring experience<\/strong><\/p>\n\n\n- Block editor sidebar with live thread updates (auto-refresh and manual refresh).<\/li>\n
- Reply to reviewer comments from inside the editor.<\/li>\n<\/ul>\n\n
Admin dashboard<\/strong><\/p>\n\n\n- Admin list view with link counts, reviewer activity, and decision summaries.<\/li>\n
- Per-item detail view showing all links, threads, and decisions on one screen.<\/li>\n<\/ul>\n\n
Notifications<\/strong><\/p>\n\n\n- Email notifications via
wp_mail<\/code> for new comments, replies, and decisions.<\/li>\n<\/ul>\n\nInternationalisation and accessibility<\/strong><\/p>\n\n\n- Full RTL support across reviewer page, sidebar, and dashboard.<\/li>\n
- All user-facing strings translatable;
.pot<\/code> file shipped.<\/li>\n<\/ul>\n\nPrivacy and security<\/strong><\/p>\n\n\n- Tokens generated with
random_bytes(32)<\/code>; stored as SHA-256 hashes only.<\/li>\n- Per-site hash salt for IP, email, and user agent fingerprints.<\/li>\n
- Rate limiting on all public endpoints.<\/li>\n
- GDPR personal data exporter and eraser registered with WordPress core privacy tools.<\/li>\n
X-Robots-Tag: noindex, nofollow, noarchive<\/code> and Cache-Control: no-store<\/code> on every preview response.<\/li>\n<\/ul>\n\nQuality<\/strong><\/p>\n\n\n- PHPUnit suite covering domain values, services, repositories, and privacy classes.<\/li>\n
- Playwright end-to-end test for the reviewer happy path.<\/li>\n<\/ul>","raw_excerpt":"Share unpublished WordPress content with reviewers via secure links. Threaded comments, approval decisions, full audit, no logins required.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/314170","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=314170"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/editant"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=314170"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=314170"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=314170"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=314170"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=314170"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=314170"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}