Justified Image Grid - Premium WordPress Gallery 5.2

New features:

• PhotoSwipe 5 is now available. It is deliberately minimal: the caption sits below or beside the photo rather than over it, and YouTube, Vimeo and self-hosted videos play inside it. PhotoSwipe 4 stays the default, so nothing changes on your site unless you pick the new one.
• Visitors can now download a whole gallery as one zip file from a single link, created in the browser using a service worker, so nothing is ever stored on your server. Switch it on under General settings, where you can also reword the link, or turn it on for one gallery only. The link sits below the grid but is movable anywhere else with a satellite shortcode. There is also a toast with the status of the download. The zip holds what the active filter is showing, plus the photos hidden behind album or cover tiles, which arrive as folders in the zip. Video clips are excluded, and so is any tile that opens a link instead of a photo, i.e. a recent posts grid will skip this feature. A very large gallery may arrive in a few parts to avoid running out of memory.

Improved:

• The plugin’s settings screen now appears the moment the page arrives, instead of staying blank while every other script on your dashboard finishes loading. It also stays readable and its tabs stay clickable if JavaScript is blocked or fails.
• JIG’s PhotoSwipe styling now reaches only the lightbox JIG itself opens, so it can no longer restyle a PhotoSwipe that another plugin put on the same page. If you have custom CSS aimed at JIG’s PhotoSwipe, put the plugin’s own class in front of it: .pswp.jig-pswp for PS4, .pswp.jig-pswp5 for PS5.
• Downloads now begin the moment you click and pass through the server as the bytes arrive, so even a very large image no longer risks exhausting your server’s memory. Images hosted on your own site skip the plugin’s download handler entirely: the link points straight at the image and carries the HTML download attribute, which is all the browser needs to save it rather than open it.
• Large galleries are now built up to 60% faster, and redrawn faster still when the window is resized. The whole grid is added to the DOM in a single write instead of one picture at a time, and the caption work now measures every picture before it restyles any of them. Captions below the thumbnails improved further: they are shortened to fit whenever the grid is redrawn, instead of being checked over and over for as long as the page stays open.

Bugfixes:

• Fixed galleries vanishing from Elementor pages after the first view. Elementor 3.26 and newer freezes a copy of certain elements, and a grid inside one stopped working for everyone after the first visitor. It affected Elementor’s own Image Gallery widget, which JIG picks up because that widget builds an ordinary WordPress gallery under the hood, and grid shortcodes placed in Tabs, Accordion or Toggle widgets. Grids are now kept out of the frozen copy, and any copy already saved is cleared once, when you update.
• Fixed prettyPhoto refusing to open at all on certain Vimeo links, which left the visitor with no lightbox. Unlisted Vimeo videos now play, and so do YouTube Shorts links copied straight from the share dialog.
• Hover captions no longer flash at full strength for an instant before fading in. It was visible in Firefox, most noticeably right after closing the lightbox with the mouse resting on a thumbnail.
• Videos no longer offer a download link. The link on an Instagram video always failed, and on Facebook or YouTube it quietly handed over the cover image instead of the clip people were watching.
• Download links now work on photos whose web address does not end in a familiar image extension such as .jpg or .png. Some image hosts serve photos that way, and the plugin used to refuse them, so the download link failed on every click.
• Fixed a grid rebuilding itself endlessly when its thumbnails would not load, which left the page flickering and never showed the message explaining what to fix. A picture that will not load is now dropped from the grid, whatever is serving it, including Jetpack Site Accelerator, and the message appears only when nothing is left to show.
• On sites using Jetpack Site Accelerator, JIG had gone back to generating gallery thumbnails on your own server instead of letting Site Accelerator size them. Site Accelerator sizes them again, so that work stays off your server.
• On sites using Jetpack Site Accelerator, JIG stopped sizing gallery images altogether whenever its own thumbnail engine could not run on the server, so visitors downloaded full-size pictures for small thumbnails. Site Accelerator now keeps sizing the images it handles, and the Thumbnails screen says which sources are affected while the engine is unavailable.
• When using the “Replace site’s hostname with” (CDN Host) setting with dynamic thumbnail generation on, JIG fetched each original through your CDN before resizing it, wasting a round trip. Originals are now read from your own server, and the resized thumbnail gets served from your CDN.
• Your CDN hostname is now used wherever your site’s own address appears, instead of being skipped for certain gallery types. RSS grids reading your own feed, and the featured images in recent posts grids, go through your CDN now.
• Filling in a CDN hostname under “Replace site’s hostname with” now takes your grids off Site Accelerator altogether. Previously, on a site running both, Jetpack Site Accelerator took precedence over your CDN host, and pictures it refused were handled by neither.
• Images on your own site whose address carries a query string, such as photo.jpg?ver=2, now get thumbnails too. JIG’s thumbnail engine used to refuse them, so those thumbnails failed to load.
• Fixed photos spilling past their border frame when Middle border width was set and captions sat below the photo. It showed up after the page resized, a filter was applied, or more photos loaded.
• Facebook connections that never expire no longer ask to be renewed. A Login for Business (Pages) app gets no expiry date from Facebook, yet JIG announced that such a connection had expired while the galleries kept working. JIG now tells you when a connection has actually stopped working instead of guessing from a date, and clears the notice once it works again.

Security:

• Fixed a disclosure of your Facebook access tokens (CWE-200) to logged-in users who should not have been able to open the shortcode editor at all (CWE-862). The editor now requires the ability to write posts as well as the minimum user role you set, and no admin screen puts a Facebook token in the page anymore, neither the editor nor the plugin’s settings; it is looked up on the server when it is needed. Only the admin area was ever involved, never your public pages.
• The download link now carries an address signed by your own site, and the plugin refuses to fetch anything else. Previously anyone could point that address at any image on the web and have your server fetch it on their behalf, on your bandwidth. If a caching plugin is still serving pages saved from before this update, the download links on them stop working until that cache refreshes.

Added / New features​

• Instagram source is resurrected. Connect your own Instagram account and show your photos, videos and carousel posts in a gallery, set up entirely by yourself with no approval process and no third-party service in between. Your access token is refreshed automatically, so there is no 60-day re-authorization, and caption hashtags become gallery filters. It covers your own media only and needs a Professional (Business or Creator) account, which is a simple toggle on Instagram, though it makes your account public.

Changed / Improved​

• PHP 7.2.24 or newer is required, which covers 99% of WP sites, and matches the minimum that WordPress's own security-supported branch needs, so JIG can use safer, more modern PHP internally. On the rare site still on an older PHP version, the plugin stays inactive and shows a notice explaining how to upgrade, instead of loading and risking errors.
• JIG Thumbs no longer lets its optional debug log grow without limit. If you switch debug logging on to diagnose an issue and leave it on, the log now keeps only its most recent entries.
• JIG Thumbs now accepts larger source images, with the download limit for a fetched image raised from 10 MB to 24 MB and more memory available while resizing. It also skips sources above about 16 megapixels (comfortably beyond 4K resolution), so a single oversized image cannot exhaust your server's memory. That is rarely reached in practice, as WP already scales large uploads down and JIG picks the closest pre-sized variant Flickr and Facebook publish. If you ever need to work from a very large original, you can base the thumbnail on a smaller registered image size instead, using the "Base thumbnail on an image size" option.
• Facebook galleries now load with far fewer requests to Facebook: an album overview that used to make one request per album makes a single request, and feed galleries fetch all their photos together.
• The Facebook overview caching time setting has been removed, because the requests it existed to save no longer happen.
• The User Agent JIG reports when it fetches feeds and external images is now current Chrome, instead of a browser version from 2016 that some sites had started turning away.
• The Instagram icon on the settings and Shortcode Editor screens is now Instagram's current logo instead of the long-retired camera design.

Fixed​

• Fixed a critical error that could appear after updating to v5 on sites using Jetpack's Site Accelerator and PHP 8 or newer. Those pages load normally again, no longer needing a rollback.
• Fixed a misspelled internal keyword behind the doublecolon breadcrumb separator option. Existing shortcodes that use it keep working unchanged.
• PHP notices no longer fill your error log, or show on the page on servers that display warnings. On PHP 8.1 and newer they came from gallery items with no title, caption or description, now handled across NextGen Gallery albums, RSS and feed galleries, Facebook albums and Flickr photosets, and from a video opened in the prettyPhoto lightbox with no poster image. On PHP 8.5, they came from a few calls that version newly deprecated, which the plugin no longer makes.
• Every setting that takes a size now accepts the number with or without px. Sixteen fields carry a length and they used to follow two opposite conventions, most of them wanting a bare 12 and two wanting 12px, with only the help text to tell them apart. Guessing wrong silently did nothing, or reset the field to its default. All of them now take either spelling, and the help text says so in the same words on the settings page and in the Shortcode Editor.
• Guarded against more preventable critical errors on the front end: servers without the GD image library, a Facebook or Flickr feed returning a malformed date, and a plugin folder renamed or only partly uploaded.
• Hardened Justified Image Grid against other plugins that hand an unexpected kind of value to the WordPress hooks it connects to. If a plugin on the same filter returns the wrong type of data, JIG now passes it along untouched instead of risking a critical error on PHP 8 or newer.
• After a successful update, the new version could keep being offered for hours even though it was already operational. That is now cleared as soon as the updated plugin loads.
• Justified Image Grid no longer alarms you about its own thumbnail engine when that is not the one sizing your images. Sites that use Jetpack Site Accelerator, or that have turned dynamic thumbnail generation off, used to get worrying engine-failure notices about a feature they were not using, sometimes two at once. JIG now only tests and reports on its own engine when it is actually in use, and the Thumbnails settings page shows clearly which method is in charge.
• The last-check times on the Thumbnails settings page now show in your site's timezone instead of UTC.
• To avoid sharing a link with a missing or broken image, JIG no longer sets og:image when sharing an image from a Facebook-sourced gallery if the dynamic thumbnail engine is off or unusable. Facebook's CDN turns away many link preview crawlers, its own included, so no social network is allowed to fetch those images, and Jetpack Site Accelerator will not proxy them either.
• Facebook album covers and feed photos could stop loading a few days after a gallery was first shown, because the image URLs Facebook hands out are short-lived. A temporary Facebook error could also stay on screen long after its cause was gone, in some cases for weeks. Both are fixed, and a gallery now recovers by itself on the next page view.
• Facebook connections now count down to the real renewal date that Facebook reports, instead of always assuming two months. Depending on how your Facebook app is set up that is often about three months, so the reminder to re-authorize arrives when renewal is genuinely due rather than up to a month early. Pages now report their own expiry date rather than borrowing the profile's.
• Connecting a Facebook account that manages several Pages now adds every one of them. A brief hiccup at Facebook's end could leave one Page out of the list with nothing on screen to say so, and a real problem behind it, such as a certificate issue on your server, went unreported too. Facebook is now asked again when it answers oddly, and anything still wrong is spelled out in the message log.
• A Facebook gallery, or the album list in the Shortcode Editor, could announce that the content cannot be displayed and suggest reconnecting the account when there was nothing wrong with the connection at all. Facebook occasionally answers a request by leaving out the very content it was asked for, reporting no error of any kind, and the identical request moments later returns everything. Galleries and the editor now ask again before giving up, which the settings page already did when you added a connection.
• Fixed galleries that could fail to appear at all, leaving nothing but the surrounding page, when one of the optional scripts they rely on was not loaded. This could happen with unconditional script loading turned on and a script unticked in the manual "Scripts to load when using unconditional loading" list that a grid actually needed, most often because a preset asked for a different lightbox than your own settings did. The gallery now renders normally and only the affected extra is degraded, whether that is the lightbox, the shortening of captions below thumbnails, or a hover effect.
• Fixed the PhotoSwipe lightbox opening invisibly on sites where another WP plugin loads its own, newer PhotoSwipe. It now shows normally.
• In the Shortcode Editor, clicking the Facebook profile or Page you had already selected no longer clears the album you chose under it. This happened when the click landed on the account's small avatar rather than on its name.
• Names and titles containing a quote, an ampersand or an angle bracket now read as written wherever JIG lists them, instead of coming out mangled or as a broken tile you cannot pick. That covers Facebook, Flickr and Instagram connections on the settings page, where such a name is now saved intact too, and in the Shortcode Editor the account buttons, Facebook albums, and Flickr groups, albums, galleries and collections. Messages that quote Facebook's or Flickr's own wording are shown as plain text as well.
• Facebook videos that have no thumbnail on Facebook are no longer stretched and blurred across a full size tile, they now appear at the shape and size of the placeholder image Facebook returns for them. In the Shortcode Editor, an album that Facebook returns no photos for no longer shows the previous album's cover.
• When your server has a certificate problem, the guide JIG points you to is a working link again in the settings message log and in the Shortcode Editor, instead of the markup around it showing as text.
• In the Shortcode Editor's live preview, clicking a Flickr collection or a Facebook album now opens it, on sites that do not use pretty permalinks. Before, the preview reloaded the same top level each time, with no breadcrumb and a fresh set of cover images, so there was no way to look inside.
• The links that take you to the plugin's settings now open JIG's own entry in the admin menu, at the tab they point to. Several of them used to open under the WordPress Settings menu, on the General tab.
• A filter label you have set now appears in WPML String Translation, so it can be translated like the rest of JIG's text.
• Reconnecting or renewing a Facebook, Instagram or Flickr connection no longer leaves unused cache entries behind in your database.
• The Facebook, X and Pinterest share buttons in the prettyPhoto lightbox no longer stick out past its frame when a tall photo makes the lightbox narrow, they now wrap onto another line inside it.

Security​

• Security scanners should no longer falsely flag JIG's thumbnail engine over branding it had inherited from the older TimThumb script it grew out of.
• JIG Thumbs now verifies each remote site's security certificate when fetching external images, so those images cannot be swapped out or tampered with on their way to your server.
• On servers without cURL, JIG Thumbs now caps the download size and applies a timeout when fetching an external image, the same limits cURL-based servers already had, so an oversized or unresponsive remote image can't exhaust memory or hang the request.
• Hardened JIG Thumbs against several potential abuse vectors involving specially crafted image requests.

Updated​

• Facebook Graph API to v25.0, up from v20.0.
• Documentation, covering the Instagram source and chapter, the thumbnail engine status rows and which method sizes your thumbnails, the source size limits, and the px rule on every length field.
• The Spanish translation now covers this release, including the new Instagram source and the rewritten thumbnail engine and direct-serve status screens.

Added / New features​

• Added a new Individual photos source on the Flickr tab. Paste Flickr photo URLs or IDs (one at a time or many at once) to assemble a hand-picked grid of exactly the photos you want, with drag-to-reorder rows and live thumbnail previews.
• Added a Dropdown filter style for a compact, mobile-friendly dropdown (it uses your device's native picker on phones), with its own CSS and centering settings so you can style and align it just like the button and tag-cloud filters.
• Added an optional filter label shown right before any filter (including the new dropdown) so you can introduce it with text such as "Filter by:".
• New setting, "Flickr download link image size" to offer even the full-resolution original separately for just download while keeping the lightbox bounded for performance.
• The thumbnail engine and its cache can now live in wp-content/justified-image-grid/ so they survive plugin updates. The engine file is renamed from timthumb.php to jig-thumbs.php, reducing automated attack surface. A new Settings panel lets you edit the engine config with PHP syntax highlighting; saves are live-tested and automatically reverted if they break image generation.
• Added a new YouTube consent cookie field on the RSS settings tab. If your server's YouTube grids ever show "YouTube scraping failed" because YouTube serves a regional cookie consent wall instead of the playlist or channel page, paste the SOCS cookie value from an incognito youtube.com session (DevTools, Application or Storage tab, Cookies) into this field to recover. Refresh the value from time to time if scraping ever stops working again.
• NextGEN Gallery v4 (now called Imagely) is now supported with the new imagely shortcode takeover. If you have NextGEN v4 installed and use the imagely shortcode for galleries or albums, JIG can now take over and display them with its justified layout.
• The NextGEN settings tab now shows how to bring back the classic NextGEN gallery management UI that v4 hides.

Changed / Improved​

• Flickr settings now note that creating a new API Key requires Flickr Pro.
• The "Add a new Flickr user" button got a cosmetic rework and no longer points to the defunct idgettr lookup tool, because JIG aims to figure out the Flickr NSID for you. Similarly, the shortcode editor's Flickr Search source gained the same paste-a-URL convenience for user and group fields, resolved via a "Look up" button next to each.
• Flickr source's setting that controls what resolution image to serve in the lightbox has gained 3K/4K options (which may still cover the original size). However, the setting lost the dedicated "original" option, as oversized Flickr photos failed to render in the lightbox on certain mobile browsers when "original image" mode was enabled. Attempting to serve 2048 px versions in the lightbox is the new recommended default (no change for existing installations, except the old original option now points to 4K).
• Thumbnails now arrive from Flickr in appropriate resolutions when dynamic thumbnail generation is off, also supporting Retina Ready feature (larger resolution picks depending on device pixel ratio) with the help of various thumbnail sizes offered by Flickr. This is a step toward reducing reliance on locally-generated thumbnails.
• Retina thumbnails now snap the device pixel ratio to the nearest half step (1x, 1.5x, 2x, 2.5x, 3x) before generating dynamic thumbnail URLs. Previously, displays at unusual scales (like browser zoom) passed their raw fractional value straight through, so a 1.1x phone and a 1.5x tablet asked the thumbnail engine for slightly different file sizes. Each visitor saw their thumbnails just fine, but every unique fractional value forced the engine to generate and cache a fresh file. Snapping caps the worst case at five cached sizes per source image, balancing server load and making use of the new, more persistent direct-serve cache.
• The Max retina density setting now accepts fractional values cleanly. Previously, a value like 1.5 was internally rounded down to 1, so a site owner who set a 1.5x ceiling was actually serving 1x thumbs to all retina visitors. A value like 2.5 was rounded down to 2, capping all 2.5x and 3x displays at 2x. After this change, fractional caps mean exactly what they say.
• Jetpack's Site Accelerator (Photon) thumbnails now look as sharp on high resolution displays as the locally generated ones, taking into account visitor device pixel ratio for both physical size and quality. (Higher resolution at lower quality beats lower resolution at higher quality for perceived sharpness, that results in no bandwidth wasted.)
• When dynamic thumbnail generation is off, each Flickr thumbnail now picks its size against the height of the row it actually lands in, not a single grid-wide value, so rows that come out shorter get a smaller Flickr file, while rows that grow toward the height-deviation maximum get a larger one. Resizing the browser window or rotating a phone updates the picks in place when a row crosses into a different size tier, so each thumbnail keeps a properly matched source size as the layout reflows. This matters here because the trick JIG uses to keep thumbnail file sizes down at high resolutions (lowering quality to offset the larger pixel count) does not apply on Flickr, so picking a smaller-resolution derivative outright is the only way to keep network payload reasonable on Flickr-served grids.
• If your site predominantly serves Flickr galleries, you can now simply turn off dynamic thumbnail generation to get a faster, lower-server-load experience that still supports retina.
• In the prettyPhoto lightbox, replaced the officially discontinued Facebook Like button with a simple share button, and removed long-dead QuickTime and Flash playback support that no current browser can run.
• In the prettyPhoto lightbox, rebranded the Twitter share button to X. It's now a regular button with the official X mark instead of loading a 3rd-party iframe widget, so the lightbox opens faster.
• In the prettyPhoto lightbox, replaced the Pinterest Save widget with a regular button. The old setup elaborately loaded Pinterest's pinit.js script. Dropping that means one less 3rd-party dependency on every photo view and a faster lightbox.
• The PhotoSwipe lightbox's share menu now shows a brand icon next to each option, also covering the Twitter to X rebrand on this lightbox.
• The reason behind moving on from the original sharing buttons is that they are either discontinued or on the verge of that, and haven't been showing share counts anyway for quite some time.
• Renamed the TimThumb & CDN settings tab to Thumbnails & CDN. There is a new cache row with a Measure / Refresh / Purge flow that also shows how old the oldest cached thumbnail is.
• The active JIG Settings tab now lives in the URL, so it survives page reloads and browser navigation.
• Facebook galleries served without the dynamic thumbnail engine now load right-sized, retina-aware images per tile instead of the full lightbox image, cutting bandwidth dramatically. The smallest lightbox mode bumped from 720 to 1024 pixels; the default still delivers 2048, there is no larger than that, for now.
• Cached thumbnails may now be served directly by your web server on cache hit, skipping PHP for a much faster response. Applies automatically on Apache and LiteSpeed. For Nginx, a copy-paste server-block snippet is provided in the Thumbnails & CDN settings tab.
• Direct-serve only switches on after JIG proves it works on your site with a real thumbnail request: it generates a test thumbnail, then re-requests it the way a visitor's browser would, and the cached copy must come back as an actual image. Some shared hosts pass a simple configuration check yet cannot serve the cached files themselves (the web server user may not be allowed to read them), and without this proof galleries would render broken images while everything looked fine in the settings. When the test fails, thumbnails simply keep flowing through PHP, exactly as in previous versions. But you still benefit from a more persistent cache.
• The Thumbnails & CDN tab gained a Direct-serve status row showing the outcome of that check on your site. If your web host rejects the configuration needed for direct-serve, or the test request does not come back as an image, JIG keeps the direct route off so galleries keep rendering, explains what to ask your host, and gives you a one-click Retry once the host has fixed it.
• The "On uninstall" setting's Full removal option now also clears the generated thumbnails and the JIG-managed engine folder under wp-content/justified-image-grid/. No change keeps everything as-is (the default, recommended for upgrades); Partial removal clears only the settings.
• Facebook tiles now come straight from Facebook's CDN when Jetpack Site Accelerator is active, instead of being resized on your server. Site Accelerator does not accept Facebook CDN URLs, so JIG had been falling back to its own on-server thumbnail engine, a workaround kept since 2017. Serving a pre-sized Facebook variant directly is a better match for the reason people install Site Accelerator in the first place: to keep image work off their own server.
• Flickr galleries served through JIG's own thumbnail engine on your server no longer pull large Flickr source files just to make a small tile. When a photo publishes multiple sizes, JIG now passes a right-sized Flickr variant to the engine instead of whichever variant it also opens in the lightbox. Cuts bandwidth to your server and PHP memory during thumbnail generation, and can prevent broken thumbnails on shared hosts where GD would otherwise run out of memory decoding a 6K JPEG.
• Reworked the Facebook App setup guide and App Type labels to match Meta's 2026 developer dashboard, which no longer offers the old Consumer and Business app types. The walkthrough now follows Facebook's current use-case based app creation, and the two options are labeled Facebook Login (Profile) and Login for Business (Pages) so they line up with what you actually pick on Facebook.

Fixed​

• Portrait photos shot on phones and uploaded straight to Flickr no longer appear stretched or rotated in the lightbox and grid. JIG now corrects the orientation Flickr reports for the original file.
• Fixed a PHP TypeError that could occur when shortcode attributes for row height or height deviation contained invalid values (like whitespace or empty strings). The plugin now validates these values properly and falls back to safe defaults when needed.
• Fixed thumbnails jumping around, resulting in a broken layout on hover on thumbnails. This was due to a WP7 change that affected even invisible borders.
• Fixed Flickr Add user showing a misleading SSL certificate error for any underlying request failure. Usernames containing spaces now resolve correctly, and when adding genuinely fails, the message names the real reason instead of always blaming SSL.
• Flickr Add Users: removing certain users from the list silently failed, accounts whose username contains a dot looked removed but came back after saving. Removal now works reliably for everyone.
• DeviantArt: the regular-link to RSS-URL converter now matches the modern www.deviantart.com{user}/... pattern. The category-by-URL option has been retired because DeviantArt no longer supports category filtering. Affected shortcodes continue to load but will show the user's full gallery instead of a filtered subset.
• YouTube playlist and channel sources stopped working after a YouTube layout change, leaving grids with a scraping-failure message or no thumbnails. Both now render correctly again, with existing customers seeing thumbnails return automatically on upgrade.
• Fixed broken tiles that could appear on Flickr galleries with Jetpack Site Accelerator active when the Flickr lightbox size was set to Original. JIG was reusing that same original variant as the input for Site Accelerator to resize into a tile, and Site Accelerator refuses to fetch very large source files. JIG now serves a smaller Flickr variant directly, without going through Site Accelerator. If you had turned Use TimThumb off as a workaround, you can turn Use dynamic thumbnail generation back on.
• The setting to prevent unnecessary NextGEN script from being loaded now also catches assets that load late while a gallery renders (such as the icon-font stylesheet newer NextGEN releases add). Previously these slipped past and still loaded on the page even with the option enabled.
• Reconnecting a Facebook source after you switch or recreate its App is now reliable. Your profile and Pages used to keep their old, dead tokens and fail at display time with "Invalid appsecret_proof provided in the API argument", often leaving a duplicate, permanently broken profile behind; JIG now refreshes those Pages with the fresh tokens and drops the stale duplicate automatically. Separately, first-time connection of a Page-type App no longer fails partway through Facebook's multi-screen consent with "The state does not match. You may be a victim of CSRF."

Security​

• Hardened the bundled thumbnail script by removing legacy features that JIG never used (website-screenshot mode, PNG-optimizer exec paths, and other 2014-era features), and updated the file header to reflect JIG's maintenance of this fork.

Updated​

• Expanded the Spanish translation to cover the entire plugin interface, including the latest settings and the Thumbnails and CDN options. Longer Spanish wording no longer wraps or gets cut off in the interface, and a number of wording slips were corrected.
• Fixed a batch of typos in the English interface text.
• Documentation PDF modernized with more relevant information.

WPML compatibility improvements, RSS feed support for Vimeo Showcases, and PHP fixes

Improved:

• When working with WPML and its Media Translation, JIG’s previews in the admin (in Gutenberg and Shortcode Editor) will now show the same set of images as seen on the frontend. Previously there was a discrepancy where in the admin you ONLY saw images translated to the target language, while the frontend shows untranslated images as a fallback.
• The language switcher on the admin bar now lets you preview the grid in another language, previously it led to a new grid creation screen. The post type for grids is not meant to be translatable, but the current language flag in the admin does have an effect on the preview output of the grid, as it takes translated captions into account.
• Translatable settings (texts) now show up the language according to the flag in the admin bar, when previewing JIG (Gutenberg and Shortcode Editor). Previously this only worked on the frontend.
• Better height measurement for Gutenberg previews (elements around JIG could cause it to cut off slightly).
• RSS feature now supports Vimeo Showcases too (formerly Albums).
• 500px removed from RSS feeds feature, as they are no longer being offered.
• The “Disable right mouse menu” setting (its global variant) will now prevent right clicks in self-hosted videos in lightboxes.

Bugfixes:

• Flickr-related PHP error on line 17670. During a recent AWS service disruption and also for accounts that got deleted (on Flickr) after being added to JIG, the error became apparent.
• When getting size of a remote image: fixed “imagesx(): Argument #1 ($image) must be of type GdImage, false given” in stricter PHP versions by adding validation check after imagecreatefromstring() to ensure GdImage object exists before processing dimensions.

– Security update, Gutenberg block design and Facebook icon fixes




Bugfixes:
Gutenberg Grid selector dropdown design fixed, especially for widgets screen where it was unclickable
Missing Facebook icons after a while (once they expire) in the Shortcode Editor (now given a fallback there too)
Deprecated: Implicit conversion from float to int loses precision in…
Updated:
Image downloader’s vulnerability fixed

Bugfixes: Some grids would appear missing after the update or show just a number instead.

New features:

• Support for Facebook App Types with a new setting. If your app continues with a legacy type of “None” then no changes for you, for now. New apps must have (and some existing apps have been switched to) a Type, meaning restricted permissions of accessing either(!) your Profile or your Pages. The new setting in JIG lets you match the Type of your app for continued operations. The default of the new setting is the “None” type, so the update doesn’t break anything for existing users. The next update will switch the default to “Business” which will affect new installations (since you can no longer create an app without a type).

Improved:

• Facebook App setup instructions.
• For less friction, when setting up a Facebook connection, you no longer need to save changes after filling in the App ID/Secret/Type but before adding the current user and administered pages.
• No longer using z-index for caption special effect visibility (in front of or behind overlay) and for the order of overlay/caption components. This improves compatibility with stuff like menus and popups.
• Simplified borders: when captions are below thumbs, the inner and middle border remain around the image, and only the outer border encapsulates the caption (this is nice for a Polaroid look).
• Auto-refresh of Facebook avatars removed as it was too aggressive and caused an infinite loop exhausting API limits when one of them arrived broken. If an avatar is missing, you can refresh that page or profile manually. It has no impact on the galleries.

Bugfixes:

• “This block has encountered an error and cannot be previewed.” due to my usage of the Placeholder component on WP 6.4.
• Facebook API v18 compatibility, including business_management scope to gain access to all your managed pages again.
• When using the middle border, but the caption is not below thumbs, there was too much padding on the sides of the caption.
• A conflict in the animation of outer and middle border.

New features:
A developer hook, jig_images_before_postprocessing which lets you hook into the images to be displayed, before JIG applies its postprocessing. For example, this allows including on-the-fly filtering keywords on the images (as they are gathered for the UI during this postprocessing).

Improved:
WPML: better compatibility with translated settings by using wpml_translate_single_string instead of old icl_translate

Bugfixes:
Supporting portrait videos in video player, previously they didn’t fit
Better PHP8+ compatibility, fixed warning and notices of “Undefined array key” and “Deprecated: Optional parameter”

New features:

• New setting – Limit height to viewport. It prevents rows from appearing taller than the device/browser viewport (usable height of the screen), avoiding the need for scrolling to wholly explore a thumbnail. This was the default behavior since v2.8 (for over seven years), but there was no way to turn it off. Certain use cases benefit from unlocking tall rows, such as showing illustrations, mobile screenshots, lightboxless galleries, and portraits that don’t need to be seen in their entirety. Sometimes filling all available width is more important than fitting an image that is only slightly taller.
• A global function jigHookItems (items){}, when defined (for example in the Custom JS of JIG settings), allows you to influence the all items (images) list of your grids, prior to creation. It arose from a customer request to manipulate image URLs on the client side. In that particular case, we used it to change extensions to WebP when the browser supports it, to load pre-generated WebP thumbnails instead of TimThumb. The server-side equivalent could not be used due to caching plugins.

Improved:

• Font size slightly increased in the Grid/Shortcode Editor.

Bugfixes:

• The detection for RML (Real Media Library) failed when it wasn’t installed and polluted the shortcode with attributes related to that.
• When conditional script loading was turned off (to be unconditional), Grid live preview failed to work.
• Checking for non-existent (or deleted) RML ID works again without showing a PHP warning.
• RML’s “Overview of top level objects” functionality is restored.
• Pre-PHP7.1 compatibility: removed “public const” from source.
• PhotoSwipe: pswp—undefined-theme class removed when opened with anything other than the light theme.

Updated:

• Documentation

WebP/AVIF, RML flatten hierarchy and multi-select, Facebook improvements, numerous fixes including YouTube.

New features:

• Next-gen image formats: Option to use WebP where available. AVIF (AV1 Image File Format) is also added but is subject to very peculiar server requirements (PHP 8.1+ and GD needs to be enabled—with-avif).
• Flatten Real Media Library hierarchy, a much-requested feature! Show everything under selected point(s) in the RML tree. This virtually re-organizes your RML tree at display time, to offer more flexibility. Compatible with “straight to lightbox,” works fine with randomizing and limiting (to show a random selection from just a part of your media library), and supports Photo Engine (WP/LR Sync) with RML.
  • Contents: expand everything to a single big gallery. This goes hand in hand with (and boosts the usefulness of) the Filter by option called “WP RML Galleries or Folders (of pictures in the grid)” as you could use your RML tree (Gallery or Folder names) as filters.
  • Galleries: look for and stop at galleries for an on-the-fly collection. This can make navigation easier as it drills down to offer a single level, no matter how deep you organized the tree. Also allows “collectionizing” single or just a handful of galleries (regardless of their siblings). Supports folders too, even if they have direct content AND subfolders – everything becomes an individual gallery. Give a name to this on-the-fly collection (or other multi-select content) with the “Breadcrumb home text.”
• Real Media Library multi-select. Switch from dropdown-tree to a checklist-tree so you can mix and match any combination of RML content (synergizes with, and is at the core of the new flattening options).
• Facebook Albums now respect JIG’s global “Order by” setting for (creation) date ascending/descending, title ascending/descending. The “Latest” feature uses date descending to reliably catch the last album. Since the new Pages Experience messed with the default album order (and you can’t drag and drop albums on FB unlike their contents) this seemed reasonable. Updating an album doesn’t change their order. Previously, during grid creation, users would not see their latest album in JIG’s album picker in a readily apparent location (topmost).

Improved:

• WebP support extended to remote hosts’ webp-in-jpg way of serving images (which is based on the accept header). Now WebP thumbnails will be created when the content-type response header says image/webp even if the extension appears to be jpg.
• Facebook Videos source is restored and now it uses embedding. Facebook supplies the player via an iframe and that fits both prettyPhoto and Magnific Popup. Only embeddable videos are visible from now on. It’s no longer possible to download the videos since the raw URL to the video file expires and the API doesn’t seem to have it (why it was broken).
• Facebook and Flickr source selection (Album covers) no longer use TimThumb as appropriate-sized images are suppled from their CDNs. Previously, users who disabled TimThumb because it didn’t work for them, didn’t see any such image in the settings.
• YouTube Playlists can now show date information (how long ago was a video uploaded).
• Shortcode parsing in the editor improved so it can now retain some HTML and values with either single or double quotes. For example, it was not possible to add an image tag to “Lightbox link text” in Recent posts, now it is viable.
• Gutenberg preview height is more adaptive.
• Rows (with help text) wrap in the editor.
• Misleading “What content to show” texts (in light of new RML features).

Bugfixes:

• YouTube Channels load again, and the “nice time” description works now.
• Yoast SEO plugin’s XML sitemap didn’t include images where you used the JIG Gutenberg block to insert a Grid.
• Editing an existing gallery with many images could show some grey thumbnails in the WP media dialog, resulting in those images being accidentally removed from a grid.
• Remote WebP images weren’t accepted as valid mime type.
• When measuring external image dimensions, a PHP Warning: Undefined variable $update_result could occur.
• On scaled, high DPI monitors the selection borders for buttons and Facebook/Flickr albums looked broken (in the editor), they received a minor redesign.
• In come cases such as with NextGEN, double forward slashes would appear before the file name, visible in the HTML source. Previously the unencoded image URL wasn’t treated for rogue double slashes.
• Some “dimensionless” SVGs could go missing from the grid when using anything but the “Same as lightbox” thumbnail base.
• Unclickable grid selector dropdown in Gutenberg.
• Intermittent undefined JS in the editor

Updated:

• Facebook API to v15
• Elementor 3.5+ widget registration