WPCodeBox 2 v1.4.0-rc-2.0

New Feature: Snippet Manager — a dedicated library view for browsing, searching, filtering, organizing, and bulk-managing snippets. Switch between it and the classic editor from the toolbar; the selected view is remembered across reloads. A read-only Cloud section lists cloud folders and snippets with one-click download to local.
New Feature: Tags — assign tags to snippets, search and filter by tag or "Untagged", customize tag colors per browser, and edit tags from either the Snippet Manager or EditSnippet sidebar.
New Feature: Bulk and drag-and-drop workflows — select all/none or multiple snippets with a live selection count, then move, tag, enable, disable, or delete them together. Cards can be moved to folders or manually reordered with optimistic UI updates; / focuses search and Esc clears selection.
New Feature: More ways to find snippets — sort by Manual order, Name, or Last modified in both manager and classic sidebar; filter by type, tag, enabled/disabled/errored status, and whether conditions are set. Errored cards show a warning badge and error tooltip. Search is debounced and case-insensitive across snippet fields and tags.
New Feature: Duplicate snippets in the Snippet Manager — copy code, placement, conditions, and tags into the same folder as a disabled "Copy of …" snippet.
New Feature: MCP / AI Access — connect compatible AI clients to list, search, and read snippets, folders, tags, and revisions, and explicitly opt in to create, update, enable/disable, run, or delete operations. Read tools are the default when MCP is enabled; write and execute tools remain off until an administrator enables them. The standalone MCP endpoint accepts Application Password authentication only, requires manage_options, applies the per-tool allowlist and input validation, rate-limits calls, and audit-logs every request.
New Feature: MCP snippet placement and conditions — create/update tools accept validated hooks and condition-builder groups. Agents can select the named UI insertion points or raw actions, use multiple placements for JS/CSS/HTML, and configure editable Location, URL, content, taxonomy, user, device, time, and weekday rules; Custom PHP conditions remain unavailable to agents.
New Feature: WordPress Abilities API support — all 14 tools are registered under the wpcodebox category on WordPress 6.9+, with readonly and destructive annotations and core wp-abilities/v1 discovery/execution routes. Both surfaces share the tool catalog, per-tool allowlist, input validation, manage_options capability check, and audit log. Unlike the standalone MCP endpoint, core Abilities REST also permits nonce-protected cookie authentication as well as Application Passwords and does not use WPCodeBox's MCP rate limiter. Disabled tools return a clear administrator-enable message.
New Feature: Runtime PHP error detection — hook-time fatal errors are caught, attributed, recorded, and disable the affected snippet without white-screening the site. Exceptions are recorded but leave the snippet enabled, while shutdown handling attributes otherwise uncatchable fatal errors to the executing snippet. This replaces WordPress recovery-mode emails for caught snippet errors with an in-app error state.
New Feature: The same runtime guard is generated into standalone Functionality Plugin files, where snippet failures are written to the PHP error log without crashing the site even when WPCodeBox is deactivated.
Improvement: With Manual sort active, All Snippets and Cloud All group cards by folder and show loose snippets under "No folder". Cards now show last-modified timestamps, open in the editor on double-click, and use the styled app dialog for delete confirmation.
Improvement: Snippet Manager icons, filters, dark-mode borders, and the upward-opening Move picker now match the rest of the editor. Folder moves/reorders update instantly, a duplicate-load guard prevents runaway reloads, and plugin-page CSS loads early to prevent the white-line/unstyled-content flash.
Improvement: MCP settings provide ready-to-copy Claude Desktop, Cursor/VS Code, and Claude Code configurations, plus higher-contrast dark-mode styling, a write-tool warning, and bulk enable/disable controls.
Improvement: The MCP run tool and in-app Run button now use one canonical one-shot PHP execution path. It strips only a leading PHP open tag, preserves embedded <?php text, rejects non-one-shot snippets, and always cleans up its output buffer after missing snippets or thrown errors.
Improvement: Repeated identical snippet exceptions no longer rewrite the snippet row or duplicate the PHP error-log entry on every occurrence; a changed message or editor line is still recorded immediately.
Improvement: Saves upload only fields the server needs instead of revision history and previous run output, avoiding multi-megabyte requests for large snippets.
Improvement: The Functionality Plugin settings dialog now uses the same sectioned layout, status toggle, and dark-mode styling as the MCP settings modal. Body text is legible in dark mode, the download button's icon no longer wraps onto its own line, and the duplicate-snippet-names warning is a proper alert listing the affected snippets instead of faint grey text.
Fix: MCP tool names now use Anthropic-compatible underscores such as wpcodebox_list_snippets; saved allowlists using the former slash names are recognized and migrated. Reported by a customer in June 2026.
Fix: The MCP endpoint responds at plugins_loaded so canonical/multilanguage plugins cannot redirect the request before the client receives it.
Fix: Missing or quarantined MCP tool files are skipped instead of taking WordPress into recovery mode, and each skipped tool is logged once per occurrence until restored. Reported by RC testers on Cloudways.
Fix: Runtime error line numbers now point to the matching editor line for named hooks, external triggers, snippets without an opening tag, and snippets with leading blank lines.
Fix: External-trigger PHP snippets that end in HTML mode now generate parseable wrappers in both normal and Functionality Plugin execution.
Fix: Failed saves now show a "The snippet was NOT saved" toast. Incomplete/truncated save requests and null database updates are rejected instead of blanking a snippet, and empty revisions cannot be reverted over working code. Previously stored revisions remain available for recovery.
Fix: Functionality Plugin generation and ordering — tokenizer-based HTML-mode detection no longer mistakes ?> inside strings for a real close tag, Snippet Order is honored on every sync, and equal order/placement/priority ties fall back to creation order. Reported by Jean-Marc Czudek.
Fix: Functionality Plugin Gutenberg CSS now evaluates its URL correctly; Gutenberg JavaScript runs; snippets also run in the Full Site Editor iframe; each editor stylesheet has a unique handle; and generated inline CSS/JS is escaped.
Fix: A failed Functionality Plugin enable/disable no longer leaves its dialog stuck on "Working…", and a failed download now reports the failure instead of throwing while reading the server's response.
Fix: External JavaScript and CSS snippets now run at every selected insertion point in runtime and Functionality Plugin output, including special-hook remapping and each hook's selected priority.
Fix: Generated Global CSS <style> tags no longer include the obsolete type="text/css" attribute; JavaScript output remains unchanged.
Fix: CSS minification now shortens repeated-pair hex colors correctly (#ffffff to #fff, not #ff) and handles the full hexadecimal range. Reported by a customer after 1.3.1.
Fix: Folder exports include their snippets and serialize folder IDs as numbers; folder imports create snippets in their destination in one request and refresh once at the end. Reported by Jason Janes @ RoatanYP.com.
Fix: Sidebar folder drops keep the in-memory list synchronized, and updating a downloaded cloud snippet refreshes and displays its placement hooks correctly.
Fix: Revision and AI execution timestamps use the WordPress timezone, locale, and DST-aware wp_date() formatting. Reported by Jayron Castro @ Kstros.com.
Fix: WordPress and other plugins' admin JavaScript no longer breaks on the WPCodeBox page. The code editor loads as an AMD bundle whose loader installs a global define(), and WordPress' own scripts registered themselves with it instead of publishing the globals everything else expects — and because WordPress serves several of those scripts concatenated into a single file, the first collision aborted the rest of that file too. That left wp.element, moment, and jQuery.hoverIntent undefined, which broke the admin bar's hover menus and any plugin building on WordPress' React packages, Secure Custom Fields among them. The editor now initializes after WordPress has finished running its own scripts and releases the AMD marker once it is up, while keeping the loader available for the syntax- highlighting files it fetches on demand. Long-standing rather than new in 1.4.0, and only ever affected the WPCodeBox admin page.
Performance: Functionality Plugin bulk generation now reorders its include list once after all snippets are written instead of rereading and rewriting it after every snippet.
Internal: Added tag and bulk snippet REST endpoints plus optional folderId creation, Jest coverage for exports/search and the editor loader guard, and shared sorting/tag-color helpers between the manager and editor.
Note for hosts/security tooling: if your malware scanner flags WPCodeBox's MCP files, whitelist wp-content/plugins/wpcodebox2/src/Mcp/.

New Feature: Optional capability for the AI model to execute code to retrieve the current site context
New Feature: Support for up-to-date Gemini models
New Feature: OpenRouter model integrations
New Feature: Custom model option
New Feature: Option to hide both panels using Ctrl + ~
Improvement: Configurable setting for the number of revisions to save
Bugfix: SCSS minification issues
Bugfix: CSS minification incorrectly altering colors in some cases
Bugfix: SCSS/CSS formatting replacing single quotes with double quotes

New Feature: WPCodey AI Chat Integration (BYOK)
New Feature: AI inline code modifications and generation
New Feature: Nested CSS handling in the editor
New Feature: Buttons to collapse the side panels
New Feature: Added a clear search button
Improvement: Improved plugin UI
Improvement: Improved variable handling in the editor
Improvement: Added revert revision button
Improvement: Changed editor class names to avoid conflicts
Improvement: Search also works in the snippet description
Improvement: Open folders only if there are search results, and close them after
Improvement: Various UI/UX improvements
Bugfix: Saving on Safari only works the first time, then it throws an error
Bugfix: CSS minifier incorrectly handles double quotes
Bugfix: Formatting breaks when SCSS code contains comments
Bugfix: Export file is empty when exporting a single snippet from a folder
Bugfix: Removed unused JS libraries
Bugfix: Deprecation warnings for latest PHP versions
Housekeeping: Updated JS libraries to the latest versions
Housekeeping: Started migrating the legacy code to modern React

2 1.2.1

2 1.2.0

Show snippet conditions overview on the snippet edit page
feature
First version of the WPCodeBox API for 3rd party integrations
feature
Show warning if the ZipArchive library is not installed and trying to generate plugins
improvement
FP Author URI hardcoded to wpcodebox.com
improvement
"Current URL Is" condition throws error when the FP is enabled
bugfix
Generate plugin and FP Download not working correctly when plugin name is not "wpcodebox2"
bugfix
Error in logs when the FP is enabled and editing a snippet
bugfix
Warnings when the FP is enabled and temp folder is not writable
bugfix
Snippet description not updated until page refresh when downloading a snippet from the cloud
bugfix
Added the correct safe mode link on the WPCodeBox Error page
bugfix
Current user role condition error when the FP is enabled
bugfix
Invalid zip when generating plugins on certain server configs
bugfix