LaunchGuard Pro – Prochainement Sortie et Mode Maintenance 1.2.5

### Security

- Fixed a coming soon / maintenance mode bypass that allowed any visitor to reach the site by adding an Elementor query argument or referrer to the request
- Enforced TLS certificate validation on all licensing and update requests; the previous fallback could allow a network attacker to control the update package
- Hardened every licensing payload against PHP object injection by restricting unserialization to plain data
- Replaced the shared, non-expiring password protection cookie with per-visitor random tokens that expire server side and are revoked on logout or password change
- Added brute force throttling to the password protection endpoint
- Access passwords are now stored as a hash instead of clear text, and are excluded from settings exports
- Added nonce verification and rate limiting to the public analytics tracking endpoints
- Added nonce verification to the analytics data, export, migration, and site logo admin endpoints
- Added a capability check to the license activation and deactivation handlers
- Custom template CSS/JS and SEO head markup now require the unfiltered_html capability
- Visitor IP addresses are read from REMOTE_ADDR only and are no longer taken from spoofable forwarded headers
- Analytics values are escaped before being rendered in the admin dashboard
- Geolocation lookups now use HTTPS and can be disabled with the launchguard_enable_geolocation filter
- Removed the license check fallback that treated any stored value as a valid license

### Changed

- Uninstalling now drops the analytics tables so visitor data is not left behind
- Removed the obfuscated base64 helpers in the license base class

Removed

- Promotion notice feature and all of its assets, AJAX handler, and dismissal logic
- Dashboard feed widget and its remote feed requests, transients, and styles

### Fixed

- Security issue where data returned by the promotions API could be injected as script into the WordPress admin area
- Promotion links and images are now restricted to http(s) and mailto addresses

### Updated

- Security improved

Updated
- System improved

Updated

- White Label access for users with special quota

### Added

- White Label feature – replace LaunchGuard branding with your own brand name, menu icon, and admin logo
- Hide License Tab toggle – remove the License tab from settings navigation
- Hide Admin Menu toggle – hide White Label and Help tabs from settings navigation
- Recovery URL and token system for regaining access to hidden White Label settings
- uninstall.php for complete data cleanup on plugin deletion

### Updated

- Made compatible with WordPress version 7.0

### Fixed

- Admin logo now persists in the sidebar header after page load
- License badge visibility tied to Hide License Tab toggle instead of Hide Admin Menu
- Tooltip positioning to prevent clipping under the sidebar

Fixed
- Admin notice styling and handling