Description
Cutmap Editorial Workflow is a robust, professional-grade content management solution designed for publishers, news portals, and content-heavy websites. It brings structure, accountability, and security to your editorial team by implementing a controlled content creation and review workflow.
Say goodbye to accidental publishes and unreviewed edits. With Cutmap Editorial Workflow, every piece of content goes through a defined chain of command before reaching your audience.
Key Features
- Role-Based Access Control: Empowers your team with specialized ‘Creator’ and ‘Approver’ roles, restricting access to only what they need.
- Content Isolation: Creators and Approvers only see the tasks assigned to them, reducing clutter and preventing unauthorized edits on other content.
- Safe Live Editing: Edit published content safely in the background. The public continues to see the approved version while your team works on revisions.
- Centralized Assignment Dashboard: A dedicated space for administrators to monitor all active workflows and assign tasks effortlessly.
- Automated Notifications: Keep the workflow moving with real-time email and admin alerts for assignments and status changes.
- Audit Trail: Maintain a transparent history of who created, edited, and approved each piece of content.
Installation
- Upload the
cutmap-editorial-workflowfolder to the/wp-content/plugins/directory. - Activate the plugin through the ‘Plugins’ menu in WordPress.
- Use the ‘Workflows’ menu in the admin dashboard to start assigning content.
FAQ
-
Can I use this for Custom Post Types?
-
Yes, the Cutmap Editorial Workflow supports Posts, Pages, and all registered Custom Post Types.
-
How do I add a Creator?
-
The plugin automatically creates a ‘Creator’ role upon activation. You can assign this role to any user from the WordPress ‘Users’ menu.
Reviews
Contributors & Developers
“Cutmap Editorial Workflow” adalah perisian sumber terbuka. Orang-orang berikut telah menyumbang kepada pemalam ini.
PenyumbangTranslate “Cutmap Editorial Workflow” into your language.
Berminat dalam pembangunan?
Layari kod, periksa repositori SVN, atau langgani log pembangunan dengan RSS.
Changelog
1.4.7
- Security: Hardened database queries by replacing serialized lookups with direct relational structures for improved performance and safety.
- Security: Eliminated inline JavaScript by moving workflow actions to a dedicated static file.
- Security: Added explicit early exits after redirects to ensure execution flow integrity.
- Code Quality: Standardized line endings to LF and added .gitattributes for repository consistency.
- Cosmetic: Cleaned up package docblocks across the codebase.
1.4.6
- Security: Removed hardcoded sample-user password (
Workflow@123). Each new sample user now receives a unique password generated viawp_generate_password(16, true), displayed once in the admin notice and never stored in source. - Security: Added
rest_pre_insert_{post_type}enforcement to block unauthorized publish attempts via the REST API. Admin-role REST tokens can no longer bypass the editorial workflow when a post has an active assignment. - Bug fix:
reject()no longer overwrites the approved content snapshot with the rejected draft. Visitors continue seeing the last explicitly approved version while the creator revises and re-submits. - Performance:
dbDelta()schema checks inCUTMAP_DBandCUTMAP_WNSare now guarded by a version option (cew_db_version,cew_wns_version). The expensive schema introspection runs only on activation/upgrade, not on every page load. - Cleanup:
uninstall.phpnow deletes all_cew_*post meta rows and removes plugin version options, leaving no orphaned data after deletion. - Reliability: The
ALTER TABLE … DROP INDEXmigration for the audit-log unique key now runs reliably on every upgrade because the schema version option is cleared on activation.
1.4.5
- Resolved remaining critical security checklist issues including strict nonce validation across all forms/actions.
- Sanitized remaining raw $_POST and $_GET superglobal accesses and strictly avoided empty() checks for them.
- Re-audited output escaping inside admin tables and guaranteed all display logic passes through esc_html() and esc_url().
- Ensured every single admin_post action starts with a firm current_user_can() capability check followed by wp_die().
1.4.4
- Hardened admin actions with strict
current_user_can()capability checks. - Improved security by ensuring complete table cleanup on uninstall.
- Verified input sanitization and output escaping across the plugin.
1.4.3
- Removed UTF-8 Byte Order Marks (BOM) from PHP files to satisfy automated checks.
1.4.2
- Fixed unescaped translatable label strings in the frontend shortcode output by using
esc_html__.
1.4.1
- Fixed
the_titleescaping context fromwp_kses_posttoesc_html. - Fixed stale admin hook slug to ensure assets enqueue correctly.
1.4.0
- Fixed
wp_enqueueissues by converting raw script/style tags. - Added rigorous escaping output (
wp_kses_post) to all filter callbacks. - Cleaned up unclosed
ob_startbuffers to ensure safe hook flows. - Changed short prefixes to longer
CUTMAP_prefixes.
1.3.0
- Fixed plugin header metadata parsing issues for strict WordPress.org compatibility.
1.2.0
- Renamed plugin to Cutmap Editorial Workflow.
- Enhanced security: Enqueued all inline scripts and styles using WP core APIs.
- Refactored prefixes to comply with WordPress official plugin guidelines.
- Improved dashboard UI and workflow assignment screen.
1.1.0
- Hardened security and addressed plugin review feedback.
- Refined capabilities and user role checks.
- Removed redundant database tables for improved performance.
1.0.0
- Initial release.
- Added Creator and Approver roles.
- Added assignment tracking for posts and pages.
- Added email notification system.
