* Fixed: Fix-rules REST endpoint now requires administrator capability (was
publicly readable, leaking fix config and unpublished post titles/URLs).
* Fixed: License client no longer disables TLS verification, and server responses
use a restricted unserialize (stdClass only) — closes a MITM object-injection path.
* Fixed: Compliance CSV export neutralizes spreadsheet formula injection.
* Fixed: Settings import now runs through the settings sanitizer.
* Hardened: Added a direct-access guard and switched to wp_safe_redirect().
* Added "apiVersion": 3 to block.json (WordPress 7.0 compatibility).
* Replaced rand() with wp_rand().
* Corrected i18n text domains, prefixed globals, removed a dead duplicate class.
* Added: Comprehensive Compliance Monitoring Dashboard with accessibility score, issue severity tracking, compliance trends, page insights, WCAG filtering, CSV export, Accessibility Checker integration, critical issue email alerts, automatic page scanning, and configurable notification & scan settings.
* Added: Virtual Keyboard — on-screen keyboard for motor / touch accessibility, with drag, resize, minimize, and field-focus guidance.
* Added: Skip Links — keyboard skip links to jump past navigation to main content and footer (WCAG 2.4.1 Bypass Blocks).
* Added: Focus Indicators — high-visibility focus rings on interactive elements (WCAG 2.4.7 Focus Visible).
* New: Custom Profiles: Added a Pro-only 6-step guided tour.
* New: White Label Added a Pro upsell card for non-Pro users.
* Added: White Label branding — custom title, admin/panel icons, footer text, and hide License or admin menu (eligible licenses)
* Improved: White Label settings page and cleaner admin UI when branding is enabled