Fixed: Security issue where data returned by the promotions API could be injected as script into the WordPress admin area

= 1.1.9 [8th August 2026] =

* Fixed: Security issue where data returned by the promotions API could be injected as script into the WordPress admin area
* Fixed: Promotion links and images are now restricted to http(s) and mailto addresses
* Updated: Security improved
