From be506b88516de284de3a6edcf1cd5a8836d6a2c7 Mon Sep 17 00:00:00 2001
From: Vitalii Solovei <vsolovei@smartling.com>
Date: Wed, 1 Jul 2026 21:39:53 +0200
Subject: [PATCH 1/2] fix nonces (WP-1010)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 inc/Smartling/WP/View/ContentEditJob.php | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/inc/Smartling/WP/View/ContentEditJob.php b/inc/Smartling/WP/View/ContentEditJob.php
index fa466f44..60bb4298 100644
--- a/inc/Smartling/WP/View/ContentEditJob.php
+++ b/inc/Smartling/WP/View/ContentEditJob.php
@@ -242,6 +242,7 @@
             "contentType": '<?= $contentType ?>',
             "id": [<?= $id ?>]
         };
+        var smartlingNonce = '<?= wp_create_nonce('smartling_translation') ?>';
 
         var Helper = {
             placeHolder: {
@@ -260,7 +261,7 @@
             queryProxy: {
                 baseEndpoint: '<?= admin_url('admin-ajax.php')?>?action=<?= ContentEditJobController::SMARTLING_JOB_API_PROXY?>',
                 query: function (action, params, success) {
-                    var data = { "innerAction": action, "params": params };
+                    var data = { "innerAction": action, "params": params, "_wpnonce": smartlingNonce };
                     $.post(this.baseEndpoint, data, function (response) {
                         success(response);
                     });
@@ -480,7 +481,7 @@ function (i, e) {
             };
 
             const loadRelations = function loadRelations(contentType, contentId, level = 1) {
-                const url = `${ajaxurl}?action=<?= ContentRelationsHandler::ACTION_NAME?>&id=${contentId}&content-type=${contentType}&targetBlogIds=${localeList}`;
+                const url = `${ajaxurl}?action=<?= ContentRelationsHandler::ACTION_NAME?>&id=${contentId}&content-type=${contentType}&targetBlogIds=${localeList}&_wpnonce=${encodeURIComponent(smartlingNonce)}`;
                 pendingRequests++;
                 totalRequests++;
                 $('#progress-indicator').removeClass('hidden');
@@ -637,6 +638,7 @@ function (i, e) {
                         authorize: ($("div.job-wizard input[type=checkbox].authorize:checked").length > 0)
                     },
                     targetBlogIds: blogIds.join(","),
+                    _wpnonce: smartlingNonce,
                 };
 
                 const prepareRequest = () => {

From 0576dd9dae1d3c25460f58bec72a71217639098e Mon Sep 17 00:00:00 2001
From: Vitalii Solovei <vsolovei@smartling.com>
Date: Thu, 2 Jul 2026 08:44:05 +0200
Subject: [PATCH 2/2] bump version, add readme (WP-1010)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 composer.json           | 2 +-
 readme.txt              | 5 ++++-
 smartling-connector.php | 2 +-
 3 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/composer.json b/composer.json
index ac2b9323..71603c66 100644
--- a/composer.json
+++ b/composer.json
@@ -1,7 +1,7 @@
 {
   "name": "smartling/wordpress-connector",
   "license": "GPL-2.0-or-later",
-  "version": "5.6.0",
+  "version": "5.6.1",
   "description": "",
   "type": "wordpress-plugin",
   "repositories": [
diff --git a/readme.txt b/readme.txt
index 628f2871..c8569342 100755
--- a/readme.txt
+++ b/readme.txt
@@ -4,7 +4,7 @@ Tags: translation, localization, multilingual, internationalization, smartling
 Requires at least: 5.5
 Tested up to: 7.0
 Requires PHP: 8.0
-Stable tag: 5.6.0
+Stable tag: 5.6.1
 License: GPLv2 or later
 
 Translate content in WordPress quickly and seamlessly with Smartling, the industry-leading Translation Management System.
@@ -62,6 +62,9 @@ Additional information on the Smartling Connector for WordPress can be found [he
 3. Track translation status within WordPress from the Submissions Board. View overall progress of submitted translation requests as well as resend updated content.
 
 == Changelog ==
+= 5.6.1 =
+* Fixed upload widget not displaying
+
 = 5.6.0 =
 * Added visual configurator for JSON metadata fields
 * Added "Check All" and "Uncheck All" buttons to the related assets list
diff --git a/smartling-connector.php b/smartling-connector.php
index 2f224986..b537c36f 100755
--- a/smartling-connector.php
+++ b/smartling-connector.php
@@ -11,7 +11,7 @@
  * Plugin Name:       Smartling Connector
  * Plugin URI:        https://www.smartling.com/products/automate/integrations/wordpress/
  * Description:       Integrate your WordPress site with Smartling to upload your content and download translations.
- * Version:           5.6.0
+ * Version:           5.6.1
  * Author:            Smartling
  * Author URI:        https://www.smartling.com
  * License:           GPL-2.0+