Soledad – Multi-Concept Blog/Magazine Theme

Version 8.7.8 — 26 October 2026

• New New Soledad admin
• New Site Overview page that shows the current setup (logos, header per page type, menus including the mobile menu, footer, homepage, archive pages, single posts, templates) with site health checks, and links each item to the place where it is changed.
• New A "Where do I change…?" search that points each task to the right setting for the current site, e.g. the Header Builder when the site uses it. Press "/" to open it.
• New Logos can be changed or removed directly on the Overview using the Media Library.
• New Rebuilt the Plugins page as a searchable plugin manager with Required, Recommended, Soledad add-ons, and Tested & compatible sections. Install, update, activate, deactivate, and delete run one at a time without leaving the page. Add `&classic=1` for the old screen.
• New Rebuilt Sidebars, Social Icons, Integrations, and License & Updates (with Updates and Patches tabs). Destructive actions now ask for confirmation.
• New The License page explains what a license includes and links to purchase one; labels now distinguish purchase codes from license keys.
• New Restyled the Customizer controls, Theme Options, Meta Box settings pages, the "Options for this post/page" box (now grouped into tabs), and the setup wizard with shared design tokens that follow the admin color scheme.
• New Plugins can add their own pages to the Soledad admin through the `penci_admin_app_pages` filter and `window.penciAdmin`. Penci Soledad Demo Importer 7.0 uses this for its new Demo Import page; old `themes.php?page=import-demo-content` links redirect there.
• New The child-theme copy is only offered when the parent theme has saved settings, and copies the parent theme mods into the active child theme.
• Security Added nonce and permission checks to the Penci library template import, Header Builder saving, Theme Options import, child theme installation, Polylang translation fix, purchase code check, license revoke, and Codestar resets.
• Security Header Builder saving now validates the builder ID and filters markup for users without the `unfiltered_html` capability. Theme Options import accepts only well-formed setting keys and sanitizes values; code fields require `unfiltered_html`.
• Security Removed logged-out access to the video playlist save and remove handlers, fixed their nonce check, and sanitized their input.
• Security Removed the unused `penci_update_option` AJAX handler.
• Security Purchase code checks validate the code format and verify the license server's SSL certificate.
• Security Revoking a license now requires an administrator and keeps the local activation unless the license server confirms the revocation.
• Security Escaped promo notice URLs and added a nonce to the "hide this note" links on the classic plugins screen.
• Fixed Fixed the Header Builder mobile menu showing the first menu with items instead of the Primary Menu when no menu was selected.
• Fixed Fixed the `dateModified` property name in the post JSON-LD schema.
• Improved Standard layout posts now show the review pie chart on the featured image when Penci Review is active.
• Improved Widget settings with large lists of categories, tags, products, or other terms (over 100) now use a searchable select that loads options on demand.
• Fixed Fixed broken Customizer autofocus links and the header block fallback for pages.
• Improved Dashboard assets no longer load on every admin screen; removed unused dashboard files.
• New Added Penci MCP & Abilities 1.1.0 as an optional plugin.
• Improved Updated the suggested Penci Soledad Demo Importer version to 7.0.
• Improved Updated the theme version from 8.7.7 to 8.7.8.

Earlier versions

• 8.7.7 (28 September 2026): 4 improved, 6 security