About this theme

Changelog > Scope: this covers the Olympus theme **and** the bundled Crumina/Unyson framework > extensions that ship with it (sign-form, post-reaction, ajax-blog, extended-search, > post-share, stunning-header, contact-form). Items marked _(framework)_ live in the > bundled Unyson extensions. ## [4.8.0] — 2026-06-03 A large security, performance, and modernization release. The theme now targets modern PHP/WordPress, moves its AJAX surface to a namespaced REST API, migrates key UI to the WordPress Interactivity API, and trims hundreds of KB of JavaScript from every page. ### ⚠️ Requirements / breaking changes - **Minimum platform raised to PHP 8.1+ and WordPress 6.9+** (previously PHP 5.6 / WP 5.7). Verified compatible across PHP 8.1–8.4. Sites on older PHP/WordPress must update first. - Legacy IE11 polyfills and other dead browser shims have been removed. ### Security - **Notifications — fixed an IDOR/CSRF.** Notification actions (mark read/unread/delete, mark-all) are now served by an authenticated REST endpoint with per-user ownership checks, so one user can no longer act on another user's notifications. - **Sign-in / Registration _(framework)_ — multiple fixes:** - Restored CSRF protection in a **cache-safe** way: forms carry no stale nonce; a fresh nonce is fetched from an uncached REST endpoint at submit time and enforced server-side (fails closed with a friendly "session expired" message). Works behind full-page caches. - Fixed a **reflected XSS** in the Youzer registra

Description excerpt from the author's official listing. Full details, changelog and support terms are on the marketplace page.