Announcing the first bugfix release for 2026. This release squashes four bugs.

The first bug is an issue with the bcn-aria-current template tag. When it was implemented in Breadcrumb NavXT 6.3.0, it was added to the end of an array which runs through str_replace. Due to how str_replace works, this opened up the opportunity for specially crafted titles to result in the browser to execute scripts. This appears to be limited to search results pages when the bcn-aria-current template tag is present. A reordering of the template tags array resolves this issue.

In previous versions of Breadcrumb NavXT it was possible to end up with blank/empty breadcrumbs in the breadcrumb trail. This behavior was changed in this release to prevent empty breadcrumbs from showing up in the breadcrumb trail. Note that this only is true for truly empty breadcrumbs (no template), if the title was empty the breadcrumb will still end up in the trail.

The block renderer was updated to check for postId as it isn’t available everywhere. Previously, on the site editor PHP warnings would show up in the server’s error logs due to postId not being available in that context.

Lastly, there was an update to adminKit to use esc_url instead of esc_attr within the settings import form.

-John Havlik