Kodlo Product Gallery for Elementor

This update adds several new high-severity problems, including a missing nonce check on an AJAX endpoint (allowing potential CSRF attacks) and an N+1 database query that can slow down your site. Security has gotten worse compared to 2.9.1, which had only a minor version literal mismatch and translation loading issue—those are fixed, but the new flaws outweigh that. Do not update now; wait until the developer patches the nonce and query issues. If you must use the plugin, consider disabling the migration notice and monitoring for performance or security anomalies, but an update at this time is not recommended.