{"id":302941,"date":"2026-04-29T12:36:09","date_gmt":"2026-04-29T12:36:09","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/wfy24-weather-widget\/"},"modified":"2026-04-30T16:59:33","modified_gmt":"2026-04-30T16:59:33","slug":"wfy24-weather-widget","status":"publish","type":"plugin","link":"https:\/\/dzo.wordpress.org\/plugins\/wfy24-weather-widget\/","author":23485038,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_crdt_document":"","version":"1.5.6","stable_tag":"1.5.6","tested":"6.9.4","requires":"6.0","requires_php":"7.4","requires_plugins":null,"header_name":"WFY24 Weather Widget","header_author":"WFY24","header_description":"Embed a free, lightweight weather widget on your site. Zero-friction activation, 50 languages, auto location, light\/dark theme. Powered by WFY24.com.","assets_banners_color":"4c7adc","last_updated":"2026-04-30 16:59:33","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"https:\/\/www.wfy24.com\/en\/widgets","header_author_uri":"https:\/\/www.wfy24.com","rating":0,"author_block_rating":0,"active_installs":0,"downloads":258,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.5.1":{"tag":"1.5.1","author":"wfy24","date":"2026-04-29 12:36:24"},"1.5.2":{"tag":"1.5.2","author":"wfy24","date":"2026-04-29 21:19:04"},"1.5.3":{"tag":"1.5.3","author":"wfy24","date":"2026-04-30 14:30:46"},"1.5.4":{"tag":"1.5.4","author":"wfy24","date":"2026-04-30 16:30:48"},"1.5.5":{"tag":"1.5.5","author":"wfy24","date":"2026-04-30 16:54:10"},"1.5.6":{"tag":"1.5.6","author":"wfy24","date":"2026-04-30 16:59:33"}},"upgrade_notice":{"1.5.3":"<p>Onboarding now configures everything in one form (email, city autocomplete, language combobox, theme, units, geolocation). Visitor-geolocation is off by default \u2014 no more surprise browser permission prompts. Stronger Pro feature list. Existing installs keep their settings.<\/p>","1.5.2":"<p>Onboarding wizard now shows a dynamic disclosure of exactly what is sent to wfy24.com on activation, including the live admin email value, so admins can review and change it in Settings \u2192 General before consenting. Multisite behaviour documented explicitly. No behaviour change for existing installs.<\/p>","1.5.1":"<p>Plugin Check fixes \u2014 wp_redirect to Stripe replaced with wp_safe_redirect plus a Stripe-host allowlist; readme upgrade notice tightened. No behaviour change.<\/p>","1.5.0":"<p>Replaces inline script tags with wp_enqueue_script in the shortcode, admin preview, and onboarding wizard, per WordPress.org Plugin Directory guidelines. The hosted widget bundle gained a placeholder-element mount mode so rendering stays in-place. Existing shortcodes keep working.<\/p>","1.4.0":"<p>Removes the opt-in daily telemetry ping in line with WordPress.org guidelines. No external calls happen on a schedule any more. Cleans up the previously scheduled WP-Cron event automatically.<\/p>","1.2.0":"<p>Adds one-click Pro upgrade (\u20ac9\/mo via Stripe). Pro subscribers&#039; widgets no longer show the attribution link.<\/p>","1.1.2":"<p>Adds explicit attribution disclosure in the activation wizard (WP.org guideline compliance). No behavior change for existing installs \u2014 the &quot;Weather by WFY24&quot; link was already part of the widget.<\/p>","1.1.1":"<p>Code-quality and compliance pass for WP.org Plugin Check (translators comments, escaping, prefixing, ordered placeholders). No user-visible changes.<\/p>","1.1.0":"<p>Zero-click activation, onboarding wizard, auto-create Weather page, auto-add to sidebar, connection status. Highly recommended.<\/p>","1.0.0":"<p>First public release.<\/p>"},"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3518429,"resolution":"128x128","location":"assets","locale":""},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3518429,"resolution":"256x256","location":"assets","locale":""}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3518429,"resolution":"1544x500","location":"assets","locale":""},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3518429,"resolution":"772x250","location":"assets","locale":""}},"assets_blueprints":{},"all_blocks":{"wfy24\/weather-widget":{"$schema":"https:\/\/schemas.wp.org\/trunk\/block.json","apiVersion":3,"name":"wfy24\/weather-widget","title":"WFY24 Weather Widget","category":"widgets","icon":"cloud","description":"Embed a free, lightweight weather widget \u2014 real-time forecasts in 50 languages.","keywords":["weather","forecast","widget","temperature","wfy24"],"version":"1.2.0","textdomain":"wfy24-weather-widget","supports":{"html":false,"align":["left","center","right","wide"]},"attributes":{"city":{"type":"string","default":""},"theme":{"type":"string","default":"auto"},"lang":{"type":"string","default":"en"},"units":{"type":"string","default":"metric"},"variant":{"type":"string","default":"classic"},"align":{"type":"string"}},"editorScript":"file:.\/index.js","render":"file:.\/render.php"}},"tagged_versions":["1.5.1","1.5.2","1.5.3","1.5.4","1.5.5","1.5.6"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3518429,"resolution":"1","location":"assets","locale":""},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3518429,"resolution":"2","location":"assets","locale":""},"screenshot-3.png":{"filename":"screenshot-3.png","revision":3518429,"resolution":"3","location":"assets","locale":""}},"screenshots":{"1":"Welcome wizard after activation \u2014 live widget preview, key status, progress bar","2":"Welcome wizard on first open \u2014 three-step onboarding, zero copy\/paste","3":"Classic widget layout rendered on a live WordPress page"},"jetpack_post_was_ever_published":false},"plugin_section":[],"plugin_tags":[230,4900,7877,4899,162],"plugin_category":[43,56,59],"plugin_contributors":[261404],"plugin_business_model":[],"class_list":["post-302941","plugin","type-plugin","status-publish","hentry","plugin_tags-embed","plugin_tags-forecast","plugin_tags-temperature","plugin_tags-weather","plugin_tags-widget","plugin_category-customization","plugin_category-social-and-sharing","plugin_category-utilities-and-tools","plugin_contributors-wfy24","plugin_committers-wfy24"],"banners":{"banner":"https:\/\/ps.w.org\/wfy24-weather-widget\/assets\/banner-772x250.png?rev=3518429","banner_2x":"https:\/\/ps.w.org\/wfy24-weather-widget\/assets\/banner-1544x500.png?rev=3518429","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/wfy24-weather-widget\/assets\/icon-128x128.png?rev=3518429","icon_2x":"https:\/\/ps.w.org\/wfy24-weather-widget\/assets\/icon-256x256.png?rev=3518429","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/wfy24-weather-widget\/assets\/screenshot-1.png?rev=3518429","caption":"Welcome wizard after activation \u2014 live widget preview, key status, progress bar"},{"src":"https:\/\/ps.w.org\/wfy24-weather-widget\/assets\/screenshot-2.png?rev=3518429","caption":"Welcome wizard on first open \u2014 three-step onboarding, zero copy\/paste"},{"src":"https:\/\/ps.w.org\/wfy24-weather-widget\/assets\/screenshot-3.png?rev=3518429","caption":"Classic widget layout rendered on a live WordPress page"}],"raw_content":"<!--section=description-->\n<p>WFY24 Weather Widget lets you embed a free, fully-featured weather widget on any WordPress site \u2014 in any post, page, or sidebar \u2014 with a single shortcode, Gutenberg block, or built-in sidebar widget.<\/p>\n\n<h4>Zero-friction setup<\/h4>\n\n<p>On activation, a welcome wizard walks you through three clicks:<\/p>\n\n<ol>\n<li><strong>Activate<\/strong> \u2014 we auto-register your site with wfy24.com using your admin email. No external signup. No copy\/paste.<\/li>\n<li><strong>Create Weather page<\/strong> \u2014 optionally publish a \"Weather\" page with the widget ready to go.<\/li>\n<li><strong>Add to sidebar<\/strong> \u2014 one-click inject a compact weather widget into your first sidebar.<\/li>\n<\/ol>\n\n<h4>Features<\/h4>\n\n<ul>\n<li><strong>Free version<\/strong> with a small \"Weather by WFY24\" attribution link under each widget (disclosed and consented to during activation). No credit card, no hidden fees, no ads. <a href=\"https:\/\/www.wfy24.com\/en\/widgets\/pro\">Upgrade to Pro<\/a> to remove the attribution<\/li>\n<li><strong>Lightweight<\/strong> \u2014 6.6 KB gzipped<\/li>\n<li><strong>Real-time data<\/strong> \u2014 temperature, conditions, wind, humidity, 7-day forecast<\/li>\n<li><strong>50 languages<\/strong> \u2014 auto-detected from your site or set manually<\/li>\n<li><strong>Auto location<\/strong> \u2014 GPS (with consent) or IP-based geolocation, or pin a specific city<\/li>\n<li><strong>Light \/ Dark \/ Auto theme<\/strong> \u2014 matches your site automatically<\/li>\n<li><strong>5 layouts<\/strong> \u2014 Classic, Compact, Minimal, Badge, Forecast<\/li>\n<li><strong>Shadow DOM isolation<\/strong> \u2014 zero CSS conflicts with your theme<\/li>\n<li><strong>Zero dependencies<\/strong> \u2014 no jQuery, no React, no bloat<\/li>\n<li><strong>Multi-source data<\/strong> \u2014 ICON-D2\/EU\/Global NWP + GFS fallback, with ML post-processing<\/li>\n<\/ul>\n\n<h4>Usage<\/h4>\n\n<p>Shortcode:<\/p>\n\n<pre><code>[wfy24_weather]\n<\/code><\/pre>\n\n<p>Override per instance:<\/p>\n\n<pre><code>[wfy24_weather city=\"paris-fr2988507\" theme=\"dark\" variant=\"forecast\" lang=\"fr\"]\n<\/code><\/pre>\n\n<p>Or use the <strong>WFY24 Weather Widget<\/strong> block in the Gutenberg editor for a visual interface.<\/p>\n\n<h4>Attribution<\/h4>\n\n<p>The free version of this plugin displays a small \"Weather by WFY24\" link under each rendered widget. The onboarding wizard shows an explicit disclosure notice and asks for your consent before the \"Activate now (free)\" button; clicking that button is your explicit permission to enable the link. To remove the attribution, a Pro version is available at <a href=\"https:\/\/www.wfy24.com\/en\/widgets\/pro\">wfy24.com\/en\/widgets\/pro<\/a>.<\/p>\n\n<h4>External service<\/h4>\n\n<p>This plugin connects to the WFY24 weather service at <code>https:\/\/www.wfy24.com<\/code>:<\/p>\n\n<ul>\n<li><strong>Plugin activation<\/strong>: POSTs to <code>\/api\/widget\/register-from-plugin<\/code> with the email you confirmed in the onboarding form (pre-filled from Settings \u2192 General; editable inline before activation), site name, site domain, WordPress version, and plugin version, in order to automatically provision your free API key. No activation happens without your explicit click on the \"Activate now (free)\" button.<\/li>\n<li><strong>City search<\/strong> (admin only, when typing in the Default City field): the plugin's REST endpoint <code>\/wp-json\/wfy24\/v1\/cities<\/code> proxies your search query (e.g. \"athens\") to <code>\/api\/places\/search<\/code> server-side. Your search query is sent along with a User-Agent identifying the plugin. Results (slug + label + country flag) are cached for 5 minutes per query. The admin's IP is never exposed cross-origin because the request is server-to-server.<\/li>\n<li><strong>Widget rendering<\/strong> (client-side on visitor browsers): loads <code>widget.js<\/code> and queries <code>\/api\/widget\/data<\/code>. The widget sends the API key, optional city slug, language\/units\/theme preferences, and a <code>data-geolocation<\/code> flag (off by default \u2014 visitor location is not detected unless the admin explicitly opts in via the \"Auto-detect visitor location\" toggle). When the toggle is on AND the visitor grants permission, the visitor's latitude\/longitude is sent; when geolocation is denied, the visitor's IP address is used for IP-based city detection (still gated by the toggle). No personal data is stored beyond standard anonymized request logs for rate limiting.<\/li>\n<li><strong>Pro upgrade flow<\/strong> (only if the user clicks \"Upgrade to Pro\" in Settings): GETs <code>\/api\/widget\/pro\/status<\/code> and POSTs to <code>\/api\/widget\/pro\/checkout<\/code> and <code>\/api\/widget\/pro\/portal<\/code> to provision a Stripe Checkout session and a Stripe Billing Portal session. No data is sent unless the admin clicks the relevant button.<\/li>\n<\/ul>\n\n<p>Links:<\/p>\n\n<ul>\n<li>WFY24 Terms of Service: <a href=\"https:\/\/www.wfy24.com\/en\/terms\">https:\/\/www.wfy24.com\/en\/terms<\/a><\/li>\n<li>WFY24 Privacy Policy: <a href=\"https:\/\/www.wfy24.com\/en\/privacy-policy\">https:\/\/www.wfy24.com\/en\/privacy-policy<\/a><\/li>\n<\/ul>\n\n<h3>Multisite Support<\/h3>\n\n<p>The plugin is multisite-compatible. All settings (API key, defaults, page) are stored per-subsite using <code>get_option()<\/code>\/<code>add_option()<\/code>, so each subsite operates independently.<\/p>\n\n<ul>\n<li><strong>Network Activation does not contact wfy24.com.<\/strong> It only loads the plugin code on every subsite. No <code>admin_email<\/code> is sent, no API key is created, no automatic phone-home occurs.<\/li>\n<li><strong>Each subsite admin completes onboarding individually.<\/strong> When the admin opens the welcome wizard on a subsite and clicks \"Activate now (free)\", the plugin sends <em>that subsite's<\/em> domain and <code>Settings \u2192 General \u2192 Email Address<\/code> to wfy24.com to obtain a domain-bound API key. The admin is shown a dynamic disclosure of the exact values that will be transmitted before clicking \u2014 no consent is collected on behalf of admins of other subsites.<\/li>\n<li><strong>New subsites added later remain inactive<\/strong> until their admin runs onboarding manually. The widget will not render on a subsite that has not been activated; no data leaves WordPress until an admin explicitly clicks Activate on that subsite.<\/li>\n<li><strong>No centralized network admin panel<\/strong> exists in this version \u2014 each subsite has its own settings page. A network-level overview is on the roadmap.<\/li>\n<li><strong>API keys are domain-bound.<\/strong> A key issued for <code>site-a.example.com<\/code> will not function on <code>site-b.example.com<\/code>, which means subdomain and domain-mapped multisite installs work correctly out of the box (each subsite gets its own key for its own domain).<\/li>\n<\/ul>\n\n<!--section=installation-->\n<ol>\n<li>Upload the plugin to <code>\/wp-content\/plugins\/wfy24-weather-widget\/<\/code>, or install via Plugins \u2192 Add New.<\/li>\n<li>Activate the plugin via the Plugins menu.<\/li>\n<li>Follow the welcome wizard that opens automatically. Three clicks: Activate, Create page, Add to sidebar. Done.<\/li>\n<\/ol>\n\n<p>If you prefer manual setup:<\/p>\n\n<ol>\n<li>Go to <strong>Settings \u2192 WFY24 Weather<\/strong>.<\/li>\n<li>Paste your API key (get one at <a href=\"https:\/\/www.wfy24.com\/en\/widgets\">wfy24.com\/en\/widgets<\/a>).<\/li>\n<li>Add <code>[wfy24_weather]<\/code> to any post, page, or widget area.<\/li>\n<\/ol>\n\n<!--section=faq-->\n<dl>\n<dt id=\"is%20it%20really%20free%3F\"><h3>Is it really free?<\/h3><\/dt>\n<dd><p>Yes. No credit card, no trial, no ads in the widget. Fair-use rate limits apply (plenty for normal sites).<\/p><\/dd>\n<dt id=\"do%20i%20need%20to%20create%20an%20account%20manually%3F\"><h3>Do I need to create an account manually?<\/h3><\/dt>\n<dd><p>No. The plugin registers your site automatically on activation using your WordPress admin email. You can also enter a key manually if you already have one.<\/p><\/dd>\n<dt id=\"can%20i%20revoke%20%2F%20change%20my%20key%20later%3F\"><h3>Can I revoke \/ change my key later?<\/h3><\/dt>\n<dd><p>Yes \u2014 visit <a href=\"https:\/\/www.wfy24.com\/en\/widgets\">wfy24.com\/en\/widgets<\/a> to manage keys. Any changes you make there apply to this plugin immediately (keys are shared).<\/p><\/dd>\n<dt id=\"what%20data%20is%20sent%20to%20wfy24.com%3F\"><h3>What data is sent to wfy24.com?<\/h3><\/dt>\n<dd><p>Minimal. See the \"External service\" section above. The plugin only contacts wfy24.com on actions you explicitly trigger (activation click, widget rendering on visitor pages, Pro upgrade click). There is no background telemetry, no scheduled cron, and no analytics.<\/p><\/dd>\n<dt id=\"can%20i%20customize%20the%20look%3F\"><h3>Can I customize the look?<\/h3><\/dt>\n<dd><p>The widget uses Shadow DOM for style isolation, so it won't clash with your theme. Choose from 5 layouts (Classic, Compact, Minimal, Badge, Forecast) and 3 themes (Auto, Light, Dark).<\/p><\/dd>\n<dt id=\"what%20languages%20are%20supported%3F\"><h3>What languages are supported?<\/h3><\/dt>\n<dd><p>50 languages. Set the <code>lang<\/code> attribute to any ISO 2-letter code.<\/p><\/dd>\n<dt id=\"how%20do%20i%20find%20a%20city%20slug%3F\"><h3>How do I find a city slug?<\/h3><\/dt>\n<dd><p>Go to <a href=\"https:\/\/www.wfy24.com\">wfy24.com<\/a>, search for your city, and copy the slug from the URL (e.g. <code>paris-fr2988507<\/code>).<\/p><\/dd>\n<dt id=\"does%20it%20work%20with%20caching%20plugins%3F\"><h3>Does it work with caching plugins?<\/h3><\/dt>\n<dd><p>Yes. The widget loads client-side, so full-page cache has no impact on weather freshness.<\/p><\/dd>\n<dt id=\"does%20it%20work%20with%20gutenberg%20%2F%20block%20editor%3F\"><h3>Does it work with Gutenberg \/ block editor?<\/h3><\/dt>\n<dd><p>Yes \u2014 we ship a \"WFY24 Weather Widget\" block under the Widgets category.<\/p><\/dd>\n<dt id=\"what%20data%20sources%20does%20wfy24%20use%3F\"><h3>What data sources does WFY24 use?<\/h3><\/dt>\n<dd><p>WFY24 combines multiple NWP models (DWD ICON-D2, ICON-EU, ICON-Global, GFS fallback) with ML post-processing (XGBoost) and real observations from 19,000+ weather stations (METAR, SYNOP, CWOP, DWD, etc.).<\/p><\/dd>\n<dt id=\"is%20there%20an%20attribution%20%2F%20%22powered%20by%22%20link%3F\"><h3>Is there an attribution \/ \"powered by\" link?<\/h3><\/dt>\n<dd><p>Yes. The free version of this plugin displays a small \"Weather by WFY24\" link under each rendered widget. This is disclosed explicitly during activation \u2014 the onboarding wizard shows a notice asking you to agree before you click \"Activate now (free)\". Clicking \"Activate\" is your explicit consent. The link is how we keep the service free for everyone.<\/p><\/dd>\n<dt id=\"can%20i%20remove%20the%20%22weather%20by%20wfy24%22%20link%3F\"><h3>Can I remove the \"Weather by WFY24\" link?<\/h3><\/dt>\n<dd><p>Yes \u2014 by <a href=\"https:\/\/www.wfy24.com\/en\/widgets\/pro\">upgrading to Pro<\/a>, which removes the link, increases the request rate limit, and unlocks additional features. The free version keeps the attribution as a fair trade for unlimited free data.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>1.5.6<\/h4>\n\n<ul>\n<li><strong>Language combobox: clicking the field now shows all 50 languages, not just the saved selection.<\/strong> Previously, focusing the field with \"English\" already saved would self-match the filter and the dropdown would only show the single English entry \u2014 useless for switching language. Now the picker detects when the input value equals an existing language's native or English name (i.e. the saved selection) and shows the full list so you can browse.<\/li>\n<li>Both city and language inputs now select-all on focus, so typing immediately replaces the saved value instead of appending to it.<\/li>\n<li>Removed the 12-item \/ 20-item slicing on the language list \u2014 the dropdown is scrollable, all 50 are now reachable.<\/li>\n<\/ul>\n\n<h4>1.5.5<\/h4>\n\n<ul>\n<li><strong>Fixed: city and language suggestion dropdowns never opened.<\/strong> The combobox stylesheet sets <code>display: none<\/code> as the default state for the suggestion list; the JavaScript was clearing the inline override (<code>element.style.display = ''<\/code>) which fell back to that CSS default \u2014 so the dropdown was always hidden, even though the REST proxy was returning matches and no console errors were thrown. Now sets <code>display: block<\/code> explicitly. Affects both the Default City picker and the Language combobox on the settings and onboarding screens.<\/li>\n<\/ul>\n\n<h4>1.5.4<\/h4>\n\n<ul>\n<li><strong>City picker UX matches the public wfy24.com search.<\/strong> The Default City dropdown now renders each result as a two-line item \u2014 country flag, bold place name, and a grey secondary line with region + country (e.g. \"Athens\" \/ \"Attica, Greece\") \u2014 instead of a single concatenated label. The picker also forwards the admin's locale to the upstream search so localized place names are returned.<\/li>\n<li><strong>Keyboard navigation in the city picker.<\/strong> \u2191 \/ \u2193 to move through results, Enter to select, Escape to close \u2014 same shortcuts as the public site's search dialog. Hovered and keyboard-active items share a single highlight state.<\/li>\n<li>Internal: <code>\/wp-json\/wfy24\/v1\/cities<\/code> now returns structured fields (<code>slug<\/code>, <code>name<\/code>, <code>country_code<\/code>, <code>country_name<\/code>, <code>flag<\/code>, <code>region<\/code>) instead of a single pre-formatted <code>label<\/code>. Cache key includes the locale so per-language responses don't collide.<\/li>\n<\/ul>\n\n<h4>1.5.3<\/h4>\n\n<ul>\n<li><strong>Onboarding overhaul.<\/strong> Step 1 is now a complete configuration form \u2014 admin email (editable inline; no need to leave the wizard for Settings \u2192 General), default city (autocomplete search backed by wfy24.com places API), language (searchable combobox with all 50 supported languages shown in their native script and English name), theme, units, and a visitor-geolocation toggle \u2014 all set in one place before activation. Click Activate and the widget is live with your exact configuration.<\/li>\n<li><strong>Visitor geolocation is now off by default.<\/strong> Previously the widget would call <code>navigator.geolocation<\/code> whenever no default city was set, which triggered a browser permission prompt on every visitor and silently broke when declined. Auto-detect is now an explicit opt-in checkbox; the default is to honour the admin-set city, which matches what 95%+ of sites actually want (e.g. a tourism site for Crete shouldn't show a Swedish visitor's local weather).<\/li>\n<li><strong>City picker.<\/strong> Type a city name and pick from results (slug + flag + country) instead of needing to know the wfy24.com slug format. Powered by a server-side proxy (<code>\/wp-json\/wfy24\/v1\/cities<\/code>) so the admin's IP is never exposed cross-origin.<\/li>\n<li><strong>Language combobox.<\/strong> All 50 supported languages now appear in a searchable dropdown with native + English names; type-ahead filters by either. The free-text 2-letter code input is gone.<\/li>\n<li><strong>Stronger Pro pitch.<\/strong> The free-version notice now lists the full Pro feature set inline (no attribution, higher rate limits, priority support, custom CSS via theme tokens, historical data + analytics) instead of just \"removes the link.\"<\/li>\n<li><strong>Sticky settings access.<\/strong> A \"Open plugin settings\" button is now pinned on the onboarding screen, and a \"Skip onboarding\" link routes admins straight to Settings if they prefer to configure manually.<\/li>\n<li><strong>CORP header on widget.js + \/api\/widget\/.<\/strong> The hosted bundle now ships <code>Cross-Origin-Resource-Policy: cross-origin<\/code>, which makes the widget work in cross-origin-isolated environments (e.g. playground.wordpress.net) that ship <code>Cross-Origin-Embedder-Policy: require-corp<\/code>.<\/li>\n<\/ul>\n\n<h4>1.5.2<\/h4>\n\n<ul>\n<li><strong>Activation transparency.<\/strong> The onboarding wizard now displays an explicit, dynamic disclosure listing exactly what is sent to wfy24.com on click \u2014 the site domain, the administrator email currently configured in Settings \u2192 General (rendered live so the admin sees their own email before consenting), the site name, the WordPress version, the plugin version, and the locale. No visitor data is collected. Admins who want to register with a different email are pointed to Settings \u2192 General and asked to change it before clicking Activate.<\/li>\n<li>Documented multisite behaviour explicitly: per-subsite onboarding, no automatic phone-home on Network Activation, domain-bound API key per subsite. See the new \"Multisite Support\" section.<\/li>\n<\/ul>\n\n<h4>1.5.1<\/h4>\n\n<ul>\n<li>Plugin Check compliance \u2014 replaced two <code>wp_redirect()<\/code> calls in the Pro flow (Stripe Checkout and Billing Portal) with <code>wp_safe_redirect()<\/code> plus a scoped <code>allowed_redirect_hosts<\/code> filter that whitelists <code>checkout.stripe.com<\/code>, <code>billing.stripe.com<\/code>, and <code>pay.stripe.com<\/code>. The redirect helper validates the target host against this list before issuing the redirect, falling back to a safe admin URL on mismatch.<\/li>\n<li>Tightened the readme upgrade notice for 1.5.0 to fit the 300-character limit.<\/li>\n<li>Cleaned up readme: the \"External service\" section and FAQ no longer reference the daily telemetry ping (removed in 1.4.0) \u2014 the plugin makes no scheduled outbound calls.<\/li>\n<\/ul>\n\n<h4>1.5.0<\/h4>\n\n<ul>\n<li><strong>WP.org compliance: replaced inline <code>&lt;script&gt;<\/code> tags with <code>wp_enqueue_script<\/code>.<\/strong> All three call sites \u2014 the <code>[wfy24_weather]<\/code> shortcode, the admin-settings live preview, and the onboarding wizard preview \u2014 now register the widget bundle through WordPress's enqueue API and emit a <code>&lt;div data-wfy24-widget \u2026&gt;<\/code> placeholder where the widget should render.<\/li>\n<li>The hosted widget bundle (widget.js) gained a third mount mode: it scans the DOM for <code>[data-wfy24-widget]<\/code> elements and renders inside the placeholder you mark, so WordPress hosts can keep the script in the page footer (per directory guidelines) without breaking in-place rendering. The legacy inline-<code>&lt;script&gt;<\/code> pattern still works unchanged for non-WordPress integrations.<\/li>\n<li>Added the WordPress 6.3 <code>strategy =&gt; 'async'<\/code> enqueue option.<\/li>\n<\/ul>\n\n<h4>1.4.0<\/h4>\n\n<ul>\n<li><strong>Removed the opt-in telemetry ping<\/strong> in line with the WordPress.org Plugin Directory guidelines on phoning home. The plugin no longer schedules a daily WP-Cron event and no longer sends domain \/ WordPress version \/ plugin version to wfy24.com. The <code>Telemetry<\/code> checkbox has been removed from the Settings page. Existing scheduled events are cleared on upgrade and on deactivation.<\/li>\n<li>The Settings page no longer shows monthly request counts on the connection card (these were populated by the removed telemetry response). The card still shows the API key prefix.<\/li>\n<li>No change to the widget itself or to the Pro flow. All remaining external HTTP calls (one-shot site registration, Pro status, Stripe checkout\/portal) are part of the service the plugin exposes and only run in response to an explicit user action.<\/li>\n<\/ul>\n\n<h4>1.2.0<\/h4>\n\n<ul>\n<li><strong>Pro tier.<\/strong> Added a Pro section to the plugin Settings page. One-click upgrade opens a Stripe Checkout session (\u20ac9\/month); on successful payment the plugin is notified via webhook and the widget suppresses the \"Weather by WFY24\" attribution link. Existing Pro users see their renewal date and a \"Manage subscription\" button that opens the Stripe Billing Portal (update card, cancel, download invoices). Secure checkout via Stripe, cancel anytime.<\/li>\n<li>The shortcode now reads the Pro status from a plugin option (refreshed hourly via \/api\/widget\/pro\/status) and passes <code>data-attribution=\"0\"<\/code> or <code>\"1\"<\/code> to widget.js accordingly.<\/li>\n<li>Added \"Upgrade to Pro\" actions on the Settings page. No behavior change for free-tier users \u2014 the attribution remains required on free.<\/li>\n<\/ul>\n\n<h4>1.1.2<\/h4>\n\n<ul>\n<li>Attribution compliance: the free version now displays an explicit disclosure notice in the onboarding wizard before activation explaining that the \"Weather by WFY24\" link will appear under each widget. User consent is captured via the \"Activate now (free)\" button click. Added FAQ entries explaining the attribution, the Pro upgrade path, and external service behavior. The widget script now respects a <code>data-attribution<\/code> attribute (hardcoded to \"1\" in the free plugin; Pro version sends \"0\" to suppress the link).<\/li>\n<\/ul>\n\n<h4>1.1.1<\/h4>\n\n<ul>\n<li>Plugin Check compliance: added translators comments, ordered placeholders (%1$s\/%2$s), escaped block wrapper attributes, prefixed globals with wfy24_, removed load_plugin_textdomain (auto-loaded since WP 4.6), added nonce \/ enqueue justifications where required by the widget's embed pattern.<\/li>\n<\/ul>\n\n<h4>1.1.0<\/h4>\n\n<ul>\n<li><strong>Zero-friction onboarding<\/strong> \u2014 welcome wizard auto-registers your site with wfy24.com on activation (no copy\/paste)<\/li>\n<li><strong>One-click Weather page creation<\/strong> \u2014 publish a \"Weather\" page with the widget ready to go<\/li>\n<li><strong>One-click sidebar integration<\/strong> \u2014 inject a compact widget into your first sidebar widget area<\/li>\n<li><strong>Connection status<\/strong> \u2014 Settings page now shows key status and monthly request count<\/li>\n<li><strong>Opt-in telemetry<\/strong> \u2014 daily anonymous ping so your wfy24.com dashboard shows active installs<\/li>\n<li>Improved readme disclosure for external services<\/li>\n<\/ul>\n\n<h4>1.0.0<\/h4>\n\n<ul>\n<li>Initial release<\/li>\n<li>Shortcode <code>[wfy24_weather]<\/code> with city, theme, lang, units, variant attributes<\/li>\n<li>Gutenberg block under Widgets category<\/li>\n<li>Settings page for defaults (API key, city, theme, units, language, variant)<\/li>\n<li>Support for 50 languages and 5 layouts<\/li>\n<\/ul>","raw_excerpt":"Free, lightweight, embeddable weather widget for your WordPress site. One-click activation, 50 languages, auto location, light\/dark theme.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/dzo.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/302941","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dzo.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/dzo.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/dzo.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=302941"}],"author":[{"embeddable":true,"href":"https:\/\/dzo.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/wfy24"}],"wp:attachment":[{"href":"https:\/\/dzo.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=302941"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/dzo.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=302941"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/dzo.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=302941"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/dzo.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=302941"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/dzo.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=302941"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/dzo.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=302941"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}