A round-up of everything we shipped this cycle: a new Year Updater for evergreen content, a unified theme catalog, two-way support, one-click backups, a sharper dashboard, and a deep security pass.
We've had a busy cycle. Some of it you'll notice right away; some of it quietly makes jekcms harder to break. Here's a tour of what's new — and why each piece matters if you run content sites for a living.
Year Updater: keep evergreen content actually evergreen
If you publish listicles or guides, you know the problem. Every January, dozens of titles and URLs still say "…2026." Updating them by hand is tedious, and changing a URL without a redirect quietly kills your rankings.
The new Year Updater — a module inside the Advanced SEO plugin — fixes the whole loop:
- It scans your posts and finds the year in both titles and slugs.
- It shows a preview and only touches the posts you select. No bulk surprises.
- It swaps only a full-year token, so a number like
12026is left alone. - When a slug changes, it writes an automatic 301 redirect from the old URL to the new one — no 404s, no lost SEO.
And because timing is everything, the dashboard reminds you at the turn of the year: "42 posts still mention 2026 — update them?"
One place to manage your theme catalog
Theme name, description, feature list and preview image are now edited from a single screen. The preview you upload is stored centrally, so your demo pages and on-site previews always show the same, correct image — no more mismatched thumbnails.
Support that actually goes both ways
We fixed an important issue in the support desk: customer messages and staff replies now live in one thread, visible to both sides. Internal notes stay private to your team, and status labels were simplified so a ticket's state is obvious at a glance.
Full-site backups, one-click restore
Scheduled backups (database and uploads in a single archive), a retention policy, and a one-click restore wizard. It runs in pure PHP, so it works on shared hosting without mysqldump. "What if we get hacked?" becomes a twenty-second answer.
A dashboard that talks business
The admin home now opens with the numbers that matter — revenue, active licenses, customers, open tickets and posts — each one click from its detail page.
Quieter, sturdier foundations
Under the hood, the licensing schema moved into code and now self-heals on every run, so activation works even on a brand-new install. Updates are signed and SHA-256-verified, delivered with one click from the central server. And we ran a deep security pass: the payment webhook is now fail-closed, one-click (GET) CSRF is closed, SVG uploads (a stored-XSS risk) are gone, server-side fetchers are guarded against SSRF, and a stray, unauthenticated utility was removed from the web root.
A website that finally explains itself
We rewrote the homepage and features page around a single question — why jekcms instead of WordPress? — in short, honest lines. Google Search Console, GA4 and AdSense in one panel, AI image generation, the privacy-first ZeroTrack analytics, the newsletter and more are now spelled out instead of buried.
We're still in alpha, and that's the point: your feedback is shaping the roadmap in real time. If something is missing or breaks, tell us — we would rather hear it now.
