← Back to all sparks
C

Curator.io

MARKETING
Velocity5.0

Social media aggregation tool for embedding social feeds and walls on websites.

Curator.io adds two-factor sign-in after patching its servers for October's PHP CVEs

social-feedsembedsaccount-securityapi-accessintegration-maintenance
◆Current state
Curator.io embeds social feeds on websites and publishes monthly release notes. October added email verification and two-factor authentication, after a separate notice that its servers were patched for two critical PHP vulnerabilities on October 22. The surrounding months added self-serve API key resets, plan-bound API access, schedules and Media Library work, with connector fixes in every release.
◆Where it's heading
Account security is the newest thread, joining the steady upkeep of social source connectors that dominates every release.
◆Prediction
Connector fixes will keep filling the monthly notes; the entries do not show what follows 2FA.

◆Recent moves

  1. 15d ago

    Curator adds two-factor authentication and email verification

    Email verification and two-factor authentication arrive for Curator accounts, with Tumblr and Facebook source fixes. The first account-security feature in this run of notes.

  2. 22d ago

    Security update: Curator patched against critical PHP vulnerabilities

    A notice that Curator's servers were updated for the two critical PHP CVEs on October 22, with no action needed from customers.

  3. 2mo ago

    Self-serve API key reset; access controls tied to plan

    The first release letting customers rotate their own Curator API key, paired with access controls that bind key permissions to the account's plan. Together with payment-handling and Facebook-source reliability work, this is a housekeeping release on the operational side rather than the publishing side of the product.

  4. 3mo ago

    Schedules and Media Library refinements land with source fixes

    Schedules and Media Library improvements arrive together with a WordPress plugin, continuing the push past pure embedding. The long fix list is again dominated by source connectors and accessibility, the standing cost of running this product.

  5. 5mo ago

    Post Scheduling announced; critical security updates ship

    Post Scheduling appears here as announced rather than shipped -- the note says coming very soon. What actually landed is critical security work plus accessibility remediation, but this is the entry where the roadmap turns toward publishing.

  6. 5mo ago

    Grid Styles adds fixed-column or width-based layouts

    Grid Styles gives embedders a real layout choice between a fixed column count and a width-based flow -- a small but genuine gain in control over how feeds render on a page. The remainder is connector repair across Facebook, LinkedIn and X.