diff --git a/readme.md b/readme.md
index 6cee506..19e5c79 100644
--- a/readme.md
+++ b/readme.md
@@ -4,6 +4,10 @@ Disallows bad WordPress plugins
 
 ## Changelog
 
+### 2.1.3
+- tweaked disable wordpress.org snippet
+- replaced `esc_html()` with `wp_kses_post()` wherever messages are being output in admin notices
+
 ### 2.1.2
 - added `ajaxComplete` handler to ensure "Install Now" button is properly disabled even after AJAX events
 - minor code cleanup and security and performance enhancements