Home of WP-Members, The Original WordPress Membership Plugin
Chad Butler · ·
WP-Members Advanced Options 2.3.5 has been released. This version includes some code improvements as well as some bug fixes. There are also WP CLI commands added for managing the plugin’s options in the command line.
Continue Reading →Chad Butler · ·
This version is a security patch release for all previous versions. It patches a potential cross site scripting vulnerability that could be used by users with a contributor or higher role (so only when you have non-administrator users who have a role capability that allows them to create posts).
I’m not going to detail how it could be used, but this can only be exploited by a user who has a role allowing them to create posts. Additionally, the necessary parameters for exploiting it is in a feature that is not published in the documentation, so it is not anything obvious.
Chad Butler · ·
When using the WP-Members Security extension’s option for the WP password strength meter, if the user does not provide a password meeting the required strength, the form’s submit button is disabled. There are times when it may be necessary to provide additional information to the user so they know why the button is disabled. This may be the case when the form is long and the button is far away from the password field. It could be other cases as well.
This tutorial will provide you with a process that will allow you to change the text of the submit button if the meter is in an error state (i.e. when the password does not meet the required strength level).
Continue Reading →Chad Butler · ·
This version is a security patch release for all previous versions. It patches a potential cross site scripting vulnerability that could be used by users with a contributor or higher role.
I’m not going to detail how it could be used, but this can only be exploited by a user who has a role allowing them to create posts. Additionally, the necessary parameters for exploiting it is in a feature that is not published in the documentation, so it is not anything obvious.
Chad Butler · ·
WP-Members 3.5.4 has been released. This version includes a few minor bug fixes, some new API functions, and some improvements to the WP CLI commands.
Continue Reading →Ready to get started?