RocketGeek

Home of WP-Members, The Original WordPress Membership Plugin

Home » Archives for Release Announcements

Release Announcements

WP-Members Memberships for WooCommerce 0.9.0

· ·

This article is provided free. Find out how you can get full access to premium content, including how-to articles and support forums, as well as priority email support and member exclusive plugin extensions..

 

WP-Members Memberships for WooCommerce version 0.9.0 was released today. This package includes a bug fix, some code improvements, and notifies WooCommerce that it is compatible with HPOS (High-Performance Order Storage).

Continue Reading →

WP-Members 3.4.9.2

· ·

This article is provided free. Find out how you can get full access to premium content, including how-to articles and support forums, as well as priority email support and member exclusive plugin extensions..

 

WP-Members 3.4.9.2 contains two patches that are included from the upcoming 3.5.0 release and two security patchs.

Security

  • Review shortcode object class for sanitizing all shortcode attributes and escaping all output: Due to a reported vulnerability in one of the plugin’s shortcodes, a complete security audit was performed on the entire shortcodes class in the plugin. The result of this review included making sure that every shortcode attribute is sanitized and that every shortcode output is escaped.
  • Review admin user profile class for sanitizing input and escaping output: Due to a reported vulnerability in one of the default data fields WP-Members collects during registration, a complete security audit was performed on where this data is collected and the admin user profile screen output. The result of this review included making sure that this data was sanitized on input and escaped on output.

It is recommended that all users update to version 3.4.9.2.

Patches

There were two 3.5.0 bug fix patches included in this update:

  • If memberships are enabled but no memberships are defined, that could cause an error when performing a user export. While it is simple enough to disable memberships if there are no defined memberships, the plugin was improved to check for this possibility before assembling export data, solving the problem even if the plugin is misconfigured.
  • If the plugin is set up for HTML email, the fields list in the admin notification is a single line because text line breaks are not the same as HTML line breaks. A patch is included to resolve this depending on the email format selected in the plugin’s options.

WP-Members Advanced Options 2.2.5 Update

· ·

This article is provided free. Find out how you can get full access to premium content, including how-to articles and support forums, as well as priority email support and member exclusive plugin extensions..

 

Version 2.2.5 of the WP-Members Advanced Options has been released. This package includes a couple of key updates:

First, this package addresses a couple of nagging issues with the duplicate emails functionality that allows users to register using an email that is already registered in WP. The functionality had been addressed in previous updates, but there were some isolated instances where this was still a problem.

In researching the users with ongoing issues, it turns out to be a problem when the core plugin has the confirmation link setting enabled. This changes when and how the plugin actions are fired.

That problem is addressed and fixed in this update.

The other updates include a general review and improvement of code as well as the removal of some deprecated functions in WP-Members (such as wpmem_inc_regmessage()), so this update requires that you be running WP-Members 3.4 or higher.

Ready to get started?

Join Today!