The WP-Members 3.4.8 release includes some bug fixes as well as a security update. All users should update.
Security
Through responsible disclosure, I was notified by Wordfence of a potential vulnerability in the plugin. It’s a minor issue and does not present a threat to user data, but it does need to be addressed, just to make sure things are tightened up. The issue is patched in version 3.4.8 and all users should update to this version.
Bug fixes
This release includes all intermediate patches since 3.4.7 as well as the following:
- Fixes a bug that causes the list of fields being added to the Users > All Users screen to not save in certain configurations.
- Fixes the saving of WooCommerce-specific options.
Additional updates
- Improvements to the RS Captcha validation (if used).