WP-Members User List version 1.9.5 has been released. This update includes a number of updates including some security upgrades.
Note that there is a major update pending – version 2.0.0 – and that version is currently at the alpha testing stage. Beta releases will begin to become available soon. If you’re interested in testing the User List 2.0.0 version, let me know via the contact form (you must have a current license key to receive the beta).
In the meantime, while the 2.0.0 project is wrapping up, there were some fixes that I needed to get out. First, the Updates API library has been upgraded. User List was the last remaining plugin extension that needed the upgrade to the library, so this update finalizes that. The Updates API library update includes some fixes that deactivate your license key on rocketgeek.com if the plugin is deactivated and deleted through the WP plugins panel. You no longer have to deactivate and delete the license first through the plugin’s admin.
I also updated a couple of things for compatibility with WP-Members 3.3.0, which should be released in October. This will make User List 1.9.5 both forward compatible with WP-Members 3.3.0 and backwards compatible with earlier versions.
Last but not least, there are some security items addressed. I recently did a security audit of the plugin, and while I did not find any specific vulnerabilities, I did find some items that could be hardened even further. Most these updates involve casting certain variables as integers. There is also some additional data sanitization.