Purchase Now

Changelog

What’s new in ProfilePress

Every release brings new features, improvements, and fixes.

Get ProfilePress →
Read the docs

ProfilePress Lite

4.18.0

Latest
  • NewOnline courses (LMS). Build courses with video, text and quiz lessons, certificates, drip, prerequisites, reviews, lesson Q&A, course emails and reports, and sell them through membership plans.
  • NewCourse catalog and My Courses blocks, Elementor widgets and shortcodes.
  • NewCourse bundles.
  • NewThe checkout page shows your plans to choose from when it's opened without a plan.
  • New`[profilepress-plans]` shortcode to show plans or a plan group as a pricing section on any page.
  • NewAdded ppress_registration_form_before_submit_button action hook.
  • ImprovedSecurity fix: Prevent shortcode execution in the My Account display-name dropdown.
  • ImprovedSecurity fix: Neutralize brackets in admin billing fields to prevent shortcode injection.
  • FixFixed proration crediting the first payment instead of the plan price.
  • ImprovedRemoved setting to enable receipt sending on manual order so order completed action can trigger.

4.17.7

  • NewAdded rate-limit to login, registration and password reset forms for improved security.
  • NewAdded real server-side registration form validation of required fields.
  • NewAdded validation to no-login redirect URL after registration for ajax forms.
  • FixFixed bug with other plugin interfering with ajax login.
  • ImprovedKeep generated utility pages and admins off the public site.
  • ImprovedSave registration passwords as typed so they match at login.
  • ImprovedIf password field is in a registration form, reject registration without a password
  • FixFixed PHP fatal error in Tutor LMS integration.
  • FixFixed bug where LMS access was revoked on subscription cancel/expiry even when another active plan grants it.
  • FixFixed PHP error "Array to string conversion" warnings and wrong avatar size bug.
  • FixFixed bug where initial and recurring amount subscription editing was disabled if Tax is disabled.
  • FixFixed PHP 8.3 deprecations, array logging and early textdomain load.
  • ImprovedPaywall: name the required plans with Join and Log in links.
  • ImprovedLand members in My Account after signup, checkout and login.
  • ImprovedSurface disabled user registration before checkout fails.

4.17.6

  • FixFixed security issue where with shortcode execution via comment content on user profile.
  • FixFixed: remove 10-per-day limit on renewal and expiration emails.
  • NewAdded Free Trial Ending Reminder email.
  • NewAdded Login notification email.
  • NewAdded Login Activity tab to My Account page showing recent logins.
  • FixFixed XSS in contextual country state field in checkout.
  • FixFixed: Reflected XSS in member directory filters.
  • FixFixed: User meta enumeration via member directory filters.
  • FixFixed: Member directory role filter could list users outside the directory's configured roles.
  • FixFixed: Registration and login form ID could be tampered with to bypass invite codes, CAPTCHA and form-assigned user roles.
  • FixFixed: Brute-force protection plugins not recording failed logins made via ProfilePress login forms.
  • FixFixed: Unauthenticated file upload via non-file custom fields; files from failed registrations are now deleted.
  • FixFixed: CSRF in edit profile avatar and cover photo removal.
  • FixFixed: Deactivated membership plans could be purchased at checkout.
  • FixFixed: Checkout tax could be bypassed by skipping or altering the order review.
  • FixFixed: Retention-only coupons could be applied to new purchases.
  • FixFixed: Content protection bypass via REST API and search for "Pages with Template", "Home or Front Page" and "Blog or Posts Page" rules.
  • FixFixed: Comments on protected content are now hidden from users without access.
  • FixFixed: REST API search bypass of protected content exclusion.
  • FixFixed: CSV formula injection in membership exports; exports no longer written to the uploads folder.
  • FixFixed: Missing capability checks on admin notice dismissal, login redirect settings and content protection AJAX.
  • FixFixed: Email content saved by users without the unfiltered_html capability is now sanitized.
  • FixFixed: AcademyLMS fatal error for paid courses not mapped to a plan.

4.17.5

  • FixFixed: Sensitive Information Exposure via Shortcode Injection via Nickname and Biographical Info Profile Fields.
  • FixFixed PHP Warning: Undefined array key "login_remember".
  • FixFixed bug where edit profile form was missing updated user data.
  • ImprovedMade usermoderation enabled by default via checkout.

4.17.4

  • NewAdded inline validation of email address during checkout.
  • NewAdded LoginGuard to checkout and registration autologin.
  • FixFixed security issue where subscribers could obtain a paid plan without payment via plan change.
  • ImprovedImprovement: Revalidate coupons at calculation time and fixed race condition bug.
  • FixFixed bug with upgrade/downgrade not working after old sub got expired.

4.17.3

  • FixFixed the security issue in the bio frontend user profile.
  • ImprovedScanned and fixed Fable reported security issues.
  • FixFixed fatal error with emogrify.
  • ImprovedImprovement: ppress_allow_empty_password_unchanged filter is true by default.

4.17.2

  • ImprovedImproved security of license upgrader.
  • ImprovedUpgraded internal PHP dependencies.

4.17.1

  • FixFixed security issue with shortcode execution on frontend profile data.
  • FixFixed bug with searching users by country name on member directory.
  • FixFixed bug where expiry emails were sent to customers who have resubscribed.
  • FixFix invisible checked state on form builder field settings checkboxes.

4.17.0

  • NewAdded Subscription Payment Failed email notification.
  • FixFixed Stripe bug where email change caused checkout failure.
  • FixFixed fatal error when price has a currency symbol or thousands separator on admin order creation.
  • FixFixed security issue of shortcode execution on first and last name profile fields.

4.16.19

  • ImprovedAdd optional order creation to the Add New Customer screen.
  • FixFixed bug where suppressed email still went out.
  • FixFixed security issue where other file types (exe, msi) could be uploaded outside ProfilePress upload scope.
  • ImprovedImproved support for Jetpack/wp.com SSO.
  • ImprovedEnhancement: Made the Pay button text translatable.

4.16.18

  • NewAdded compatibility with Yoast URL Cleanup feature.
  • FixFix security issue where non-admin user role can be passed as user role.

4.16.17

  • FixFixed security issue a user subscription can be canceled by another user.

4.16.16

  • ImprovedPro: Paddle addon.
  • NewAdded password visibility icons to the password reset handler form fields

4.16.15

4.16.14

  • NewAdded filtering by status to plan listing page.
  • FixFixed avatar distortion on account page.
  • FixFixed bug where plan duplication missed some data.
  • FixFixed bug with form preview resulting to FATAL error.
  • FixFixed XSS in member and profile listing frontend displays.
  • ImprovedImprovement: reject Stripe webhooks when Webhook secret is not configured.
  • ImprovedMade customer meta labels translatable.
  • ImprovedAdd warning to Select Role field in form builder if options are empty.

4.16.13

  • ImprovedImproved admin UI for WP7
  • FixFixed bug where users can upgrade/downgrade to a plan not authorized for them.
  • FixFixed bug where subscription renewal email is sent when autorenewal is disabled.
  • ImprovedEnsure expiration email is sent when active/trialling subscriptions are not auto-renewable.
  • NewAdded support for specifying subscription status in content protection shortcode
  • NewAdded ppress_restriction_shortcode_rule_latest_only filter.
  • NewAdded filter for overriding Stripe billing intervals.
  • NewAdded a filter to allow per-field filename customization.
  • NewAdded filter for adding custom columns to the subscriptions list table.
  • NewAdded action hook and filter for customer details metaboxes.

4.16.12

  • FixFixed issue with plan upgrade by wrong user.
  • FixFixed bug where empty subscription records could be created.

4.16.11

  • NewAdded filter ppressmd_member_directory_filters_expanded.
  • FixFixed a security issue where a user could cancel another user subscription.

4.16.10

  • ImprovedImprovement: Cancel subscription in gateway before deletion.
  • ImprovedSecurity Fix: Arbitrary Shortcode Execution via Checkout Billing Fields.

4.16.9

  • NewAdded billing address data to customer export.
  • NewAdded ppress_is_third_party_2fa_active filter.
  • FixFixed a likely fatal error on form preview.
  • FixFixed bug where account info data got lost on group checkout refresh.
  • FixFixed bug where checkout overrides previously uploaded files.
  • FixFixed bug where download link requiring logged in users worked for other logged in users.
  • ImprovedAdd custom field placeholder support to admin new user email notification.

4.16.8

  • FixFixed security issue with arbitrary shortcode execution on form preview.
  • FixFixed couple of PHP notices.

4.16.7

  • FixFixed bug where label is shown for empty data in member directory.
  • NewAdded user roles as classes to member directory item wrapper.

4.16.6

  • ImprovedPro: FluentCommunity addon.
  • ImprovedPro: MasterStudy LMS addon.
  • NewAdded auto scroll to form error messages.
  • NewAdded support for plan pre-selection as query parameters to group checkout URL.
  • FixFixed bug where content protection on blog page did not work.
  • ImprovedImproved compatibility with WPML.

4.16.5

  • NewAdded multiple user role selection when editing users.
  • FixFixed bug where shortcode could be executed as profile information
  • FixFixed bug where registration blocking feature did not work during checkout.
  • FixFixed Stripe bug where only country field in checkout lead to error.

4.16.4

  • ImprovedPro: AffiliateWP and SliceWP addons.
  • FixFixed bug where subscription remained active after last order refund.
  • FixFixed bug with missing date_completed data for manual order creation.
  • NewAdded ppress_checkout_before_account_info_fields action hook.
  • NewAdded filter ppress_stripe_subscription_set_cancelled_action_as_expired.
  • NewAdded ppress_membership_plan_price filter.
  • NewAdded ppress_checkout_group_selector_plans filter.
  • FixFixed a couple of PHP notices.

Looking for older releases? See the full changelog.

ProfilePress Premium

4.17.0

Latest

4.16.0

4.15.3

  • FixFixed bug with passwordless login not working.
  • NewAdded filter: ppress_login_guard_is_enabled.
  • FixFixed: Function _load_textdomain_just_in_time was called incorrectly.

4.15.2

  • FixFixed bug where Sync Tool for ESP didn’t list all created lists/audiences.
  • FixFixed bug where previous membership expiration on plan downgrades wasn't preserved.
  • FixFixed error: Function curl_close() is deprecated since 8.5
  • ImprovedMade usermoderation enabled by default via checkout.

4.15.1

  • ImprovedImproved security of user moderation admin actions.
  • ImprovedImproved 2FA, LMS, and ESP security.
  • ImprovedImproved security of Pay What You Want and Invite Code addons.
  • FixFixed security issues in Woo and passwordless login integration.
  • ImprovedImproved security on autorenewalcheckbox, social login, and email confirmation addons.
  • ImprovedImproved BuddyPress addon security.
  • FixFixed bug where discounted initial amount didn't pass through to Paddle checkout.

4.15.0

  • NewAdded Pay What You Want addon.
  • FixFixed error: Notice: Function _load_textdomain_just_in_time was called incorrectly.

4.14.1

  • FixFixed bug with Email Confirmation addon not working correctly.

4.14.0

4.13.0

  • ImprovedBrevo addon.
  • ImprovedAuto-Renewal Checkbox addon.
  • NewAdded reCAPTCHA Enterprise support.
  • NewAdded order and subscription mapping support to ESP integrations.
  • NewAdded support for specifying values for hidden custom fields.
  • NewAdded support for adding hidden fields to the checkout form.

4.12.12

  • NewAdded filters for overriding Mollie and PayPal billing intervals.

4.12.11

  • FixFixed bug with Paystack incorrectly canceling subscriptions for downgrade and free trial.
  • FixFixed bug where payment ID didn’t link to the transaction in Mollie.
  • FixFixed bug with user profile preview not working for shortcode builder.

4.12.10

  • ImprovedLicense validation cache fix.

4.12.9

  • FixFixed PHP error in SliceWP addon.

4.12.8

  • NewAdded FluentCommunity addon.
  • NewAdded MasterStudy LMS addon.
  • ImprovedMerged BuddyPress addons into one and added group monetization.
  • NewAdded lifetime commissions addon support to SliceWP integration.
  • NewAdded email restrictions support to the Invite Codes addon.

4.12.7

  • FixFixed bug where autosync for ESP might not work
  • NewAdded ESP sync support when customer details are updated.

4.12.6

  • NewAdded AffiliateWP addon.
  • NewAdded SliceWP addon.
  • FixFixed bug with FixedSubscriptionExpiration addon date.
  • FixFixed bug with autosync not working for MailerLite addon.
  • NewAdded billing details support to ESP integrations.

4.12.5

4.12.4

4.12.3

  • NewAdded first and last name placeholders support in email confirmations.
  • NewAdded custom field placeholder support to user moderation emails.
  • FixFixed bug where passwordless login couldn't handle large user IDs.
  • FixFixed bug where the slidebox in metered-paywall could be shown to allowed users.

4.12.2

  • NewAdded ppress_metered_paywall_settings_taxonomies filter
  • NewAdded wp-wide support for emailConfirmation addon.
  • FixFixed Function _load_textdomain_just_in_time was called incorrectly.
  • FixFixed constant already defined error.
  • ImprovedMade bulksync in mailchimp and Campaign Monitor memory efficient.

4.12.1

  • NewAdded ppress_mc_is_sync_tags filter.
  • NewAdded ppress_receipt_billed_to_column_end action hook.
  • FixFixed Function _load_textdomain_just_in_time was called incorrectly.

4.12.0

  • NewAdded shortcode builder support for Member Directory

4.11.4

  • FixFixed bug with incorrect insertion of ob_start().

4.11.3

  • ImprovedImproved social login session handling.

4.11.2

  • FixFixed security issue with social login from accounts with unverified email addresses.

Looking for older releases? See the full changelog.

Always improving.

Every premium plan includes a year of updates and priority support.

See plans & pricing →
Try live demo