ProfilePress Update 4.16.19 – Order Creation, Yoast URL Cleanup & More

We are excited to announce the release of ProfilePress 4.16.19. This update lets you create an order when you add a new customer, adds compatibility with Yoast SEO’s URL Cleanup feature, and includes several improvements and bug fixes.

This post rolls up everything shipped since our last update announcement covering versions 4.16.17, 4.16.18, and 4.16.19.

New features

Order Creation on Add New Customer

Previously, adding a customer manually from the admin dashboard and recording a purchase for them meant two separate steps: create the customer, then create the order. Now you can do both at once.

On the Customers → Add New screen, check Create Order and a new set of order fields appears — Membership Plan, Amount, Order Status, Payment Method, Transaction ID, Date, and Send Receipt. Fill them in, and ProfilePress creates the membership order for that customer as soon as you save.

This is useful for recording offline sales, manual invoices, or memberships granted outside your normal checkout flow, without having to jump between two admin screens.

Add a new Customer and order - ProfilePress

Yoast SEO URL Cleanup Compatibility

If you use Yoast SEO’s URL Cleanup feature, it strips “unregistered” query parameters from your URLs, which previously could interfere with ProfilePress checkout links that rely on query parameters to pass plan and billing information.

ProfilePress 4.16.18 added compatibility so Yoast’s URL Cleanup now recognizes and preserves the query parameters ProfilePress checkout pages depend on. If you have URL Cleanup enabled, your checkout links will continue to work as expected.

Improvements

Jetpack / WordPress.com SSO — Improved support for sites using Jetpack or WordPress.com single sign-on, for smoother login handling on sites with that integration active.

Translatable Pay button — The checkout Pay button text (e.g. “Pay $10.00”) is now fully translatable, so non-English sites display the correct wording in the customer’s language.

Bug Fixes & Security

Bug fixes

  • Fixed a bug where an email that was supposed to be suppressed was still being sent. The email initialization logic is now a per-class singleton, so suppression settings no longer get reset mid-request.
  • Fixed the Email Confirmation addon not working correctly.

Security fixes

This update rolls up three security fixes. We strongly recommend updating to 4.16.19 as soon as possible.

  • Upload scope restriction
    File uploads for digital products were not properly restricted by file type, which could allow file types outside ProfilePress’s intended upload scope. The MIME-type filter is now scoped specifically to digital-product uploads.
  • User role assignment
    Fixed an issue where a role that wasn’t a legitimate, whitelisted user role could be passed and assigned to a user.
  • Subscription cancellation authorization
    Fixed an issue where another user could cancel a user’s subscription due to a missing ownership check.

You can view the complete changelog here: https://profilepress.com/changelog/

– – –

Be sure to update to the latest version to take advantage of these new features and bug fixes. You can update your ProfilePress plugin from your website Dashboard by navigating to Dashboard>>Updates. You can also download the latest version from your ProfilePress account dashboard.

We are committed to improving our platform’s functionality and providing our users with the best possible experience.

If you have any feedback or suggestions, please contact our support team; we’ll gladly assist you. Thank you for using ProfilePress, and we hope you enjoy the new features.

Create Paid Membership Websites in Minutes

Install ProfilePress today and get a modern and powerful WordPress membership & ecommerce website – the easy way!