Final version bump to v5.2.1 for public release.

Author: MILAN88888

CHANGELOG.txt

@@ -1,3 +1,11 @@
+= 5.2.1    - 28/05/2026 =
+* Fix      - Stripe order validation issue.
+* Fix      - Membership upgrade action not available after disabling group add-on.
+* Fix      - Custom emails addon cannot be enabled with plus plan even available in personal.
+* Fix      - Nav menu items disappear for logged-out users when logout endpoint set to slash.
+* Fix      - File upload addon shows upgrade to premium prompt despite user having an active plan.
+* Fix      - Ensure meta_query is initialized before adding payment status condition in user payments query.
+
 = 5.2.0    - 20/05/2026 =
 * Refactor - Members registration process.
 * Refactor - Migrated PayPal integration from PayPal Standard to PayPal APIs.

assets/css/admin-rtl.css

@@ -97,8 +97,8 @@
       "link": "https://docs.wpuserregistration.com/docs/content-restriction/?utm_source=dashboard-all-features&utm_medium=card-documentation-link",
       "released_date": "22/09/2017",
       "plan": [
-        "plus",
         "personal",
+        "plus",
         "professional",
         "themegrill agency"
       ],
@@ -201,6 +201,7 @@
       "released_date": "12/01/2026",
       "plan": [
         "personal",
+        "plus",
         "professional",
         "themegrill agency"
       ],

assets/css/admin.css

@@ -1036,6 +1036,21 @@
 				proratedDiscountInput.text(
 					"-" + parseFloat(proratedDiscount).toFixed(2) + currency
 				);
+
+				if (totalDetails.discountAmount > 0) {
+					couponInput.closest(".urm-membership-coupons-value").show();
+
+					couponInput.text(
+						"-" +
+							parseFloat(totalDetails.discountAmount).toFixed(2) +
+							currency
+					);
+				} else {
+					couponInput.closest(".urm-membership-coupons-value").hide();
+				}
+				proratedDiscountInput.text(
+					"-" + parseFloat(proratedDiscount).toFixed(2) + currency
+				);
 			}
 
 			var hasDiscount =

assets/extensions-json/all-features.json

@@ -758,7 +758,7 @@ public static function process_reset_password() {
 			}
 
 			if ( $posted_fields['password_1'] !== $posted_fields['password_2'] ) {
-				$err_msg = apply_filters( 'user_registration_reset_password_error_message', __( 'New password must not be same as old password.', 'user-registration' ) );
+				$err_msg = apply_filters( 'user_registration_reset_password_error_message', __( 'New passwords do not match.', 'user-registration' ) );
 				ur_add_notice( $err_msg, 'error' );
 			}
 

assets/js/frontend/user-registration-recaptcha.min.js

@@ -662,6 +662,23 @@ function ( $item, $key ) {
 					$currency   = empty( $currency ) ? get_option( 'user_registration_payment_currency', 'USD' ) : $currency;
 
 					$amount = $membership['billing_amount'] ?? '';
+					if ( isset( $membership['post_content']['type'] ) && 'subscription' === $membership['post_content']['type'] && isset( $membership['post_content']['amount'] ) ) {
+						$amount = (float) $membership['post_content']['amount'];
+
+						$subscription_last_order = $orders_repository->get_order_by_subscription( $membership['subscription_id'] );
+						if ( ! empty( $subscription_last_order['ID'] ) ) {
+							$tax_order_meta = $orders_repository->get_order_meta_by_order_id_and_meta_key( $subscription_last_order['ID'], 'tax_data' );
+							$tax_data       = ! empty( $tax_order_meta['meta_value'] ) ? json_decode( $tax_order_meta['meta_value'], true ) : array();
+							$tax_rate       = ! empty( $tax_data['tax_rate'] ) ? (float) $tax_data['tax_rate'] : 0;
+							$is_exclusive   = ! empty( $tax_data['tax_calculation_method'] );
+
+							if ( $tax_rate > 0 && $is_exclusive ) {
+								$amount += round( $amount * $tax_rate / 100, 2 );
+							}
+						}
+
+						$amount = number_format( $amount, 2, '.', '' );
+					}
 
 					if ( isset( $membership['post_content']['type'] ) && 'subscription' === $membership['post_content']['type'] ) {
 

assets/js/modules/membership/frontend/user-registration-membership-frontend.js

@@ -1249,12 +1249,6 @@ function ur_load_form_field_class( $class_key ) {
 	$class_path = apply_filters( 'user_registration_form_field_' . $class_key . '_path', $class_path );
 	/* Backward Compat since 1.4.0 */
 	if ( null != $class_path && file_exists( $class_path ) ) {
-		// Validate the resolved path to prevent directory traversal.
-		$real_class_path = realpath( $class_path );
-		$real_base_path  = realpath( UR_FORM_PATH );
-		if ( false === $real_class_path || false === $real_base_path || 0 !== strpos( $real_class_path, $real_base_path . DIRECTORY_SEPARATOR ) ) {
-			return null;
-		}
 		$class_name = 'UR_' . join( '_', array_map( 'ucwords', $exploded_class ) );
 		if ( ! class_exists( $class_name ) ) {
 			include_once $class_path;

includes/class-ur-form-handler.php

@@ -316,6 +316,8 @@ function ur_nav_menu_items( $items ) {
 	if ( ! is_user_logged_in() ) {
 		$customer_logout = get_option( 'user_registration_logout_endpoint', 'user-logout' );
 
+		$customer_logout = trim( $customer_logout, '/' );
+
 		if ( ! empty( $customer_logout ) && is_array( $items ) ) {
 			foreach ( $items as $key => $item ) {
 				if ( empty( $item->url ) ) {