Releases: themegrill/user-registration
Releases · themegrill/user-registration
Release list
v5.2.8
Changelogs for the release of v5.2.8
= 5.2.8 - 10/09/2026 =
* Fix - Stop retrying deleted Stripe subscriptions.
* Fix - Show specific error for existing email/username.
* Fix - Content restriction bypassed via WordPress core REST API.
* Fix - Standardized outbound UTM parameters and invalid campaign keys.
* Fix - Users could be redirected to an outside website after logging in.
* Fix - Membership thank you page exposed another member's account details.
* Fix - Team Membership: scoped Edit Team form nonce to the team being edited.
* Fix - Use timing-safe comparison for email confirmation and approval tokens.
* Fix - Stripe payment could be replayed to renew a membership without paying.
* Fix - Privilege escalation via membership role and open redirect after login.
* Fix - PayPal-paid membership role stayed pending until the member's next login.
* Add - `{{force_logout_url}}` smart tag for Pro's prevent concurrent login email.
* Fix - Expired membership could be renewed by replaying an earlier Stripe payment.
* Fix - Deactivate License button did nothing when pro-activation transient was set.
* Fix - Registration forms not validating publish status or restricting assigned roles.
* Fix - Membership/payment/autologin failed if another plugin hooked registration validation.
* Fix - Membership Renewal Reminder email sent to members who had already cancelled at period end.
v5.2.7
Changelogs for the release of v5.2.7
= 5.2.7 - 11/08/2026 =
* Fix - Payment related issues for tax & others
* Fix - User login after invalid failed payment.
* Fix - Performance issue on flush rewrite rules.
* Fix - Malformed my account URL on Plain permalinks.
* Fix - Both renewal emails sent regardless of setting.
* Fix - Disable emails setting not blocking all emails.
* Fix - Fatal error on registration if form data is null.
* Fix - Default subscriber role added for disabling settings.
* Fix - False success shown when profile update saves nothing.
* Fix - Show emails only when respective settings are enabled.
* Fix - Membership links not translated on multilingual sites.
* Fix - Change Plan/Renew links not using correct language page.
* Fix - Profile Picture removed when saving another user's profile.
* Fix - Added site assistant and admin notice when registration disabled.
* Fix - Hide Payments and Subscriptions menus until relevant data exists.
* Fix - Hide Global Restriction Message setting until a plan or rule exists.
* Fix - Membership field hides radio button for single plan; correct Total for free plans.
* Fix - Hide Renewal Behaviour setting on Membership settings until a membership plan is created.
* Fix - Site Assistant hides membership/payment notices until a plan exists for Advanced Registration users.
v5.2.6
Changelogs for the release of v5.2.6
= 5.2.6 - 22/07/2026 =
* Enhance - Compatibility with divi 5.
* Enhance - Allow 100% discount coupons on memberships.
* Enhance - Redirect hint links to Enable Custom Redirect setting.
* Fix - Local currency bugs.
* Fix - Double Charge on Upgrade.
* Fix - Updated authorize net card design.
* Fix - Remove the payment tabs from admin side.
* Fix - Cancel previous subscription on upgrade.
* Fix - Added spinner on Membership Reactivation.
* Fix - Validation for lost password n Pages Setting.
* Fix - Delete User button not working on member view page.
* Fix - User Registration css loading when elementor active.
* Fix - Prevent privilege escalation in login settings save.
* Fix - Reset password smart tag validation in email content.
* Fix - Checkbox values not appearing when exporting members.
* Fix - Payment Before Login not enforced for pending payments.
* Fix - Can not create new subscription in safari from admin menu.
* Fix - Membership cancellation failures now show a clear message.
* Fix - Field options not displayed when configuring content rules.
* Fix - Content restriction being applied for inactive memberships.
* Fix - Membership field blank in form builder with selected group.
* Fix - Store actual PayPal transaction id instead of subscription id.
* Fix - Stripe registration now displays the configured success message.
* Fix - Conditional Logic on Payments not working for normal registration.
* Fix - Fatal error when saving Stripe plan with yearly billing over 3 years.
* Fix - Upgrade prompt for Plus-gated membership group toggles on lower plans.
* Fix - {{user_ip_address}} smart tag returned empty for IPv6 visitor addresses.
* Fix - Block shortcode injection via smart tags in Content Restriction messages.
* Fix - Stripe membership "Payment Confirmed" email sent before payment completes.
* Fix - Membership emails not using saved custom content for preview and delivery.
* Fix - Local Currency pricing zones not saving when added from the payment settings.
* Fix - Misleading "missing membership field" notice on registration page with no memberships field.
* Fix - Redirects and lost-password/2FA links now use the correct translated page on multilingual sites.
v5.2.5
Changelogs for the release of v5.2.5
= 5.2.5 - 08/07/2026 =
* Enhance - Defer expiry to period end.
* Enhance - Pin Stripe subscription payment method for reliable renewals.
* Fix - User and admin email order.
* Fix - Payment fail case for paypal.
* Fix - Lost Password Carrot adjustment.
* Fix - Unnecessary payment retry checks.
* Fix - Required Nonce Error on registration.
* Fix - Fatal error on WooCommerce shop page.
* Fix - Setup wizard membership duration issue.
* Fix - Loader timing issue during registration.
* Fix - Unwanted settings showing up in free version.
* Fix - Prevent formula injection in user CSV export.
* Fix - Reject underpaid PayPal subscription payments.
* Fix - Harden signup notice against malicious content.
* Fix - Stop users from cancelling others' email changes.
* Fix - Remove unwanted fields from payment confirmed email.
* Fix - Pending subscription blocked the user from logging in.
* Fix - Design issues in promotional notices after WordPress v7.0.
* Fix - Use server membership state for multiple-membership policy.
* Fix - Block tampered PayPal payments from activating memberships.
* Fix - Stripe payment and nonce validation failed on Membership form.
* Fix - Field Visibility add-on hides fields in My Account read-only profiles.
* Fix - Security: prevent unauthorized login during membership signup payment.
* Fix - Check coupon eligibility before discount on public membership purchase.
* Fix - Super admin bypass missing for admin content access in membership rules.
* Fix - Check PayPal payment is complete before activating one-time memberships.
v5.2.4
Changelogs for the release of v5.2.4
= 5.2.4 - 25/06/2026 =
* Enhance - User role overwritten on new membership assignment.
* Enhance - Add customizable membership registration success message in settings.
* Fix - Duplicate variable.
* Fix - Invoice dynamic content not translatable.
* Fix - Missing users in user registration members section.
* Fix - Validation of key while saving the stripe payment settings.
* Fix - My Account payment tab pulling footer content inside the tab area.
* Fix - Address incomplete PayPal setup error when adding PayPal for old user.
* Fix - hCaptcha enabled on registration form blocks users from completing signup.
* Fix - Reset content button not working in the prevent concurrent login email template.
* Fix - New Member Registered email not sent when Admin Approval Request email is enabled.
* Fix - Harden membership coupon apply paths against PHP 8 TypeError (free membership module).
* Fix - File upload attachments not updating correctly when admin edits another user's profile.
* Fix - Registration failure causes missing member records and prevents Stripe payment processing.
v5.2.3
Changelogs for the release of v5.2.3
= 5.2.3 - 23/06/2026 =
* Fix - validation for receiver email and payment amount in PayPal IPN handling.
* Fix - Selected membership tier during registration missed proper validation, allowing assignment of off-form membership tiers.
* Fix - Stripe subscription requests could trigger unintended deletion of pending member accounts due to insufficient authorization validation.
v5.2.2
Changelogs for the release of v5.2.2
= 5.2.2 - 19/06/2026 =
* Dev - Add UR_WPML compatibility service class.
* Fix - Password reset link shows "invalid or expired" error.
* Fix - Membership subscriptions stuck pending on 3D Secure (SCA) cards.
* Fix - Hardcoded database table names causing failures on custom table prefixes.
* Fix - Checkbox visibility issue on WP user profile/edit page caused by CSS conflict.
* Fix - PayPal credentials not detected during registration despite valid saved settings.
* Fix - Password reset link shows invalid or expired on hosts that do not support PHP cookies.
* Fix - Webhook not configured but still can bypass PayPal payments.
* Fix - Payment Method Bypass Allows Free Access to Paid Memberships via Tampered Registration Request.
* Fix - Payment method field during registration could be manipulated to bypass payment for paid memberships.
* Fix - Authenticated users could modify other members' subscriptions by supplying an arbitrary subscription ID during upgrade.
* Fix - Membership tier submitted during registration was not validated against the memberships configured on the form, allowing substitution with an off-form tier.
v5.2.1
Changelogs for the release of v5.2.1
= 5.2.1 - 28/05/2026 =
* Fix - Stripe order validation issue.
* Fix - Membership upgrade action not available after disabling group add-on.
* Fix - Custom emails addon cannot be enabled with plus plan even available in personal.
* Fix - Nav menu items disappear for logged-out users when logout endpoint set to slash.
* Fix - File upload addon shows upgrade to premium prompt despite user having an active plan.
* Fix - Ensure meta_query is initialized before adding payment status condition in user payments query.
v5.2.0
Changelogs for the release of v5.2.0
= 5.2.0 - 20/05/2026 =
* Refactor - Members registration process.
* Refactor - Migrated PayPal integration from PayPal Standard to PayPal APIs.
* Feature - Membership pricing widget for Elementor.
* Enhance - Added new {{urm_bank_details}} smart tags for emails.
* Enhance - Improved Content Restriction compatibility with Object Caching.
* Enhance - Validate payment gateways test api key before updating the settings.
* Enhance - Payment backfill cron for missed payment and subscription updates for PayPal.
* Enhance - Check "Login Methods" setting before validating the provided detail by user while login.
* Dev - Updated Stripe SDK version to 19.4.0.
* Dev - Updated vulnerable packages dependencies.
* Dev - Security audit to identify vulnerabilities and resolve them.
* Fix - Coupon, Tax and Upgrade Conflicts.
* Fix - Hide label not working in Login form.
* Fix - Cookie and error message handling on lost password.
* Fix - Wrong smart tag used in membership expiring soon email.
* Fix - User Export Not Ordered by Date When Using Date Range Filter.
* Fix - Content Restriction message not rendering smart tags properly.
* Fix - Update subscription status handling for manually created orders.
* Fix - Missing or incorrect text-domain for improving translation support.
* Fix - Validate user ownership before deleting profile picture attachments.
* Fix - Properly store Paypal transaction id and subscription id in database.
* Fix - Content Restriction Message Appears in UAE Header and Footer Templates.
* Fix - Update success message icon and cookie settings for pro version activation.
* Fix - Emails not being sent if the registration success state is not broadcasted properly.
* Fix - Stripe Credit card details reset when switching membership plans in registration forms.
* Fix - Members table showing Membership and Subscription status even when membership is not used.
* Fix - Prevented PayPal payment status from being changed from pending to completed without a successful payment.
* Fix - Content restriction only applied to the main content area, leaving page titles and featured images visible in Elementor.
5.1.6
Changelog for the release
= 5.1.6 - 27/04/2026 =
* Enhance - Logger structure.
* Fix - Stripe payment bypass.
* Fix - Admin approval bypass.
* Fix - Hide comments for restricted posts.
* Fix - User created even when payments fails.
* Fix - Open redirect security issue on logout.
* Fix - Fatal error while updating profile details.
* Fix - Registration submitted without card details.
* Fix - Country not displaying in WordPress users menu.
* Fix - HCaptcha loads reCAPTCHA and endless intervals.
* Fix - Payment history page reflects unescaped action parameter value.
* Fix - Duplicate transaction id issue when using 3D secure card in stripe.
* Fix - Export Members causes fatal memory exhaustion on large user datasets.
* Fix - Sanitize OrdersRepository::get_all() query params to prevent SQL injection.
* Fix - File upload data synced to admin profile during user approval or media access.
* Fix - Handle array value from get_user_meta for country field in edit profile template.
* Fix - Cloudflare turnstile error appears on second form submission after validation failure.
* Fix - Stripe card mode validation to prevent test or live card mismatch during registration.
* Fix - Payment stuck on 'Invalid Request' and network error after successful Stripe subscription.