Black Friday: 30% OFF on all plans, applied automatically at checkout View plans
1,220 sites with automatic updates See plans
Log in Cart

UsersWP Social Login Changelog

Every recorded version, newest first, with what changed in each one.

Latest 1.5.11 · Oct 28, 202615 versionsSince Oct 2024

2026 · 6 versions

  1. 1.5.11

    Latest
    1 change
    Changes
    • Social login buttons lost the return URL when it had more than one query arg (the redirect_to was HTML escaped and not encoded), so the login could stall on "Processing, please wait..."; button URLs are now built with every arg encoded - FIXED

  2. 1.5.10

    3 changes
    Changes
    • Social login could authenticate an existing WordPress account using a provider-asserted email address that the provider had not confirmed the user owned, allowing account takeover in some configurations. Email addresses are now only used to resolve an existing account when the provider positively confirms ownership; unconfirmed addresses are routed through account registration/linking instead. - FIXED/SECURITY
    • The cached provider profile is now cleared from the session immediately after a login completes, so a replayed request can no longer reissue an auth cookie without a fresh round trip to the provider. - FIXED/SECURITY
    • LinkedIn (OpenID) login now correctly recognises LinkedIn's verified-email signal instead of always treating the address as unverified. - FIXED

  3. 1.5.9

    1 improvement2 changes
    Improved
    • Update Facebook Meta Graph API version to a latest 26.0 - CHANGED
    Changes
    • Hybridauth library upgraded to v3.13 - CHANGED
    • X (Twitter) login now uses OAuth 2.0 instead of the legacy OAuth 1.0. Replace your API keys with OAuth 2.0 keys. - BREAKING CHANGE

  4. 1.5.8

    1 change
    Changes
    • Registration via social login will assign user role set in user type and assign global option as fallback - CHANGED

  5. 1.5.7

    3 removed1 change
    Removed
    • Remove VKontakte support, We will add it back if anyone has the ability to help us test - CHANGED
    • Remove LinkedIn API V1 support - CHANGED
    • Remove Instagram social login support - CHANGED
    Changes
    • Hybridauth library upgraded to v3.12 - CHANGED

  6. 1.5.6

    1 change
    Changes
    • User type assignment support for social login registration - ADDED

2025 · 4 versions

  1. 1.5.5

    1 improvement
    Improved
    • Update the documentation links for all providers in settings - CHANGED

  2. 1.5.4

    1 change
    Changes
    • Use esc_attr__ instead of esc_attr_e for social login title output - FIXED

  3. 1.5.3

    1 removed2 changes
    Removed
    • Remove authorisation if user email changed - FIXED
    Changes
    • Redirect to account page to get all required data of register form when using social login - ADDED
    • Extensive logging/debugging for troubleshooting - ADDED

  4. 1.5.2

    3 changes
    Changes
    • Hybridauth library upgraded to v3.11.0 - CHANGED
    • Hybridauth library removed VK, manually added back - ADDED
    • LinkedIn API v1 deprecated, Please setup LinkedIn OpenID option to continue use - IMPORTANT

2024 · 1 version

  1. 1.4.0

    1 change
    Changes
    • Login redirect should prompt to choose Google account - CHANGED

Undated · 4 versions

  1. 1.3.27

    1 new
    New
    • New user registration can fail if email IS verified as with Google - FIXED

  2. 1.3.26

    1 improvement
    Improved
    • Update readme file for tested up to version 6.6

  3. 1.3.25

    1 change
    Changes
    • Social Google Returns Blank Screen after authentication - FIXED

  4. 1.3.24

    1 change
    Changes
    • Social login URL was not working in register popup - FIXED

Changelog published by the developer, in their original language.