Every recorded version, newest first, with what changed in each one.
Latest 1.2.81· Nov 3, 202615 versionsSince Jun 2026
2026 · 15 versions
1.2.81
Latest
1 change
Changes
Sanitizing user badge output to prevent stored XSS - FIXED/SECURITY
1.2.80
1 improvement
Improved
Update AUI 0.2.59 - CHANGED
1.2.79
1 change
Changes
Dummy test users could be logged into using a public hash - FIXED/SECURITY
1.2.78
1 improvement4 changes
Improved
Update AUI 0.2.58 and SD 1.2.38 - CHANGED
Changes
A redirect_to with more than one query arg lost everything after the first on log in, log out, register and lost password links - FIXED
AJAX log in and register could redirect to another site through redirect_to; the redirect is now limited to allowed hosts, as for normal log in - FIXED/SECURITY
Setup wizard checkboxes buttons look unchecked on WordPress 7.0+ even when checked - FIXED
WP 2FA email verification code not sent and login button keeps spinning in login lightbox - FIXED
1.2.77
1 change
Changes
Fatal error during login 2FA on invalid code with themes that hook wp_login_failed - FIXED
1.2.76
1 change
Changes
Arbitrary File Deletion via avatar/banner image crop - FIXED/SECURITY
1.2.75
1 improvement1 change
Improved
Update AUI 0.2.56 and SD 1.2.37 - CHANGED
Changes
Login via modal/AJAX shows no error message when the account is not yet activated - FIXED
1.2.74
1 improvement
Improved
Update AUI 0.2.54 and SD 1.2.36 - CHANGED
1.2.73
2 changes
Changes
Privacy tab settings on the Account page now reflect immediately after saving, without needing to flush the object cache. - FIXED
Support for Wordfence 2FA in login form - ADDED
1.2.72
1 change
Changes
Merge AUI 0.2.52 & SD 1.2.35 - CHANGED
1.2.71
1 change
Changes
Arbitrary File Deletion via upload_file_remove AJAX handler - FIXED/SECURITY