Black Friday: 30% OFF on all plans, applied automatically at checkout View plans
Log in Cart

UsersWP Changelog

Every recorded version, newest first, with what changed in each one.

Latest 1.2.81 · Nov 3, 202615 versionsSince Jun 2026

2026 · 15 versions

  1. 1.2.81

    Latest
    1 change
    Changes
    • Sanitizing user badge output to prevent stored XSS - FIXED/SECURITY
  2. 1.2.80

    1 improvement
    Improved
    • Update AUI 0.2.59 - CHANGED
  3. 1.2.79

    1 change
    Changes
    • Dummy test users could be logged into using a public hash - FIXED/SECURITY
  4. 1.2.78

    1 improvement4 changes
    Improved
    • Update AUI 0.2.58 and SD 1.2.38 - CHANGED
    Changes
    • A redirect_to with more than one query arg lost everything after the first on log in, log out, register and lost password links - FIXED
    • AJAX log in and register could redirect to another site through redirect_to; the redirect is now limited to allowed hosts, as for normal log in - FIXED/SECURITY
    • Setup wizard checkboxes buttons look unchecked on WordPress 7.0+ even when checked - FIXED
    • WP 2FA email verification code not sent and login button keeps spinning in login lightbox - FIXED
  5. 1.2.77

    1 change
    Changes
    • Fatal error during login 2FA on invalid code with themes that hook wp_login_failed - FIXED
  6. 1.2.76

    1 change
    Changes
    • Arbitrary File Deletion via avatar/banner image crop - FIXED/SECURITY
  7. 1.2.75

    1 improvement1 change
    Improved
    • Update AUI 0.2.56 and SD 1.2.37 - CHANGED
    Changes
    • Login via modal/AJAX shows no error message when the account is not yet activated - FIXED
  8. 1.2.74

    1 improvement
    Improved
    • Update AUI 0.2.54 and SD 1.2.36 - CHANGED
  9. 1.2.73

    2 changes
    Changes
    • Privacy tab settings on the Account page now reflect immediately after saving, without needing to flush the object cache. - FIXED
    • Support for Wordfence 2FA in login form - ADDED
  10. 1.2.72

    1 change
    Changes
    • Merge AUI 0.2.52 & SD 1.2.35 - CHANGED
  11. 1.2.71

    1 change
    Changes
    • Arbitrary File Deletion via upload_file_remove AJAX handler - FIXED/SECURITY
  12. 1.2.70

    2 changes
    Changes
    • Badge Widget Variable Substitution - FIXED/SECURITY
    • Merge AUI 0.2.51 & SD 1.2.34 - CHANGED
  13. 1.2.69

    1 change
    Changes
    • Allow username or email on the forgot Password form - FIXED
  14. 1.2.68

    1 change
    Changes
    • Login button text was blank for non-bootstrap design - FIXED
  15. 1.2.67

    2 changes
    Changes
    • WP2FA compatibility in login lightbox - FIXED
    • Missing WP 2FA provider bypassed login - FIXED

Changelog published by the developer, in their original language.