Commit Graph

631 Commits

Author SHA1 Message Date
Mykyta Synelnikov 2e90965a92 Bump Ultimate Member to version 2.10.6-alpha
Bump version across plugin files and update references to reflect the new official release, 2.10.6. This ensures consistency in documentation and downloadable resources.
2025-06-25 13:39:37 +03:00
Mykyta Synelnikov ff55ea2a59 Update changelog and readme with new fixes and enhancements
Added filter hooks for button classes and tweaked Site Health data logic for better 3rd-party integration. Fixed shortcode handling, email placeholder issues, and corrected naming inconsistencies like "North Macedonia."
2025-06-24 17:30:12 +03:00
Mykyta Synelnikov 57141c994f Updated changelog.txt
Minified scripts
2025-06-23 13:34:57 +03:00
Mykyta Synelnikov 8f34bbb4fa Update changelog and readme for version 2.10.5 release
Document enhancements, bug fixes, and template update for v2.10.5, including new filter hooks, email placeholder fixes, and Action Scheduler updates. Highlight required cache flush and asset regeneration post-update.
2025-06-19 12:41:32 +03:00
Mykyta Synelnikov 8d83489996 Update to version 2.10.5 and upgrade Action Scheduler
Bump plugin version to 2.10.5 and update stable tag in readme. Upgraded Action Scheduler dependency to version 3.9.2 to address library errors. Added filter hooks for primary button classes and improved deactivation logic for better scheduling handling.
2025-06-05 16:13:47 +03:00
Mykyta Synelnikov 9f96170920 Refactor deactivation logic in Ultimate Member plugin
Updated the deactivation process to properly un-schedule Action Scheduler actions, ensuring cleaner plugin behavior and preventing potential issues with lingering tasks. This change improves overall maintainability and stability.
2025-05-19 16:28:13 +03:00
Mykyta Synelnikov da0ebf2f1f Bump plugin to version 2.10.5 2025-05-19 16:24:13 +03:00
Mykyta Synelnikov d54a4117be Fix critical security issue and resolve multiple bugs
Addressed CVE-2025-47691 by updating the dynamic blacklist logic using WordPress functions. Fixed bugs related to Action Scheduler, password reset functionality, and email change settings for user accounts, ensuring better role compatibility. Updated version to 2.10.4.
2025-05-15 01:23:28 +03:00
Mykyta Synelnikov 6a134e881e Merge pull request #1691 from ultimatemember/security/CVE-2025-47691
Updates dynamic function blacklist for security enhancement
2025-05-15 01:09:52 +03:00
Mykyta Synelnikov 309a374a30 Refactor form request checks to simplify and optimize logic
Simplified conditional checks for password and account form submissions by replacing `isset` with `!empty` where applicable. This improves readability and reduces redundancy while maintaining functionality and security. Added comments to clarify nonce verification status.
2025-05-12 15:41:11 +03:00
Mykyta Synelnikov 9d83fba560 Update dynamic function blacklist for security enhancement
Added a mechanism to dynamically retrieve and merge updated WordPress function lists into the blacklist to prevent unsafe usage in dropdown options. Addresses a security issue (CVE-2025-47691) by using a JSON-based function source tied to WordPress versioning.
2025-05-12 13:16:17 +03:00
Mykyta Synelnikov 5de4986d2e Update to version 2.10.4 with bug fixes and improved user handling
This update fixes issues related to handling empty user statuses, ensuring proper account status checks and admin notice resets. It also updates plugin assets, documentation, and test scripts to reflect the new version (2.10.4). Additional improvements include enhanced error logging for more reliable diagnostics.
2025-04-30 13:04:55 +03:00
Mykyta Synelnikov c6859072a0 Update to version 2.10.3 with enhancements and bug fixes
Added new settings for registration management and improved Action Scheduler flexibility. Resolved issues with Member Directory styling, filtering, and email placeholders. Updated terminology and documentation; ensure cached assets are refreshed post-update.
2025-04-23 16:05:34 +03:00
Mykyta Synelnikov 4cb1a2a2e2 Add new user role setting and tweak admin email notifications
Introduced a setting to bypass "User Role > Registration Options" for auto-approving users created via wp-admin. Also adjusted admin email notifications to prevent alerts for user registrations made through wp-admin.
2025-04-14 16:19:06 +03:00
Mykyta Synelnikov 287aeb12e8 Update Ultimate Member plugin to version 2.10.3
Bump stable version and update tested WordPress compatibility. Includes Action Scheduler refactor, bug fixes for Member Directory styles and filtering, and a PHP Warning fix. Cached assets should be regenerated after updating.
2025-04-14 15:30:02 +03:00
Mykyta Synelnikov f013118830 Update Ultimate Member plugin to version 2.10.3
Bump version references across the plugin files from 2.10.2 to 2.10.3. This includes updates to documentation, changelog placeholders, and blueprint download URLs to ensure consistency and preparation for the new release.
2025-04-03 12:28:28 +03:00
Mykyta Synelnikov f346020d31 Update Ultimate Member plugin to version 2.10.2
This release addresses a critical security vulnerability (CVE-2025-1702) by improving query handling with `$wpdb->prepare()`. It also introduces new filesystem utility methods (`maybe_init_wp_filesystem`, `remove_dir`) and updates documentation accordingly. Users are strongly advised to update immediately.
2025-04-02 01:38:16 +03:00
Mykyta Synelnikov 2fda1c090f Updated readme.txt 2025-02-28 14:35:17 +02:00
Mykyta Synelnikov bb4117eea4 Update to version 2.10.1 with critical security fixes
This release addresses a security vulnerability (CVE-2025-1702) and includes several bugfixes, such as honeypot script handling and activation link behavior. Users must flush cached assets (JS/CSS) after upgrading to ensure proper functionality. Upgrade immediately for improved security and stability.
2025-02-28 14:31:58 +02:00
Mykyta Synelnikov 14a6b6e887 Update plugin release date in changelog and readme files
Corrected the release date for version 2.10.0 from February 17, 2025, to February 18, 2025, in both the changelog and readme files. No functional changes were made to the plugin.
2025-02-18 17:27:17 +02:00
Mykyta Synelnikov dfabe84f85 Update Ultimate Member to version 2.10.0. 2025-02-13 12:09:05 +02:00
Mykyta Synelnikov 0c183594b1 Update Ultimate Member to version 2.10.0
Bump plugin version to 2.10.0, update documentation, and adjust URLs and metadata accordingly. This release includes increased minimum PHP and WordPress requirements and addresses security-related issues. Users are strongly advised to update immediately.
2025-02-13 11:28:28 +02:00
Mykyta Synelnikov 3ada6c71d9 Update PHP requirement and improve user action handling
Raised minimum PHP version to 7.0 and finalized the plugin version to 2.9.3. Introduced a centralized user actions array and replaced 'manage_options' capability with 'edit_users' for better permission handling. Optimized the nonce actions extension method for cleaner code.

* reviewed #1619
2025-02-12 18:25:26 +02:00
Mykyta Synelnikov 4adbe19cbe * fixed CVE-2024-12276;
* reviewed using $wpdb and WPCS;
* set minimum required version to 6.2 due to using %i for $wpdb->prepare;
2025-02-03 16:17:37 +02:00
Mykyta Synelnikov 6aab8152f8 * bump version; 2025-01-14 17:21:26 +02:00
Mykyta Synelnikov 5b2c785def * prepared to the release 2025-01-14 15:28:28 +02:00
Mykyta Synelnikov f7b3585b1a * prepared to the release 2025-01-14 15:24:45 +02:00
Mykyta Synelnikov 27aeef42af * prepared to the release 2025-01-14 15:24:03 +02:00
Mykyta Synelnikov b41ac2bb96 * uncommented Zapier extension; 2024-12-16 12:35:32 +02:00
Mykyta Synelnikov 711be1f811 * pre-release 2024-12-02 22:14:11 +02:00
Mykyta Synelnikov 700be6bbe0 * bump version; 2024-11-19 18:05:38 +02:00
Mykyta Synelnikov 902bb7ed3c * release preparations; 2024-11-15 02:49:55 +02:00
Mykyta Synelnikov 6201d1c342 * release preparations; 2024-11-15 02:08:10 +02:00
Mykyta Synelnikov 2086ddb53f * added um_image_upload_validation hook for 3rd-party validation during upload images; 2024-11-15 02:06:03 +02:00
Mykyta Synelnikov daa3ba87ef * fixed #1583; 2024-11-14 01:08:30 +02:00
Mykyta Synelnikov b4becdbcf5 * reviewed #1582; 2024-11-13 17:20:52 +02:00
Mykyta Synelnikov 2679f4744b * updated readme.txt 2024-11-13 00:42:07 +02:00
Mykyta Synelnikov 9c0dd00d34 * updated version 2024-11-11 19:29:01 +02:00
Mykyta Synelnikov 4564175527 * release preparations; 2024-11-11 14:22:35 +02:00
Mykyta Synelnikov 5b55eefa5c * release preparations; 2024-11-06 13:46:49 +02:00
Mykyta Synelnikov 22f503f733 * release preparations; 2024-11-06 13:36:50 +02:00
Mykyta Synelnikov cce0dbdc27 * fixed compatibility with WP6.7; 2024-11-05 12:28:51 +02:00
Mykyta Synelnikov 4b2fbe525d * Fixed: User status filter on wp-admin > Users on mobile devices; 2024-10-15 22:06:55 +03:00
Mykyta Synelnikov acef080e9b * update changelog; 2024-10-14 17:23:16 +03:00
Mykyta Synelnikov 1fd1ed425b * updated version; 2024-10-14 15:05:33 +03:00
Mykyta Synelnikov 64c6a92560 * update changelog; 2024-10-14 13:05:42 +03:00
Mykyta Synelnikov 07949b9c35 * fixed HTML formatted textarea; 2024-10-10 11:56:55 +03:00
Mykyta Synelnikov d6a23cc5f4 * updated changelog; 2024-10-04 11:45:57 +03:00
Mykyta Synelnikov c89e8a6820 * updated changelog.txt, readme.txt; 2024-10-03 15:04:14 +03:00
Mykyta Synelnikov f79f2a7d2b * updated version; 2024-10-02 14:22:38 +03:00