10 versions
Starfish Reviews Premium history.
Every release of Starfish Reviews Premium is archived here with its changelog, file size, and security scan result. Use the archive to roll back to a stable release or audit what changed between updates.
10 of 10 releases scanned clean
v3.1.33Latest
October 30, 20266.0 MBScanned
* Fixes:
*Pages with more than one funnel shortcode now work. Only the first funnel responded before: the others showed but their Yes/No answers, destinations and feedback form did nothing. Each funnel now keeps its own feedback record, captcha and settings.
October 28, 20265.9 MBScanned
Other
- Security:
- Testimonial and feedback submissions no longer write names, email addresses, phone numbers or messages to the debug log, and feedback requests are checked before anything is logged.
- Testimonial ratings are limited to 0-5. A very large submitted rating could previously exhaust memory and break the Testimonials admin screen.
- Fixes:
- (Premium) The daily review-profile jobs (scrape, expire and Agency auto-renew) now process every profile. Previously only the first 5 profiles were handled.
- (Premium) A timeout or connection error from the reviews service no longer stops the import with a fatal error, and a failed manual refresh no longer clears the stored review count and rating.
- A testimonial with no rating no longer shows two stars.
Fixed
- a stored cross-site scripting issue: the Refresh and Purge buttons in the Settings log viewer displayed log contents as HTML, so script in a public testimonial submission could run in an administrator's browser. Logs are now shown as plain text.
- a fatal error when logging a failed funnel or collection status update.
October 17, 20265.9 MBScanned
Other
- Fixes:
- Restored Font Awesome on public pages that display a funnel, testimonials or a collection. Since 3.1.26 it was only loaded in wp-admin, so funnels showed the question with no Yes/No (thumbs, faces or circles) answer icons to click, and destination, testimonial and collection icons were blank. It is now loaded only on pages that render Starfish content.
- The free-plan check no longer fails on sites where the word "FREE" is translated.
Fixed
- the WordPress 6.7+ notice "Function _load_textdomain_just_in_time was called incorrectly ... starfish domain was triggered too early". Translations used by the plan title, the "Go Premium!" link and the Freemius opt-in buttons are no longer loaded before WordPress's init hook.
September 22, 20265.9 MBScanned
Other
- Fixes:
- `add_profile()` now inserts using the same table-prefix convention (`$wpdb->prefix`) as every other method in this class, instead of `$wpdb->base_prefix`. These are identical on a single-site install, but differ on any WordPress multisite subsite, where the mismatch would have inserted the profile into the wrong site's table entirely.
- A profile that genuinely fails to save is now reported correctly and immediately, instead of continuing on to also fail the review summary step.
Fixed
- a faulty success check in profile creation that could treat a failed database insert as successful and return a stale, unrelated ID instead of reporting failure. This previously surfaced much later, and misleadingly, as "Failed to update review summary" when adding a profile with "Scrape for Reviews Now?" enabled.
- profile creation reading its new database ID too late. Code that ran immediately afterward (a Freemius license check, scheduling a cron event) could itself write to the database, silently overwriting which ID PHP would read back next -- causing a real, freshly-created profile to be paired with an unrelated ID belonging to a completely different table. That mismatched ID was then used for the review summary, which failed with "Failed to update review summary" once it hit the foreign key check.
v3.1.26Unavailable
September 17, 20265.9 MBScanned
Other
- Fixes:
- Testimonials and Collections carousels no longer fail silently under Bootstrap 5; they now initialize via the Bootstrap 5 Carousel API instead of a jQuery plugin call that Bootstrap 5 no longer provides.
- Front-end pages no longer load Bootstrap and jQuery UI dialog/datepicker/sortable assets unconditionally; those now load only in wp-admin or when a Starfish shortcode is actually present, avoiding conflicts with other plugins/themes that use the same generic class names.
- The review-profiles admin list and job-id lookups no longer render empty on hosts where the database user lacks CREATE VIEW privileges.
- Cron review scraping no longer misclassifies expired profiles as active and logging spurious errors for them nightly.
- Saving a review profile no longer triggers PHP warnings for unchecked checkboxes or empty optional fields.
- Performance:
- The debug log now rotates at 5MB instead of growing unbounded, and routine logging is skipped entirely when logging is disabled in settings.
Fixed
- the review-profile duplicate check, which previously passed the wrong number of arguments to the database query and never detected duplicates.
v3.1.25Unavailable
August 28, 20265.9 MBScanned
Other
- Security:
- Feedback records are no longer published to the REST API, and reviewer contact fields now require administrator access.
- Feedback CSV exports are written to a protected location with an unguessable filename instead of the plugin folder.
- Review avatars fetched from third-party platforms are now validated and downloaded through WordPress' safe HTTP API.
- Adding a review profile now requires administrator rights rather than trusting the browser's Referer header.
- Testimonial submissions can no longer create new categories on the site.
- Corrected three admin menu registrations that used a role name where a capability was required.
- Fixes:
- Deactivating the plugin no longer removes funnels, feedback, collections or database tables. Data removal now happens only on uninstall, and only when enabled in settings.
- Scheduled jobs are now cleared on deactivation regardless of licence state.
- Compatibility:
- jQuery UI is now loaded from WordPress core rather than a bundled copy, for WordPress 7.1 compatibility.
- Tested against WordPress 7.0.4.
- Performance:
- Rewrite rules are no longer regenerated on every admin request.
- Shortcode detection no longer re-renders page content multiple times per request.
- Template rendering now uses a compiled cache instead of recompiling on every view.
- Dashboard counts no longer load every matching post to count them.
Fixed
- unauthenticated exposure of reviewer names, email addresses and phone numbers through the WordPress REST API.
- shortcode detection missing the element id when a page contained other markup first.
v3.1.23Unavailable
July 9, 20265.9 MBScanned
Other
- Fixes:
Fixed
- an issue Unauthenticated Arbitrary Feedback Modification via 'feedback_id'.
v3.1.22Unavailable
June 24, 20265.9 MBScanned
Other
- Fixes:
Fixed
- an issue with the cron-based auto-scrape feature.
v3.1.21Unavailable
June 1, 20265.9 MBScanned
* Fixes:
*Security (AJAX caps + nonces, path traversal, SQL injections), removed FILTER_SANITIZE_STRING, tested WP 7.0
Why archive
Sometimes the latest release isn't the one you need. The archive lets you pin Starfish Reviews Premium to a known-good version, or roll back while a bug is investigated. Every release stays scanned and reachable.