Release v2.11.2
Ultimate Member v2.11.2
What's new in v2.11.2
Ultimate Member v2.11.2 was released on . The easiest way to create powerful online communities and beautiful user profiles with WordPress. See the full changelog below and compare with the complete version history.
Release details
Released
3.6 MB
File unavailable
Changelog
Other
- *Enhancements**
- *Bugfixes**
- *Templates Requiring Update**
- members.php
- searchform.php
- *Note: Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after the upgrade**
Added
- Server-side validation when the Search Form is submitted.
- Action hook `um_approve_user_on_email_confirmation` to natively approve the user after validating the email activation link.
- JS filter wp.hook `um_member_directory_popstate_ignore` to stop window.pushSate in the member directory for 3rd-party integrations.
Fixed
- Security issue, CVE ID: CVE-2025-15064. Deprecated the ability to use HTML inside the user description. It's still allowed to use only predefined 'user_description' tags in `wp_kses()`.
- Security issue, CVE ID: CVE-2026-1404. Modified template item formatting to avoid using HTML characters in the filter values.
- Profile photo dropdown menu position for screens smaller than 340px.
- Display of the saved value of the "Privacy Options" > "Allowed roles" setting for the member directory.
- Information in Site-Health about the registration form's `Template` and `Role` settings.
- Information in Site-Health about the login and profile form's `Template` settings.
Compatibility
- Requires WordPress
- 6.2
- Tested up to
- 7.0
- Requires PHP
- 7.0
Verified safe
Ultimate Member v2.11.2 scanned clean with no security threats detected.
View full scan report