Release v2.13.1
Ultimate Member v2.13.1
What's new in v2.13.1
Ultimate Member v2.13.1 was released on . The easiest way to create powerful online communities and beautiful user profiles with WordPress. See the full changelog below and compare with the complete version history.
Release details
Released
3.7 MB
File available
Changelog
Other
- *Enhancements**
- *Bugfixes**
- *Deprecated**
Added
- Fallback for `wp-cli/wp-config-transformer` library if the wp-config.php file isn't writable.
- Filter hook `um_members_directory_filter_text` 3rd parameter `$is_default` to check if it's admin filtering or frontend query.
- 'Administrative capabilities ban' option enabled by default after the first installation.
Improved
- Slow SQL query for batch empty account status check.
- Redundant SQL calls when editing the Profile page with callback dropdowns. Cached usermeta existence checks per user and key during a single load (Reported by @MissVeronica, author @faisalahammad).
Fixed
- Security issue related to an unauthenticated visitor can store JavaScript that runs in an administrator's session, through their own profile name. (Reported by Karthik Ramakrishnan and WPScan team). Fixed `um_convert_tags()` function and applied the escapers throughout the placeholder replacement.
- Using LIKE compare for the text-type filters with custom usermeta table (Reported by @MissVeronica, author @faisalahammad).
- "Can user edit this field?" field setting displaying only for the User Profile form fields.
- Getting the pages list in the wp-admin UM > Settings > General > Pages section.
- Displaying the field-type time on the User Profile page.
- Using `illegal_user_logins` for the current admin user with the username specified in the illegal user logins list.
Removed
- Filter hook `um_members_directory_filter_text_meta_value` is fully deprecated, replacement isn't required for the text-type filter field.
Compatibility
- Requires WordPress
- 6.2
- Tested up to
- 7.1
- Requires PHP
- 7.0
Verified safe
Ultimate Member v2.13.1 scanned clean with no security threats detected.
View full scan report