GPLCoffee
GPLCoffee
Get Started
User Registration & Membership Pro icon

7 versions

User Registration & Membership Pro history.

Every release of User Registration & Membership Pro is archived here with its changelog, file size, and security scan result. Use the archive to roll back to a stable release or audit what changed between updates.

7 of 7 releases scanned clean
v6.2.8Latest
September 15, 202617.0 MBScanned
Fixed
  • Standardized Pro upgrade link UTMs.
  • Stored XSS in the Form Analytics user journey table.
  • Hardened form analytics queries with prepared statements.
  • Content restriction bypassed via WordPress core REST API.
  • Team Membership: invited members now receive the plan's role.
  • Team Membership: team leaders could edit teams they don't lead.
  • Standardized outbound UTM parameters and invalid campaign keys.
  • Users could be redirected to an outside website after logging in.
  • Frontend Listing title-save request could rename unrelated posts.
  • Unauthenticated force-logout of any user via ?force-logout= .
  • Membership thank you page exposed another member's account details.
  • Team Membership: scoped Edit Team form nonce to the team being edited.
  • Use timing-safe comparison for email confirmation and approval tokens.
  • Stripe payment could be replayed to renew a membership without paying.
  • Privilege escalation via membership role and open redirect after login.
  • Coupons and Frontend Listing bulk delete triggerable via a crafted link.
  • Coupons AJAX handlers allowed arbitrary post deletion and coupon minting.
  • Tax regions and rates could be deleted without a nonce or permission check.
  • Expired membership could be renewed by replaying an earlier Stripe payment.
  • Deactivate License button did nothing when pro-activation transient was set.
  • Team Membership: plan role now removed when a member leaves or the team ends.
  • Registration forms not validating publish status or restricting assigned roles.
  • SMS OTP could be brute-forced to take over an account; now rate-limited and session-bound.
Added
  • `{{force_logout_url}}` smart tag for Pro's prevent concurrent login email.
v6.2.7
August 13, 202617.0 MBScanned
Fixed
  • Payment related issues for tax & others
  • User login after invalid failed payment.
  • Performance issue on flush rewrite rules.
  • Malformed my account URL on Plain permalinks.
  • Both renewal emails sent regardless of setting.
  • Disable emails setting not blocking all emails.
  • Fatal error on registration if form data is null.
  • Default subscriber role added for disabling settings.
  • False success shown when profile update saves nothing.
  • Show emails only when respective settings are enabled.
  • Membership links not translated on multilingual sites.
  • Change Plan/Renew links not using correct language page.
  • Profile Picture removed when saving another user's profile.
  • Added site assistant and admin notice when registration disabled.
  • Hide Payments and Subscriptions menus until relevant data exists.
  • Hide Global Restriction Message setting until a plan or rule exists.
  • Membership field hides radio button for single plan; correct Total for free plans.
  • Hide Renewal Behaviour setting on Membership settings until a membership plan is created.
  • Site Assistant hides membership/payment notices until a plan exists for Advanced Registration users.
v6.2.6
July 23, 202617.1 MBScanned
Other
  • Enhance - Compatibility with divi 5.
  • Enhance - Allow 100% discount coupons on memberships.
  • Enhance - Redirect hint links to Enable Custom Redirect setting.
Improved
  • Moved Maxmind integration settings to Integration >> Geolocation.
Fixed
  • Local currency bugs.
  • Double Charge on Upgrade.
  • Updated authorize net card design.
  • Remove the payment tabs from admin side.
  • Cancel previous subscription on upgrade.
  • Added spinner on Membership Reactivation.
  • Validation for lost password n Pages Setting.
  • Delete User button not working on member view page.
  • User Registration css loading when elementor active.
  • Prevent privilege escalation in login settings save.
  • Reset password smart tag validation in email content.
  • Checkbox values not appearing when exporting members.
  • Payment Before Login not enforced for pending payments.
  • Can not create new subscription in safari from admin menu.
  • Membership cancellation failures now show a clear message.
  • Field options not displayed when configuring content rules.
  • Content restriction being applied for inactive memberships.
  • Membership field blank in form builder with selected group.
  • Store actual PayPal transaction id instead of subscription id.
  • Stripe registration now displays the configured success message.
  • Conditional Logic on Payments not working for normal registration.
  • Fatal error when saving Stripe plan with yearly billing over 3 years.
  • Upgrade prompt for Plus-gated membership group toggles on lower plans.
  • {{user_ip_address}} smart tag returned empty for IPv6 visitor addresses.
  • Block shortcode injection via smart tags in Content Restriction messages.
  • Stripe membership "Payment Confirmed" email sent before payment completes.
  • Membership emails not using saved custom content for preview and delivery.
  • Local Currency pricing zones not saving when added from the payment settings.
  • Misleading "missing membership field" notice on registration page with no memberships field.
  • Redirects and lost-password/2FA links now use the correct translated page on multilingual sites.
v6.2.4Unavailable
June 26, 202617.0 MBScanned
Other
  • Enhance - User role overwritten on new membership assignment.
  • Enhance - Add customizable membership registration success message in settings.
Fixed
  • Duplicate variable.
  • Pdf dynamic content not translatable.
  • Coupon addon compatibility with PHP 8+.
  • Auto-delete users feature not deleting users.
  • Missing users in user registration members section.
  • Security Audit for User registration and its addons.
  • Validation of key while saving the stripe payment settings.
  • Design inconsistencies in content restriction block settings.
  • My Account payment tab pulling footer content inside the tab area.
  • Smart tags not working in payment invoice download from account page.
  • Address incomplete PayPal setup error when adding PayPal for old user.
  • hCaptcha enabled on registration form blocks users from completing signup.
  • Reset content button not working in the prevent concurrent login email template.
  • New Member Registered email not sent when Admin Approval Request email is enabled.
  • Harden membership coupon apply paths against PHP 8 TypeError (free membership module).
  • File upload attachments not updating correctly when admin edits another user's profile.
  • Registration failure causes missing member records and prevents Stripe payment processing.
v6.2.3Unavailable
June 24, 202617.0 MBScanned
Fixed
  • validation for receiver email and payment amount in PayPal IPN handling.
  • Selected membership tier during registration missed proper validation, allowing assignment of off-form membership tiers.
  • Stripe subscription requests could trigger unintended deletion of pending member accounts due to insufficient authorization validation.
v6.2.2Unavailable
June 20, 202617.0 MBScanned
Other
  • Dev - Add UR_WPML compatibility service class.
Fixed
  • Password reset link shows "invalid or expired" error.
  • Membership subscriptions stuck pending on 3D Secure (SCA) cards.
  • Hardcoded database table names causing failures on custom table prefixes.
  • Checkbox visibility issue on WP user profile/edit page caused by CSS conflict.
  • PayPal credentials not detected during registration despite valid saved settings.
  • Password reset link shows invalid or expired on hosts that do not support PHP cookies.
  • Webhook not configured but still can bypass PayPal payments.
  • Payment Method Bypass Allows Free Access to Paid Memberships via Tampered Registration Request.
  • Payment method field during registration could be manipulated to bypass payment for paid memberships.
  • Authenticated users could modify other members' subscriptions by supplying an arbitrary subscription ID during upgrade.
  • Membership tier submitted during registration was not validated against the memberships configured on the form, allowing substitution with an off-form tier.
v6.2.1Unavailable
May 29, 202617.0 MBScanned
Fixed
  • Stripe order validation issue.
  • Membership upgrade action not available after disabling group add-on.
  • Shortcodes not rendering properly in content restriction block message.
  • Custom emails addon cannot be enabled with plus plan even available in personal.
  • Nav menu items disappear for logged-out users when logout endpoint set to slash.
  • File upload addon shows upgrade to premium prompt despite user having an active plan.
  • Ensure meta_query is initialized before adding payment status condition in user payments query.

Why archive

Sometimes the latest release isn't the one you need. The archive lets you pin User Registration & Membership Pro to a known-good version, or roll back while a bug is investigated. Every release stays scanned and reachable.