Release v5.1.13
Userpro – User Profiles With Social Login v5.1.13
Latest versionWhat's new in v5.1.13
Userpro – User Profiles With Social Login v5.1.13 was released on . The ultimate user profiles and community plugin for WordPress. See the full changelog below and compare with the complete version history.
Release details
Released
8.9 MB
File available
Changelog
Other
- Remaining 7 unbounded query locations patched. All 9 originally identified issues now resolved.
- *`functions/memberlist-functions.php` — member directory**
- `:440` Custom-field sort keys were excluded from the `number`/`offset` block, leaving the main directory query unlimited when sorted by a custom field. Fixed: pagination always applied regardless of sort key.
- `:448` Filtered/search result pagination used `number=>10000` to count matching users. Fixed: `WP_User_Query` with `count_total=true`, `fields='ID'`, `number=1`. One COUNT, zero rows.
- *`addons/badges/admin/admin-functions.php` — Badges admin**
- `:83` `userpro_badges_admin_users()` fetched full `WP_User` objects for all users. Fixed: `fields=>['ID','user_login']`, capped at 500 via `userpro_badges_admin_users_limit` filter.
- `:166` "Delete badge from all users" hydrated full `WP_User` objects before the per-user write loop. Fixed: `fields=>'ID'` only.
- *`admin/panels/requests.php` and `addons/requests/admin/panels/settings.php` — User Requests panels**
- Both pending-user count badges (header ` `) now use a single `WP_User_Query` COUNT instead of fetching all pending users. Display lists capped at 200 rows. The `pending_admin` section in `settings.php` already had pagination; `pending` section now bounded.
- *`admin/admin.php`**
Removed
- dead `get_pending_verify_requests_count()` (zero callers; unbounded duplicate of the already-patched function in the requests addon).
Verified safe
Userpro – User Profiles With Social Login v5.1.13 scanned clean with no security threats detected.
View full scan report