GPLCoffee
GPLCoffee
Get Started
WP Extended Pro icon

7 versions

WP Extended Pro history.

Every release of WP Extended Pro is archived here with its changelog, file size, and security scan result. Use the archive to roll back to a stable release or audit what changed between updates.

7 of 7 releases scanned clean
v3.3.0Latest
September 10, 20261.5 MBScanned
Added
  • Admin: Every module's settings now live under a single "WP Extended" screen, and moving between them no longer reloads the page.
  • Translations: Now ships in German, Spanish, French, Dutch, Brazilian Portuguese and European Portuguese.
  • Code Snippets: Added a Safe Mode switch to the editor, so you can turn every snippet off from the interface instead of by editing a URL.
Improved
  • Limit Login Attempts: Added an option to trust a proxy header when detecting a visitor's IP address, for sites behind Cloudflare or a load balancer.
  • Global: Updated module documentation links to our new documentation URLs.
  • Menu Editor: A role granted a page now receives that page's capability only while WordPress is serving that page, not for the rest of the admin session. A delegated page that saves over the REST API or AJAX renders read-only.
  • Global: Now requires a minimum of PHP 8.1.
Fixed
  • Menu Editor: Fixed an issue where granting a role access to a page handed that role the page's capability everywhere in the admin, which could turn an Editor into a full administrator.
  • Menu Editor: Fixed an issue where role restrictions had no effect on plugin pages, and where a denied page could still be reached through its object-edit URL.
  • Menu Editor: Fixed an issue where saving without making a change reshuffled the admin menu.
  • Media Replace: Fixed an issue where an Author could delete another user's attachments through the REST endpoint.
  • Admin Columns: Fixed an issue where a custom meta column did not escape its value.
  • Rollback Manager: Fixed an issue where version lists were fetched over an insecure connection.
  • SVG Upload: Fixed an issue where the sanitiser could be bypassed by certain attributes and animation elements.
  • Code Snippets: Fixed an issue where a snippet description could inject PHP into the generated file.
  • Code Snippets: Fixed an issue where a snippet pasted with its own opening PHP tag could take the site down, and where updating, enabling and deleting failed on hosts that block PUT and DELETE requests.
  • Admin Customiser: Fixed an issue where colour settings were not escaped on the login page.
  • Limit Login Attempts: Fixed an issue where a spoofed IP address could bypass the lockout, or lock out every visitor behind a proxy.
  • Limit Login Attempts: Fixed an issue where diagnostic REST routes were registered in production builds.
  • Limit Login Attempts: Restored the unblock action, and fixed sorting and the status column.
  • Settings: Fixed an issue where imported settings were saved without being sanitised or validated.
  • Export Posts / Export Users / SMTP Email: Fixed an issue where CSV exports were not escaped against spreadsheet formula injection.
  • Export Posts / Export Users: Fixed an issue where meta field exports returned blank values [Pro].
  • User Switching: Fixed an issue where a favourited user's display name was not escaped in the admin bar.
  • Folder Manager: Fixed an issue where a bulk move to a folder did not check permissions for each post.
  • Folder Manager: Fixed an issue where a post duplicated from inside a folder was dropped out of it, and where sort links and status views kept the folder you had just left.
  • User Enumeration: Fixed an issue where author requests were not blocked.
  • Hide Author Slugs: Fixed an issue where author slugs were encrypted with a weak key.
  • Hide Author Slugs: Fixed an issue where the Users screen crashed with a type error.
  • Custom Login URL: Fixed an issue where the disabled-login message was not escaped and returned the wrong status code.
  • Notices: Fixed an issue where notices could be read without logging in, and dismissed by any subscriber.
  • Post ID Display: Fixed an issue where the module crashed when no post types were selected.
  • Hide Admin Notices: Fixed an issue where the module crashed when nothing was selected for update notifications, and where update notices were not suppressed.
  • Duplicate Posts & Pages: Fixed an issue where the module required Pro. It is free again, with its settings remaining Pro.
  • Duplicate Post: Fixed an issue where duplicating an untitled post with content deselected returned an error instead of a clear message, and where editor scripts loaded on the Widgets screen.
  • SMTP Email: Fixed an issue where a duplicate charset in the Content-Type header corrupted accented characters in some mail clients, and where the Download Logs button did nothing.
  • WP-CLI: Fixed an issue where enabling a module that was already enabled turned it off.
  • Post Type Switcher: Fixed an issue where every dropdown option was duplicated.
  • Post Type Order: Fixed an issue where duplicate ordering was not always detected.
  • Quick Add Post: Fixed an issue where the post-type restriction had no effect.
  • Clean Profiles: Fixed an issue where the module did not hide anything.
  • Fixed:
v3.2.7
June 22, 2026798.6 KBScanned
Added
  • Public Preview Links (new Pro module): Generate publicly accessible preview links for draft, pending, scheduled, and private posts so reviewers can view unpublished content without logging in. Native block editor and classic editor integration, with expiring tokens, one-click copy, and revoke.
  • Custom User Avatar (new module): Upload a custom profile picture from the WordPress profile screen, with live preview and one-click revert to Gravatar. Applies site-wide.
  • Admin Customiser: New "Item Hover Background Colour" setting for admin bar items.
Improved
  • Admin Customiser: Now defers to each user's WordPress admin colour scheme — custom colours only apply where explicitly set.
  • Admin Customiser: Unified colour field labels across the Admin Bar and Sidebar tabs.
  • Licensing: Migrated to FluentCart. Existing licences keep working with no action needed.
Fixed
  • Duplicate Post: "Duplicate" button disappearing in the block editor or failing to identify the post in the classic editor.
  • Quick Add Post: "New" button vanishing from the block editor toolbar after editor changes.
  • Admin Customiser: Sidebar menu flashing the default colour on hover.
  • Maintenance Mode: Default body text mismatch between the settings screen and the live page.
v3.2.6
April 30, 2026774.4 KBScanned
Added
  • SMTP Email: Third-party email provider integrations — Brevo, SendGrid, Postmark, SparkPost, Emailit, and ToSend as alternatives to raw SMTP credentials.
  • SMTP Email: API key verification button with real connection test.
  • Maintenance Mode: One-click toggle from the admin bar for users with permission.
  • Maintenance Mode: Role-based toggle permissions — configure which roles can toggle maintenance mode from the admin bar [Pro].
Improved
  • SMTP Email: Improved email logs with auto-refresh, status badges, and error tooltips on failed sends.
Fixed
  • Debug Mode: Persistent admin notice remaining visible after disabling the module [Pro].
  • User Last Login: Last Login column not rendering values in the users list table.
  • Folder Manager: "Could not move to folder" error when changing folder assignment from the block editor sidebar.
  • Rollback Manager: Fatal error (ArgumentCountError) crashing the Themes screen on multisite due to incorrect theme_action_links filter signature.
  • Global: Uninstall cleanup flow — plugin data is now only removed on uninstall (not deactivation) when the remove_plugin_data setting is enabled.
  • SMTP Email: Download Logs button not triggering CSV export [Pro].
Other
  • Security: SMTP Email: Restricted email log CSV export to administrators [Pro].
v3.2.5Unavailable
March 29, 2026749.3 KBScanned
* Security: Fixed privilege escalation vulnerability in Menu Editor module. * Security: Restricted disk usage widget to administrators only. * Security: Removed blanket capability grants on dashboard/profile requests.
v3.2.4Unavailable
March 7, 2026748.5 KBScanned
Added
  • Folder Manager: Folder panel support in media library popup/modal.
  • Folder Manager: Refresh functionality and internationalization support.
  • Duplicate Post: Element selection filters and per-duplication modal for choosing which elements to duplicate [Pro].
Improved
  • Duplicate Post: Enhanced code structure and UI elements.
  • Folder Manager: Styling and UX improvements.
Fixed
  • Menu Editor: Replaced persistent capability changes with in-memory filtering to prevent database capability pollution.
  • Menu Editor: Virtual capabilities now correctly granted for role-based menu access.
  • Menu Editor: Per-user deny rules now respected in role-based capability grants.
  • SMTP Email: PHPMailer state not clearing between wp_mail() calls causing recipient accumulation.
  • Disable XML-RPC: Refined XML-RPC request handling.
  • Disable Blog: Redirect conflict with SureCart and similar plugins.
  • Quick Add Post: Button insertion timing and selector updates.
v3.2.3Unavailable
December 24, 2025739.1 KBScanned
Added
  • Folder Manager: Bulk actions for moving multiple items at once.
  • Folder Manager: Off canvas sidebar on smaller screens for mobile responsiveness.
  • Global: WordPress 6.9 Support.
Improved
  • Admin Customiser: HTML support to admin footer text field.
Fixed
  • Admin Customiser: Sidebar icon misaligned.
  • Admin Customiser: Issue with certain icons in settings not loading due to blocked PHP config setting.
  • SMTP Email: Bug introduced with WordPress 6.9 with sending from certain WordPress configurations.
  • Duplicate Posts: Post redirect default value.
  • Code Snippets: Certain whitespace characters in snippets not running and crashing.
  • Global: Licensing not activating for certain websites.
v3.2.2Unavailable
December 24, 2025735.4 KBScanned
Added
  • Folder Manager: Organize posts and media into folders with drag-and-drop functionality.
  • SVG Upload: Support to restrict to specific user roles
Improved
  • Menu Editor: Collapse child menu items for easier drag and drop experience
Fixed
  • Menu Editor: Some child menu items being appended to top level menu
  • SVG Upload: Issue with certain SVG's not being uploaded
  • Quick Search: Docs link
  • Admin Customiser: Sidebar icons not hiding when option enabled.
  • Admin Customiser: Remember me option not applying
  • Admin Customiser: Custom Message not displaying on login page
  • SMTP Module: Encoding issue with certain special characters
  • User Last Login: Added default format fallback when not set specifically

Why archive

Sometimes the latest release isn't the one you need. The archive lets you pin WP Extended Pro to a known-good version, or roll back while a bug is investigated. Every release stays scanned and reachable.