| @@ -2,10 +2,10 @@ | ||
| 2 | 2 | Contributors: stiofansisland, paoltaia, ayecode, ismiaini |
| 3 | 3 | Donate link: https://www.ko-fi.com/stiofan |
| 4 | 4 | Tags: login form, registration, registration form, user profile, user registration, members, membership |
| 5 | 5 | Requires at least: 6.1 |
| 6 | -Tested up to: 7.0 | |
| 7 | -Stable tag: 1.2.63 | |
| 6 | +Tested up to: 7.1 | |
| 7 | +Stable tag: 1.2.77 | |
| 8 | 8 | License: GPLv3 |
| 9 | 9 | License URI: http://www.gnu.org/licenses/gpl-3.0.html |
| 10 | 10 | |
| 11 | 11 | Light weight Front-end login form, User Registration, User Profile and Members Directory plugin. |
| @@ -105,18 +105,20 @@ | ||
| 105 | 105 | Should you find any bug, please report it in the [support forum](https://userswp.io/support/) and we will fix it asap! |
| 106 | 106 | |
| 107 | 107 | UsersWP is 100% translatable. |
| 108 | 108 | |
| 109 | +== Security == | |
| 110 | + | |
| 111 | +To report a security vulnerability, please review our [vulnerability disclosure policy](https://ayecode.io/vulnerability-disclosure-policy/). | |
| 112 | + | |
| 109 | 113 | == Installation == |
| 110 | 114 | |
| 111 | 115 | = Minimum Requirements = |
| 112 | 116 | |
| 113 | -* WordPress 5.0 or greater | |
| 117 | +* WordPress 6.1 or greater | |
| 118 | +* PHP version 7.2 or greater | |
| 119 | +* MySQL version 8.0 or greater | |
| 114 | 120 | |
| 115 | -* PHP version 5.6 or greater | |
| 116 | - | |
| 117 | -* MySQL version 5.0 or greater | |
| 118 | - | |
| 119 | 121 | = Automatic installation = |
| 120 | 122 | |
| 121 | 123 | Automatic installation is the easiest option. To do an automatic install of UsersWP, log in to your WordPress dashboard, navigate to the Plugins menu and click Add New. |
| 122 | 124 | |
| @@ -157,8 +159,59 @@ | ||
| 157 | 159 | 5. Login Form. |
| 158 | 160 | 6. Edit Account Form. |
| 159 | 161 | |
| 160 | 162 | == Changelog == |
| 163 | + | |
| 164 | += 1.2.77 - 2026-10-07 = | |
| 165 | +* Fatal error during login 2FA on invalid code with themes that hook wp_login_failed - FIXED | |
| 166 | + | |
| 167 | += 1.2.76 - 2026-09-30 = | |
| 168 | +* Arbitrary File Deletion via avatar/banner image crop - FIXED/SECURITY | |
| 169 | + | |
| 170 | += 1.2.75 - 2026-09-30 = | |
| 171 | +* Login via modal/AJAX shows no error message when the account is not yet activated - FIXED | |
| 172 | +* Update AUI 0.2.56 and SD 1.2.37 - CHANGED | |
| 173 | + | |
| 174 | += 1.2.74 - 2026-09-16 = | |
| 175 | +* Update AUI 0.2.54 and SD 1.2.36 - CHANGED | |
| 176 | + | |
| 177 | += 1.2.73 - 2026-09-15 = | |
| 178 | +* Privacy tab settings on the Account page now reflect immediately after saving, without needing to flush the object cache. - FIXED | |
| 179 | +* Support for Wordfence 2FA in login form - ADDED | |
| 180 | + | |
| 181 | += 1.2.72 - 2026-08-18 = | |
| 182 | +* Merge AUI 0.2.52 & SD 1.2.35 - CHANGED | |
| 183 | + | |
| 184 | += 1.2.71 - 2026-08-17 = | |
| 185 | +* Arbitrary File Deletion via upload_file_remove() AJAX handler - FIXED/SECURITY | |
| 186 | + | |
| 187 | += 1.2.70 - 2026-08-03 = | |
| 188 | +* Badge Widget Variable Substitution - FIXED/SECURITY | |
| 189 | +* Merge AUI 0.2.51 & SD 1.2.34 - CHANGED | |
| 190 | + | |
| 191 | += 1.2.69 - 2026-07-22 = | |
| 192 | +* Allow username or email on the forgot Password form - FIXED | |
| 193 | + | |
| 194 | += 1.2.68 - 2026-07-15 = | |
| 195 | +* Login button text was blank for non-bootstrap design - FIXED | |
| 196 | + | |
| 197 | += 1.2.67 - 2026-06-30 = | |
| 198 | +* Password reset and activation links failing as "invalid or expired" on WordPress 6.8+ due to a hashing mismatch with core's new wp_fast_hash() key storage. - FIXED | |
| 199 | +* WP2FA compatibility in login lightbox - FIXED | |
| 200 | +* Missing WP 2FA provider bypassed login - FIXED | |
| 201 | + | |
| 202 | += 1.2.66 - 2026-06-29 = | |
| 203 | +* redirect_to link encoding issue on Login and registration form - FIXED | |
| 204 | +* Enhanced validation for file field deletion - FIXED/SECURITY | |
| 205 | + | |
| 206 | += 1.2.65 - 2026-06-24 = | |
| 207 | +* Custom field deleted option provokes lots of warnings in debug.log - FIXED | |
| 208 | +* Merge AUI 0.2.50 & SD 1.2.33 - CHANGED | |
| 209 | + | |
| 210 | += 1.2.64 - 2026-06-12 = | |
| 211 | +* Registration form titles with non-ASCII characters mangled by the activator - FIXED | |
| 212 | +* Option to change login button text in login form - ADDED | |
| 213 | +* Editor level user in some cases may be able to remove another users profile avatar image - FIXED/SECURITY | |
| 161 | 214 | |
| 162 | 215 | = 1.2.63 - 2026-05-11 = |
| 163 | 216 | * Consider form ID in register nonce for more security - FIXED/SECURITY |
| 164 | 217 | * Display error message for strong password in register form - FIXED |
