| @@ -1,10 +1,10 @@ | ||
| 1 | 1 | === wpForo Forum === |
| 2 | 2 | Contributors: gVectors Team |
| 3 | 3 | Tags: forum, forums, forum plugin, bbpress, community |
| 4 | 4 | Requires at least: 5.2 |
| 5 | -Tested up to: 6.9 | |
| 6 | -Stable tag: 3.0.9 | |
| 5 | +Tested up to: 7.1 | |
| 6 | +Stable tag: 3.1.6 | |
| 7 | 7 | Requires PHP: 7.1 |
| 8 | 8 | License: GPLv2 or later |
| 9 | 9 | License URI: https://www.gnu.org/licenses/gpl-2.0.html |
| 10 | 10 | |
| @@ -233,8 +233,76 @@ | ||
| 233 | 233 | - After the update, please flush Redis Object Cache if you have this cache enabled |
| 234 | 234 | |
| 235 | 235 | [wpForo Forum v3.0 Release Summary](https://wpforo.com/community/wpforo-announcements/wpforo-3-0-is-released/) |
| 236 | 236 | |
| 237 | + | |
| 238 | + | |
| 239 | += wpForo Forum 3.1.6 | 18.09.2026 = | |
| 240 | + | |
| 241 | +* Compatibility: WordPress 7.1 | |
| 242 | +* Security: Fixed PHP Object Injection vulnerability in custom form fields | |
| 243 | +* Security: Fixed Guest Post Takeover vulnerability allowing guest topics and posts to be edited via a forged ownership cookie | |
| 244 | +* Security: Fixed Stored XSS vulnerability in topic tags, exposed on topic pages, forum listings, the Tags page and search results | |
| 245 | +* Security: Fixed AI credit exhaustion via rate limit manipulation | |
| 246 | +* Security: Hardened profile field deserialization against crafted payloads, including a denial of service on the registration form | |
| 247 | +* Added: Frequency, A-Z and Z-A sort controls on the Tags page | |
| 248 | +* Optimized: Forum cache file limit is now calculated from the online members count, with oldest-first cleanup instead of a full cache wipe | |
| 249 | +* Fixed: Tag links no longer break for tags containing &, # or + characters | |
| 250 | + | |
| 251 | + | |
| 252 | += wpForo Forum 3.1.5 | 16.08.2026 = | |
| 253 | + | |
| 254 | +* AI New: Video tutorials and getting started steps on AI Features page | |
| 255 | +* Optimized: Mark all read button database query | |
| 256 | +* Fixed: Fatal error when admin bar renders before wpForo initialization | |
| 257 | +* Fixed: first_name and last_name fields silently discarded on registration | |
| 258 | + | |
| 259 | + | |
| 260 | += wpForo Forum 3.1.3/3.1.4 | 23.07.2026 = | |
| 261 | + | |
| 262 | +* Security: Fixed access control bypass in widget AJAX handlers (Recent Topics, Recent Posts, Online Members) | |
| 263 | +* Security: Fixed missing view_access() checks in AI translation and summarization endpoints | |
| 264 | +* Security: Fixed AI search indexing unapproved forum posts | |
| 265 | +* Security: Fixed WordPress content indexer ignoring password-protected posts | |
| 266 | +* Security: Fixed XSS vulnerability in AI-generated HTML responses | |
| 267 | +* Security: Fixed mass assignment bypass in profile and registration forms | |
| 268 | +* Fixed: Missing itemprop name attribute in Members breadcrumb | |
| 269 | + | |
| 270 | + | |
| 271 | += wpForo Forum 3.1.2 | 11.07.2026 = | |
| 272 | + | |
| 273 | +* Security: Fixed Stored XSS vulnerability in profile fields | |
| 274 | +* Security: Fixed IDOR vulnerability in AI Chat messaging | |
| 275 | +* Security: Fixed Mass Assignment vulnerability with privilege escalation via profile fields | |
| 276 | +* Added: UltimateMember profile integration now supports 'favored' subnav | |
| 277 | +* Fixed: Issue with User Custom Fields addon, the miaaing fields data | |
| 278 | +* Fixed: PostMeta array-value guard incorrectly dropping checkbox/multi-select field values | |
| 279 | +* Fixed: Undefined array key 'topicurl' warning in Feed.php | |
| 280 | +* Fixed: Profile "Blog Comments" stat now counts only approved, public blog post comments (excludes pingbacks, trackbacks, unapproved and other post-type comments) | |
| 281 | + | |
| 282 | + | |
| 283 | += wpForo Forum 3.1.1 | 31.05.2026 = | |
| 284 | + | |
| 285 | +* Security: Fixed Broken Authentication vulnerability allowing administrator email mutation | |
| 286 | +* Security: Fixed PHP Object Injection vulnerability via widget AJAX handlers | |
| 287 | + | |
| 288 | + | |
| 289 | += wpForo Forum 3.1.0 | 19.05.2026 = | |
| 290 | + | |
| 291 | +* Security: Fixed vulnerability issue in the Revisions module | |
| 292 | +* Security: Fixed vulnerability issue in Gutenberg block renderers | |
| 293 | +* New: Tools - Email Queue Tab, email notifications now sent asynchronously with automatic fallback to direct sending when WP-Cron is broken or disabled, dramatically reducing post-submission delays on busy forums | |
| 294 | +* New: Tools - Cron Jobs Tab, listing every WordPress scheduled event with per-row Run Now / Delete / Details, wpForo events sorted to the top | |
| 295 | +* Fixed: Duplicate email notifications could be sent for posts that pass moderation | |
| 296 | +* Fixed: Duplicate topic view counts could be recorded for the same user | |
| 297 | +* Fixed: Processing spinner could remain visible after indexing completed | |
| 298 | +* Fixed: Email Queue admin tab now shows "Cron idle" instead of "unknown" when there are no emails to send | |
| 299 | +* AI New: Custom Knowledge - upload TXT, MD, JSON, and PDF files (Business+ plan) to enhance AI Chatbot and Bot Reply with your own documentation | |
| 300 | +* AI New: Custom Knowledge - scanned/image-only PDFs auto-fall back to OCR when native text is sparse | |
| 301 | +* AI New: Custom Knowledge integrated into AI Chatbot, and AI Topic Suggestions | |
| 302 | +* AI Improved: AI cron jobs are now only registered when a tenant is connected to the AI service, preventing stale wp_cron entries on installs that do not use AI features | |
| 303 | +* AI Improved: AI Indexing breakdown loads asynchronously on large forums for faster admin page loads | |
| 304 | +* AI Improved: AI Logs filter now includes Knowledge Indexing entries | |
| 237 | 305 | |
| 238 | 306 | |
| 239 | 307 | = wpForo Forum 3.0.9 | 28.04.2026 = |
| 240 | 308 | |
