| @@ -1,10 +1,10 @@ | ||
| 1 | 1 | === wpForo Forum === |
| 2 | 2 | Contributors: gVectors Team |
| 3 | 3 | Tags: forum, forums, forum plugin, bbpress, community |
| 4 | 4 | Requires at least: 5.2 |
| 5 | -Tested up to: 6.9 | |
| 6 | -Stable tag: 3.0.9 | |
| 5 | +Tested up to: 7.1 | |
| 6 | +Stable tag: 3.2.0 | |
| 7 | 7 | Requires PHP: 7.1 |
| 8 | 8 | License: GPLv2 or later |
| 9 | 9 | License URI: https://www.gnu.org/licenses/gpl-2.0.html |
| 10 | 10 | |
| @@ -135,9 +135,21 @@ | ||
| 135 | 135 | |
| 136 | 136 | [Terms of Service](https://gvectors.com/terms-and-conditions/) |
| 137 | 137 | [Privacy Policy](https://gvectors.com/privacy-policy/) |
| 138 | 138 | |
| 139 | +**gVectors Addons News & License Reminders** (store.gvectors.com) | |
| 139 | 140 | |
| 141 | +If the forum administrator explicitly enables the addon news service (it is disabled by default and requires opt-in), wpForo connects to store.gvectors.com once per day to: | |
| 142 | + | |
| 143 | +* Fetch news about new addons, new features and announcements (endpoint: /news) — this request sends no site-specific data beyond standard HTTP request information | |
| 144 | +* Check for addon licenses that are close to expiration (endpoint: /at-risk-licenses) — this request sends your site address, an anonymous site identifier (an HMAC hash generated from your site domain and your WordPress security salts), and the slugs and installed versions of your gVectors addons | |
| 145 | + | |
| 146 | +No personal data, no email addresses, and no forum content is ever sent to this service. News notifications are shown as dismissible messages in the WordPress admin, and summary emails are sent by your own site (via your own mail server) to site administrators. The service can be disabled at any time from the wpForo Addons page, which stops all outbound requests immediately. | |
| 147 | + | |
| 148 | +[Terms of Service](https://gvectors.com/terms-and-conditions/) | |
| 149 | +[Privacy Policy](https://gvectors.com/privacy-policy/) | |
| 150 | + | |
| 151 | + | |
| 140 | 152 | == Installation == |
| 141 | 153 | |
| 142 | 154 | 1. Install wpForo Forum plugin in Dashboard > Plugins admin page. Then activate it. |
| 143 | 155 | 2. If you have more than 100 users wpForo forum plugin prompts you synchronize users. |
| @@ -231,10 +243,88 @@ | ||
| 231 | 243 | |
| 232 | 244 | - After the update, please delete all caches and purge CDN if you have |
| 233 | 245 | - After the update, please flush Redis Object Cache if you have this cache enabled |
| 234 | 246 | |
| 235 | -[wpForo Forum v3.0 Release Summary](https://wpforo.com/community/wpforo-announcements/wpforo-3-0-is-released/) | |
| 247 | +[wpForo Forum v3.2 Release Summary](https://wpforo.com/community/wpforo-announcements/wpforo-3-2-is-released/) | |
| 236 | 248 | |
| 249 | + | |
| 250 | + | |
| 251 | += wpForo Forum 3.2.0 | 25.09.2026 = | |
| 252 | + | |
| 253 | +* Addons Store: Purchase and manage addon licenses directly in your WordPress dashboard. No need to go to gVectors Store, purchase, then download and install. Now you can do one-click purchase, install, and update addons directly in your wpForo > Addons admin page. | |
| 254 | + | |
| 255 | + | |
| 256 | += wpForo Forum 3.1.7 | 22.09.2026 = | |
| 257 | + | |
| 258 | +* Security: Fixed Stored XSS vulnerability in some text fields | |
| 259 | +* Fixed: Infinite recursion causing fatal error and 504/508 timeouts on forum pages | |
| 260 | + | |
| 261 | += wpForo Forum 3.1.6 | 18.09.2026 = | |
| 262 | + | |
| 263 | +* Compatibility: WordPress 7.1 | |
| 264 | +* Security: Fixed PHP Object Injection vulnerability in custom form fields | |
| 265 | +* Security: Fixed Guest Post Takeover vulnerability allowing guest topics and posts to be edited via a forged ownership cookie | |
| 266 | +* Security: Fixed Stored XSS vulnerability in topic tags, exposed on topic pages, forum listings, the Tags page and search results | |
| 267 | +* Security: Fixed AI credit exhaustion via rate limit manipulation | |
| 268 | +* Security: Hardened profile field deserialization against crafted payloads, including a denial of service on the registration form | |
| 269 | +* Added: Frequency, A-Z and Z-A sort controls on the Tags page | |
| 270 | +* Optimized: Forum cache file limit is now calculated from the online members count, with oldest-first cleanup instead of a full cache wipe | |
| 271 | +* Fixed: Tag links no longer break for tags containing &, # or + characters | |
| 272 | + | |
| 273 | + | |
| 274 | += wpForo Forum 3.1.5 | 16.08.2026 = | |
| 275 | + | |
| 276 | +* AI New: Video tutorials and getting started steps on AI Features page | |
| 277 | +* Optimized: Mark all read button database query | |
| 278 | +* Fixed: Fatal error when admin bar renders before wpForo initialization | |
| 279 | +* Fixed: first_name and last_name fields silently discarded on registration | |
| 280 | + | |
| 281 | + | |
| 282 | += wpForo Forum 3.1.3/3.1.4 | 23.07.2026 = | |
| 283 | + | |
| 284 | +* Security: Fixed access control bypass in widget AJAX handlers (Recent Topics, Recent Posts, Online Members) | |
| 285 | +* Security: Fixed missing view_access() checks in AI translation and summarization endpoints | |
| 286 | +* Security: Fixed AI search indexing unapproved forum posts | |
| 287 | +* Security: Fixed WordPress content indexer ignoring password-protected posts | |
| 288 | +* Security: Fixed XSS vulnerability in AI-generated HTML responses | |
| 289 | +* Security: Fixed mass assignment bypass in profile and registration forms | |
| 290 | +* Fixed: Missing itemprop name attribute in Members breadcrumb | |
| 291 | + | |
| 292 | + | |
| 293 | += wpForo Forum 3.1.2 | 11.07.2026 = | |
| 294 | + | |
| 295 | +* Security: Fixed Stored XSS vulnerability in profile fields | |
| 296 | +* Security: Fixed IDOR vulnerability in AI Chat messaging | |
| 297 | +* Security: Fixed Mass Assignment vulnerability with privilege escalation via profile fields | |
| 298 | +* Added: UltimateMember profile integration now supports 'favored' subnav | |
| 299 | +* Fixed: Issue with User Custom Fields addon, the miaaing fields data | |
| 300 | +* Fixed: PostMeta array-value guard incorrectly dropping checkbox/multi-select field values | |
| 301 | +* Fixed: Undefined array key 'topicurl' warning in Feed.php | |
| 302 | +* Fixed: Profile "Blog Comments" stat now counts only approved, public blog post comments (excludes pingbacks, trackbacks, unapproved and other post-type comments) | |
| 303 | + | |
| 304 | + | |
| 305 | += wpForo Forum 3.1.1 | 31.05.2026 = | |
| 306 | + | |
| 307 | +* Security: Fixed Broken Authentication vulnerability allowing administrator email mutation | |
| 308 | +* Security: Fixed PHP Object Injection vulnerability via widget AJAX handlers | |
| 309 | + | |
| 310 | + | |
| 311 | += wpForo Forum 3.1.0 | 19.05.2026 = | |
| 312 | + | |
| 313 | +* Security: Fixed vulnerability issue in the Revisions module | |
| 314 | +* Security: Fixed vulnerability issue in Gutenberg block renderers | |
| 315 | +* New: Tools - Email Queue Tab, email notifications now sent asynchronously with automatic fallback to direct sending when WP-Cron is broken or disabled, dramatically reducing post-submission delays on busy forums | |
| 316 | +* New: Tools - Cron Jobs Tab, listing every WordPress scheduled event with per-row Run Now / Delete / Details, wpForo events sorted to the top | |
| 317 | +* Fixed: Duplicate email notifications could be sent for posts that pass moderation | |
| 318 | +* Fixed: Duplicate topic view counts could be recorded for the same user | |
| 319 | +* Fixed: Processing spinner could remain visible after indexing completed | |
| 320 | +* Fixed: Email Queue admin tab now shows "Cron idle" instead of "unknown" when there are no emails to send | |
| 321 | +* AI New: Custom Knowledge - upload TXT, MD, JSON, and PDF files (Business+ plan) to enhance AI Chatbot and Bot Reply with your own documentation | |
| 322 | +* AI New: Custom Knowledge - scanned/image-only PDFs auto-fall back to OCR when native text is sparse | |
| 323 | +* AI New: Custom Knowledge integrated into AI Chatbot, and AI Topic Suggestions | |
| 324 | +* AI Improved: AI cron jobs are now only registered when a tenant is connected to the AI service, preventing stale wp_cron entries on installs that do not use AI features | |
| 325 | +* AI Improved: AI Indexing breakdown loads asynchronously on large forums for faster admin page loads | |
| 326 | +* AI Improved: AI Logs filter now includes Knowledge Indexing entries | |
| 237 | 327 | |
| 238 | 328 | |
| 239 | 329 | = wpForo Forum 3.0.9 | 28.04.2026 = |
| 240 | 330 | |
