Repository navigation
Releases: strangerstudios/pmpro-unlock
Releases · strangerstudios/pmpro-unlock
Release list
1.3.1 - 2026-09-29
- SECURITY: Improved sanitization and escaping throughout the plugin to resolve Plugin Check security findings. #23 (@dparker1005)
1.3 - 2026-09-23
- REFACTOR: Refactored pmproup_ prefix to pmpro_unlock_ to avoid conflicts with other plugins. Previous functions still work but throw deprecated warning. #22 (@andrewlimaza)
- SECURITY: The
statenonce returned by Unlock Protocol is now verified everywhere an auth code is consumed (profile, checkout, admin member edit), not only at login. Prevents a logged-in member being re-linked to another wallet via a crafted link. #21 (@andrewlimaza) - SECURITY: Wallet login now bails when no auth code or wallet is present. Previously an empty wallet lookup could match any user with a linked wallet. #21 (@andrewlimaza)
- SECURITY: Removing a wallet from a profile now acts on the user being saved and requires permission to edit that user. #21 (@andrewlimaza)
- SECURITY: Lock access checks now fail closed on RPC errors or empty responses, and require a well-formed wallet address. #21 (@andrewlimaza)
- ENHANCEMENT: Added better support when NFT's expire or transfer out of their wallet to another person. #22 (@andrewlimaza)
- BUG FIX: No longer stores an empty wallet address in user meta when a code exchange fails. #21 (@andrewlimaza)
1.2.1 - 2024-10-18
- FEATURE: Now updating the plugin from paidmembershipspro.com.
- ENHANCEMENT: Added Dutch language files.
- ENHANCEMENT: Added Sepolia test network.
1.2 - 2024-01-03
- ENHANCEMENT: Added better support for Paid Memberships Pro future versions. (@dparker1005)
- BUG FIX: Show the users wallet when editing their WordPress profile as an admin. (@dparker1005)
- BUG FIX: Fixed an issue where connecting your wallet while being logged out in the checkout process wasn't saving after checkout was completed. (@andrewlimaza)
- REFACTOR: Reworked how we handle level ID's in the plugin to support newer Paid Memberships Pro versions. (@dparker1005)
1.1.1 - 2023-01-10
- ENHANCEMENT: Only show the "Connect Wallet" at checkout if the membership level allows NFT's to be purchased. If a level does not have a lock assigned, don't show the connect wallet button.
- BUG FIX: Fixed an issue when authenticating/connecting wallet would redirect to default checkout page and not the actual checkout URL that was being used.
1.1 - 2023-01-04
- ENHANCEMENT: Ability to remove wallet address from Edit User Profile page or the frontend profile edit page.
1.0.1 - 2022-11-07
SECURITY: Better escaping when showing wallet address on the edit profile page. (Thanks .org plugins team.)