Repository navigation
Releases: themegrill/user-registration
Releases · themegrill/user-registration
Release list
v5.3.1
v5.3.0
Changelogs for the release of v5.3.0
= 5.3.0 - 12/10/2026 =
* Feature - Set a maximum number of times a coupon can be used.
* Enhance - Members and admins get an email when a paid plan changes to a free plan.
* Enhance - Setup wizard asks one clear question: whether you want membership plans.
* Enhance - Content Rules editor explains how a page rule works with Whole Site rules.
* Enhance - Easier to turn on Multiple Registration Forms when you only have one form.
* Enhance - New sites use form payment fields only; Stripe is available on the Personal plan.
* Enhance - Tools (Logs, System Info, Setup Wizard) redesigned to match the Settings screens.
* Enhance - Site Assistant can suggest linking existing WordPress users to registration forms.
* Enhance - Optionally assign a default free membership when Social Connect skips plan selection.
* Add - Show or hide secret payment keys in the setup wizard.
* Add - Read-only WordPress abilities for forms, stats, and members (works with the official MCP Adapter).
* Fix - Clearer wording for the Force Captcha setting.
* Fix - Profile picture is kept when saving a profile.
* Fix - Safer tax amount inputs on membership checkout.
* Fix - Member names are cleaned before display in admin.
* Fix - Delete User works again from the user edit screen.
* Fix - Only allowed captcha and login settings can be saved.
* Fix - Send Test Email no longer fires twice from one click.
* Fix - Full Stripe refunds cancel the membership subscription.
* Fix - Safer refresh of form security tokens on the front end.
* Fix - Bulk user status changes require a valid security check.
* Fix - Importing a form no longer clears complex form settings.
* Fix - Declined Stripe payments show the real error from Stripe.
* Fix - Form payment View links open the correct payment history.
* Fix - Stronger checks when saving content restriction settings.
* Fix - Usage tracking docs link points to the current help page.
* Fix - No warning when cancelling a subscription that has no order.
* Fix - Renew and upgrade links on My Account open the correct forms.
* Fix - Send Test Email now uses your Email Header and Footer template.
* Fix - Authorize.Net payments no longer appear twice in payment history.
* Fix - Membership emails no longer mix in details from a different order.
* Fix - Form import only updates fields that belong on a registration form.
* Fix - Hide the "My Account page setting has moved" notice on new installs.
* Fix - Marketing and upgrade links include the correct tracking parameters.
* Fix - Membership upgrade form shows the correct price and payment options.
* Fix - Restricted content stays hidden in feeds and public discovery tools.
* Fix - Setup wizard keeps the answer you picked while it was still loading.
* Fix - Deleting a subscription in admin also cancels it in Stripe or PayPal.
* Fix - Remove an unused payment-approval email option that could never send.
* Fix - Login Form Builder View Live button is clickable across its full area.
* Fix - Membership Groups list no longer warns when a group has empty content.
* Fix - Content restriction applies to WooCommerce product data in the REST API.
* Fix - Invite Codes and Popups upgrade prompts show the right text in Settings.
* Fix - Locked Pro settings cards show the add-on's full name on licensed sites.
* Fix - Stripe can be turned off even if the publishable key format looks wrong.
* Fix - Closing the deactivation feedback popup no longer deactivates the plugin.
* Fix - Cloudflare Turnstile lets visitors try again after a failed registration.
* Fix - Confirm before deactivating your license on Settings and Plugins screens.
* Fix - PayPal is labeled correctly and lines up in the My Account payments list.
* Fix - Stripe and PayPal secret keys can be shown or hidden in payment settings.
* Fix - Stripe webhooks are created when you save payment keys in the setup wizard.
* Fix - Members screen no longer crashes for some older Stripe members after renewal.
* Fix - Older custom membership templates keep working after recent template changes.
* Fix - Opening a member profile no longer overwrites the admin's own uploaded files.
* Fix - Settings search finds options inside sections and shows where each result is.
* Fix - Member names and other user-controlled tags in messages cannot run shortcodes.
* Fix - Upgrade path list shows higher plans first and keeps your drag-and-drop order.
* Fix - "Redirect to previous page" after login no longer loops back to the login page.
* Fix - Pro upsell headings use the correct label (for example "2FA" instead of "2fa").
* Fix - Profile picture upload shows a loading state and a Remove button on My Account.
* Fix - Safer handling of checkbox values and form submission security on registration.
* Fix - WordPress profile screens no longer load form builder scripts they do not need.
* Fix - Extra membership purchases use the registration page from that form's shortcode.
* Fix - Stripe and PayPal chargebacks flag the member, remove access, and notify admins.
* Fix - No PHP warnings when deleting a user whose registration form was already removed.
* Fix - Members who already cancelled at period end no longer get renewal reminder emails.
* Fix - Login no longer crashes when the Payment Before Login message contains a % character.
* Fix - Multi-step forms no longer show step 1 fields inside step 2 after rows are reordered.
* Fix - Remove the stuck database update notice; updates run automatically in the background.
* Fix - Failed payments stop retrying after the final attempt and send the final notice email.
* Fix - A renewed subscription no longer carries an old failed-payment retry count into its next failure, and every failed retry sends the retry-failed email.
* Fix - Renewal and expiring-soon reminder emails still send if the daily schedule was missed.
* Fix - Forms save correctly when no captcha type is set, and captcha is not skipped by mistake.
* Fix - Form preview no longer loads the block editor; Stripe's script loads only when Stripe is on.
* Fix - Login and Lost Password show missing-field errors in the browser without a full page reload.
* Fix - Addons page sorting and filters (Newest/Oldest, Plan, Status) work together without crashing.
* Fix - My Account opens on Profile Details for new installs when you visit the plain My Account URL.
* Fix - Turning off the admin cancellation email no longer turns off the member's cancellation email.
* Fix - Addon install shows a clear error when it fails; Two-Factor Authentication install works again.
* Fix - Logged-out visitors no longer see "You are already logged in" on cached login or account pages.
* Fix - Uploaded files are restricted so non-image files cannot be served publicly from upload folders.
* Fix - Clearer keyboard focus, required-field markers, and autocomplete on login and lost-password forms.
* Fix - A page kept its own content-restriction message or redirect instead of the Whole Site rule taking over.
* Fix - Content rules can block WooCommerce product purchases by post type; Whole Site rules no longer turn product rules off.
* Fix - Username length setting accepts numbers correctly; form preview and admin screens no longer show related console warnings.
* Fix - Paid Stripe renewals are recorded correctly; members stay active while Stripe retries a failed payment; a temporary Stripe error no longer skips a billing period.
* Fix - PayPal upgrades no longer double-charge; renewals extend access; old subscription events no longer change the wrong member; missed payments are recovered correctly.
v5.2.8
Changelogs for the release of v5.2.8
= 5.2.8 - 10/09/2026 =
* Fix - Stop retrying deleted Stripe subscriptions.
* Fix - Show specific error for existing email/username.
* Fix - Content restriction bypassed via WordPress core REST API.
* Fix - Standardized outbound UTM parameters and invalid campaign keys.
* Fix - Users could be redirected to an outside website after logging in.
* Fix - Membership thank you page exposed another member's account details.
* Fix - Team Membership: scoped Edit Team form nonce to the team being edited.
* Fix - Use timing-safe comparison for email confirmation and approval tokens.
* Fix - Stripe payment could be replayed to renew a membership without paying.
* Fix - Privilege escalation via membership role and open redirect after login.
* Fix - PayPal-paid membership role stayed pending until the member's next login.
* Add - `{{force_logout_url}}` smart tag for Pro's prevent concurrent login email.
* Fix - Expired membership could be renewed by replaying an earlier Stripe payment.
* Fix - Deactivate License button did nothing when pro-activation transient was set.
* Fix - Registration forms not validating publish status or restricting assigned roles.
* Fix - Membership/payment/autologin failed if another plugin hooked registration validation.
* Fix - Membership Renewal Reminder email sent to members who had already cancelled at period end.
v5.2.7
Changelogs for the release of v5.2.7
= 5.2.7 - 11/08/2026 =
* Fix - Payment related issues for tax & others
* Fix - User login after invalid failed payment.
* Fix - Performance issue on flush rewrite rules.
* Fix - Malformed my account URL on Plain permalinks.
* Fix - Both renewal emails sent regardless of setting.
* Fix - Disable emails setting not blocking all emails.
* Fix - Fatal error on registration if form data is null.
* Fix - Default subscriber role added for disabling settings.
* Fix - False success shown when profile update saves nothing.
* Fix - Show emails only when respective settings are enabled.
* Fix - Membership links not translated on multilingual sites.
* Fix - Change Plan/Renew links not using correct language page.
* Fix - Profile Picture removed when saving another user's profile.
* Fix - Added site assistant and admin notice when registration disabled.
* Fix - Hide Payments and Subscriptions menus until relevant data exists.
* Fix - Hide Global Restriction Message setting until a plan or rule exists.
* Fix - Membership field hides radio button for single plan; correct Total for free plans.
* Fix - Hide Renewal Behaviour setting on Membership settings until a membership plan is created.
* Fix - Site Assistant hides membership/payment notices until a plan exists for Advanced Registration users.
v5.2.6
Changelogs for the release of v5.2.6
= 5.2.6 - 22/07/2026 =
* Enhance - Compatibility with divi 5.
* Enhance - Allow 100% discount coupons on memberships.
* Enhance - Redirect hint links to Enable Custom Redirect setting.
* Fix - Local currency bugs.
* Fix - Double Charge on Upgrade.
* Fix - Updated authorize net card design.
* Fix - Remove the payment tabs from admin side.
* Fix - Cancel previous subscription on upgrade.
* Fix - Added spinner on Membership Reactivation.
* Fix - Validation for lost password n Pages Setting.
* Fix - Delete User button not working on member view page.
* Fix - User Registration css loading when elementor active.
* Fix - Prevent privilege escalation in login settings save.
* Fix - Reset password smart tag validation in email content.
* Fix - Checkbox values not appearing when exporting members.
* Fix - Payment Before Login not enforced for pending payments.
* Fix - Can not create new subscription in safari from admin menu.
* Fix - Membership cancellation failures now show a clear message.
* Fix - Field options not displayed when configuring content rules.
* Fix - Content restriction being applied for inactive memberships.
* Fix - Membership field blank in form builder with selected group.
* Fix - Store actual PayPal transaction id instead of subscription id.
* Fix - Stripe registration now displays the configured success message.
* Fix - Conditional Logic on Payments not working for normal registration.
* Fix - Fatal error when saving Stripe plan with yearly billing over 3 years.
* Fix - Upgrade prompt for Plus-gated membership group toggles on lower plans.
* Fix - {{user_ip_address}} smart tag returned empty for IPv6 visitor addresses.
* Fix - Block shortcode injection via smart tags in Content Restriction messages.
* Fix - Stripe membership "Payment Confirmed" email sent before payment completes.
* Fix - Membership emails not using saved custom content for preview and delivery.
* Fix - Local Currency pricing zones not saving when added from the payment settings.
* Fix - Misleading "missing membership field" notice on registration page with no memberships field.
* Fix - Redirects and lost-password/2FA links now use the correct translated page on multilingual sites.
v5.2.5
Changelogs for the release of v5.2.5
= 5.2.5 - 08/07/2026 =
* Enhance - Defer expiry to period end.
* Enhance - Pin Stripe subscription payment method for reliable renewals.
* Fix - User and admin email order.
* Fix - Payment fail case for paypal.
* Fix - Lost Password Carrot adjustment.
* Fix - Unnecessary payment retry checks.
* Fix - Required Nonce Error on registration.
* Fix - Fatal error on WooCommerce shop page.
* Fix - Setup wizard membership duration issue.
* Fix - Loader timing issue during registration.
* Fix - Unwanted settings showing up in free version.
* Fix - Prevent formula injection in user CSV export.
* Fix - Reject underpaid PayPal subscription payments.
* Fix - Harden signup notice against malicious content.
* Fix - Stop users from cancelling others' email changes.
* Fix - Remove unwanted fields from payment confirmed email.
* Fix - Pending subscription blocked the user from logging in.
* Fix - Design issues in promotional notices after WordPress v7.0.
* Fix - Use server membership state for multiple-membership policy.
* Fix - Block tampered PayPal payments from activating memberships.
* Fix - Stripe payment and nonce validation failed on Membership form.
* Fix - Field Visibility add-on hides fields in My Account read-only profiles.
* Fix - Security: prevent unauthorized login during membership signup payment.
* Fix - Check coupon eligibility before discount on public membership purchase.
* Fix - Super admin bypass missing for admin content access in membership rules.
* Fix - Check PayPal payment is complete before activating one-time memberships.
v5.2.4
Changelogs for the release of v5.2.4
= 5.2.4 - 25/06/2026 =
* Enhance - User role overwritten on new membership assignment.
* Enhance - Add customizable membership registration success message in settings.
* Fix - Duplicate variable.
* Fix - Invoice dynamic content not translatable.
* Fix - Missing users in user registration members section.
* Fix - Validation of key while saving the stripe payment settings.
* Fix - My Account payment tab pulling footer content inside the tab area.
* Fix - Address incomplete PayPal setup error when adding PayPal for old user.
* Fix - hCaptcha enabled on registration form blocks users from completing signup.
* Fix - Reset content button not working in the prevent concurrent login email template.
* Fix - New Member Registered email not sent when Admin Approval Request email is enabled.
* Fix - Harden membership coupon apply paths against PHP 8 TypeError (free membership module).
* Fix - File upload attachments not updating correctly when admin edits another user's profile.
* Fix - Registration failure causes missing member records and prevents Stripe payment processing.
v5.2.3
Changelogs for the release of v5.2.3
= 5.2.3 - 23/06/2026 =
* Fix - validation for receiver email and payment amount in PayPal IPN handling.
* Fix - Selected membership tier during registration missed proper validation, allowing assignment of off-form membership tiers.
* Fix - Stripe subscription requests could trigger unintended deletion of pending member accounts due to insufficient authorization validation.
v5.2.2
Changelogs for the release of v5.2.2
= 5.2.2 - 19/06/2026 =
* Dev - Add UR_WPML compatibility service class.
* Fix - Password reset link shows "invalid or expired" error.
* Fix - Membership subscriptions stuck pending on 3D Secure (SCA) cards.
* Fix - Hardcoded database table names causing failures on custom table prefixes.
* Fix - Checkbox visibility issue on WP user profile/edit page caused by CSS conflict.
* Fix - PayPal credentials not detected during registration despite valid saved settings.
* Fix - Password reset link shows invalid or expired on hosts that do not support PHP cookies.
* Fix - Webhook not configured but still can bypass PayPal payments.
* Fix - Payment Method Bypass Allows Free Access to Paid Memberships via Tampered Registration Request.
* Fix - Payment method field during registration could be manipulated to bypass payment for paid memberships.
* Fix - Authenticated users could modify other members' subscriptions by supplying an arbitrary subscription ID during upgrade.
* Fix - Membership tier submitted during registration was not validated against the memberships configured on the form, allowing substitution with an off-form tier.
v5.2.1
Changelogs for the release of v5.2.1
= 5.2.1 - 28/05/2026 =
* Fix - Stripe order validation issue.
* Fix - Membership upgrade action not available after disabling group add-on.
* Fix - Custom emails addon cannot be enabled with plus plan even available in personal.
* Fix - Nav menu items disappear for logged-out users when logout endpoint set to slash.
* Fix - File upload addon shows upgrade to premium prompt despite user having an active plan.
* Fix - Ensure meta_query is initialized before adding payment status condition in user payments query.