v5.2.2

Changelogs for the release of v5.2.2

= 5.2.2    - 19/06/2026 =
* Dev      - Add UR_WPML compatibility service class.
* Fix      - Password reset link shows "invalid or expired" error.
* Fix      - Membership subscriptions stuck pending on 3D Secure (SCA) cards.
* Fix      - Hardcoded database table names causing failures on custom table prefixes.
* Fix      - Checkbox visibility issue on WP user profile/edit page  caused by CSS conflict.
* Fix      - PayPal credentials not detected during registration despite valid saved settings.
* Fix      - Password reset link shows invalid or expired on hosts that do not support PHP cookies.
* Fix      - Webhook not configured but still can bypass PayPal payments.
* Fix      - Payment Method Bypass Allows Free Access to Paid Memberships via Tampered Registration Request.
* Fix      - Payment method field during registration could be manipulated to bypass payment for paid memberships.
* Fix      - Authenticated users could modify other members' subscriptions by supplying an arbitrary subscription ID during upgrade.
* Fix      - Membership tier submitted during registration was not validated against the memberships configured on the form, allowing substitution with an off-form tier.