Ultimate Member 2.8.5

Enhancements:

• Added: "Hide my last login" via the Account > Privacy setting
• Added: Exclude and Include fields for member directory searching
• Tweak: Compatibility with WordPress 6.5

Bugfixes:

• Fixed: URL attributes escaping (CVE-2024-2765)
• Fixed: wp-admin Ultimate Member > Dashboard layouts
• Fixed: Required fields labels
• Fixed: Change password and update account email notifications duplicates
• Fixed: Reset Password urlencoded username
• Fixed: Clear media JS in wp-admin settings

Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade.

Ultimate Member 2.8.4

Enhancements

• Tweak: Added separate file for full changelog. readme.txt shows only a few latest versions

Bugfixes

• Fixed: Member directory data sanitizing (CVE-2024-2123)
• Fixed: Activation link time changed from seconds to days
• Fixed: Password validation error
• Fixed: Password reset url for the approved user who didn't set their password after registration without password
• Fixed: Conflict with WebP Uploads

Ultimate Member 2.8.3

Enhancements:

• Added: Link to the Ultimate Member docs
• Tweak: Ultimate Member > Settings redesign. More details about setting up. Tooltips changed to descriptions.

Bugfixes:

• Fixed: Member directory queries to custom usermeta table properly escaped and validated
• Fixed: Member directory custom sorting when wp_usermeta table is used
• Fixed: aria-invalid attribute for the user description field
• Fixed: wp_kses protocols for email notifications content
• Fixed: PHP notice while registration form validation
• Fixed: Field validations (English letters, Alpha-numeric types)
• Fixed: Hidden buttons in the modal when uploading profile and cover photo
• Fixed: Theme updater log message
• Fixed: Search line shortcode layout
• Fixed: PHP notice while login form submission
• Fixed: Email notifications HTML layout
• Fixed: Default email notification body color
• Fixed: Ignore username slug when custom meta slug exists when parse user from query

Templates required update:

• email/notification_deletion.php
• email/notification_new_user.php
• email/notification_review.php
• email/welcome_email.php
• password-change.php

Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade

Ultimate Member 2.8.2

Enhancements:

• Added: The data protocol for embedding base64 encoded logos in emails
• Added: Hook um_access_restricted_post_instance for filtering the restricted post instance
• Added: Shortcode [um_author_profile_link] for getting user Profile URL
• Updated: Using underscore.js native debounce method for resize handler
• Updated: Texts spelling

Bugfixes:

• Fixed: AJAX requests conflict with um_current_locale attribute
• Fixed: Pickadate styling (Date & Time fields) in wp-admin screen
• Fixed: RTL styling and removed um class from UM frontend predefined pages
• Fixed: select2 conflict with Impreza theme
• Fixed: cropper conflict with Avada theme and active Fusion Image lazyload
• Fixed: MegaMenu conflict with nav menu items conditional settings (e.g. Newsletter theme)
• Fixed: PHP Fatal error when there isn't a proper WP_Post object in UM User Profile > Posts loop
• Fixed: Account styles
• Fixed: Saving um_form_version postmeta

Templates required update:

• profile/posts-single.php

Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade

Ultimate Member 2.8.1

Enhancements:

• Updated: Twitter texts to X
• Added: Safeguards against clickjacking attacks on UM Forms

Bugfixes:

• Fixed: Displaying notice to avoid using wrong symbols
• Fixed: UM > Settings button styles
• Fixed: Error notice when creating page via extensions
• Fixed: Workaround for Cropper.JS if UM.frontend.cropper.obj undefined (Cropper hasn't been properly inited for UM objects)
• Fixed: The visibility of sub-items of hidden menu items

Ultimate Member 2.8.0

Enhancements:

• Refactored: wp-admin assets. Separated or merged some file based on the wp-admin screens
• Tweak: SASS pre-processor is used for wp-admin styles.
• Tweak: Using minified JS and CSS in wp-admin and frontend assets
• Tweak: Added PHP class UM()->admin()->screen() for screen control in wp-admin
• Updated: jquery-ui styles to 1.13.2 version. Prefixed with .um class.
• Updated: Cropper.JS to 1.6.1 version
• Note: Select2.JS version 4.0.13
• Refreshed: Tipsy.JS to 1.0.0a version. Removed custom changes and restored library base code
• Refreshed: Raty.JS to 2.6.0 version. Restored library base code
• Refreshed: Pickadate.JS to 3.6.2 version. Restored library base code
• Updated: Used um-tip-{x} classes to make Tipsy.JS initialization commonly for wp-admin and frontend.
• Updated: wp-admin forms class and render icon type field
• Updated: Using custom_submitdiv on the UM Form and UM Member Directory screen to avoid custom styling for unnecessary metabox functionality. Just to render the necessary metabox content with only submission tools.

Bugfixes:

• Fixed: Using fields with numeric keys in Form Builder
• Fixed: Pickadate.JS (datetime picker) localizations using
• Fixed: PHP notices on the SiteHealth and Form Builder pages
• Fixed: Using 'um_user_permissions_filter' hook and it's arguments.

Deprecated:

• Removed Simplebar.JS library in Ultimate Member core. It's used only in extensions.
• Removed outdated styles and scripts for 1.3.x first install page
• UM()->admin()->enqueue()->js_url param. Please use UM()->admin()->enqueue()::get_url( 'js' ); or self::get_url( 'js' ); instead
• UM()->admin()->enqueue()->css_url param. Please use UM()->admin()->enqueue()::get_url( 'css' ); or self::get_url( 'js' ); instead
• UM()->frontend()->enqueue()->js_url param. Please use UM()->frontend()->enqueue()::get_url( 'js' ); or self::get_url( 'js' ); instead
• UM()->frontend()->enqueue()->css_url param. Please use UM()->frontend()->enqueue()::get_url( 'css' ); or self::get_url( 'js' ); instead
• Fully UM()->permalinks()->um_rel_canonical_() function. Because since version 2.1.7 there is used um_profile_remove_wpseo(); alternative
• Fully UM()->permalinks()->admin_act_url() function. Since update for wp-admin links when there is nonce this function isn't used
• Fully UM()->admin()->enqueue()->front_js_baseurl param.
• Fully UM()->admin()->enqueue()->front_css_baseurl param.
• Fully UM()->admin()->enqueue()->post_page param.
• Fully UM()->frontend()->enqueue()->load_google_charts() function. Outdated.
• Fully UM()->frontend()->enqueue()->load_fileupload() function. Used scripts/styles dependencies to load script in the necessary place.
• Fully UM()->frontend()->enqueue()->load_datetimepicker() function. Used scripts/styles dependencies to load script in the necessary place.
• Fully UM()->frontend()->enqueue()->load_scrollbar() function. Outdated
• Fully UM()->frontend()->enqueue()->load_imagecrop() function. Used scripts/styles dependencies to load script in the necessary place.
• UM()->is_um_screen() function. Please use UM()->admin()->screen()->is_own_screen() instead
• UM()->is_plugin_post_type() function. Please use UM()->admin()->screen()->is_own_post_type() instead
• UM()->is_restricted_entity() function. Please use UM()->admin()->screen()->is_restricted_entity() instead
• UM()->cpt_list() function. Please use UM()->common()->cpt()->get_list() instead
• um-admin-clear CSS class. It duplicates WordPress native clear. Using WordPress native instead.
• um-admin-tipsy-{x} classes to make Tipsy.JS initialization commonly for wp-admin and frontend by um-tip-{x} class.

Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade

Ultimate Member 2.7.0

Enhancements:

• Added: Site Health sections
• Added: oEmbed field type
• Added: YouTube field type supports YouTube Shorts links
• Added: Profile permalink base options: Unique hash, Custom usermeta
• Added: UM Form meta um_form_version for legacy support in the future
• Added: Setting "Deleting user comments after deleting a user" for WordPress native logic workaround
• Added: aria-invalid and aria-errormessage attributes to the fields on UM Forms
• Updated: Structure for enqueue assets PHP classes
• Updated: Hooks Documentation v2

Bugfixes:

• Fixed: Member directory search query escaping process
• Fixed: Added 'ID' metakey to the blacklist. It's not possible to create field with 'ID' metakey to avoid the conflict
• Fixed: Add/Edit Field metabox and "Field Icon", "Conditional logic" fields
• Fixed: Init jquery-slider-ui script/style on the block editor page
• Fixed: Displaying "Notifications Account Tab" setting
• Fixed: Displaying Post Date on the User Profile > Posts tab based on this article
• Fixed: Small PHP warning, notices and typos

Deprecated:

• UM()->enqueue() use UM()->frontend()->enqueue() method
• UM()->admin_enqueue() use UM()->admin()->enqueue() method
• UM()->admin_enqueue()->suffix property use UM()->frontend()->enqueue()::get_suffix()
• UM()->admin()->enqueue()->suffix property use UM()->frontend()->enqueue()::get_suffix()
• Changed directories for the fonts (fonticons + raty), and JS/CSS files related to libs jquery-ui, raty, select2, tipsy, fonticons (FontAwesome + Ionicons)

Templates required update:

• account.php
• login.php
• password-change.php
• password-reset.php
• register.php
• profile/posts-single.php

Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade

Ultimate Member 2.6.11

Bugfixes:

• Fixed: Empty mail From data when there isn't set an option
• Fixed: Nonce validation for the admin actions handler
• Fixed: REST API endpoint List Pages redirecting to the homepage
• Fixed: Standardize the 'editable' attribute for the UM fields and hooks that can extend these fields
• Fixed: Redirection from default WordPress registration to UM registration page (if it's not a published)

Ultimate Member 2.6.10

Enhancements:

• Added: 'um_can_view_profile' hook to operate with profile privacy
• Added: 'um_member_directory_core_search_fields' hook to operate with core searching fields in member directory search
• Tweak: Standardize the condition for checking not editable fields to empty( $data['editable'] )
• Tweak: Unified UM()->fields()->editing and UM()->fields()->viewing to bool variables use true|false in conditions to make === or !== comparing
• Updated: Hooks Documentation v2

Bugfixes:

• Fixed: Restriction settings handler when there isn't a WP_Post in query. PHP notices in some cases when WP query is not canonical
• Fixed: User description (Biography) field conflict with validation (max chars) in both cases when HTML can be used or not. Case when there are 2 biography fields are displayed on the profile (header + form field)
• Fixed: Displaying WordPress native registration errors when unique username|email validation is disabled
• Fixed: Make links clickable in the Registration Details
• Fixed: WP_Users_Query on wp-admin > Users screen
• Fixed: Performance for um_get_form_fields hook
• Fixed: Admin Modal JS library conflict with bootstrap.js

Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade

Ultimate Member 2.6.9

Enhancements:

• Added: Compatibility with UM: Stripe extension
• Added: Show/hide password button for toggle password visibility
• Added: JS scripts for syncing biography fields if there are the 1st field in the profile header and the 2nd field in the profile form

Bugfixes:

• Fixed: Using allowed hosts for safe redirect after profile deletion
• Fixed: Nonce validation for the admin actions handler
• Fixed: Using singleton for UM Forms and UM Account shortcodes. Empty pages issue
• Fixed: PHP errors in admin notices
• Fixed: PHP errors on UM Profile update when there is multiselect field
• Fixed: UM Form and UM Member Directories titles un-slashed. Please re-update the entities where you have extra-slashes
• Fixed: Maximum allowed words option for textarea where you may insert HTML tags. Ignore HTML tags symbols when count
• Fixed: Sanitize for fields (Min characters, Max characters, etc.) where can be empty string or absint value

Templates required update:

• profile.php

Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade