Decryption key:
- Added: Member Directory > Admin Filtering supports datepicker and timepicker filter-types with only “From” or “To” filled value
- Added: Ability to customize modal templates upload-single.php and view-photo.php
- Added: New FontAwesome library. Version 6.5.2
Decryption key:
2.8.4 2024-03-06
Enhancements
Bugfixes
- Tweak: Added separate file for full changelog. readme.txt shows only a few latest versions
- Fixed: Member directory data sanitizing (CVE-2024-2123)
- Fixed: Activation link time changed from seconds to days
- Fixed: Password validation error
- Fixed: Password reset url for the approved user who didn’t set their password after registration without password
- Fixed: Conflict with WebP Uploads
Decryption key:
2.8.3: February 19, 2024
- Enhancements:
- Added: Link to the Ultimate Member docs
- Tweak: Ultimate Member > Settings redesign. More details about setting up. Tooltips changed to descriptions.
- Bugfixes:
- Fixed: Member directory queries to custom usermeta table properly escaped and validated
- Fixed: Member directory custom sorting when wp_usermeta table is used
- Fixed: aria-invalid attribute for the user description field
- Fixed: wp_kses protocols for email notifications content
- Fixed: PHP notice while registration form validation
- Fixed: Field validations (English letters, Alpha-numeric types)
- Fixed: Hidden buttons in the modal when uploading profile and cover photo
- Fixed: Theme updater log message
- Fixed: Search line shortcode layout
- Fixed: PHP notice while login form submission
- Fixed: Email notifications HTML layout
- Fixed: Default email notification body color
- Fixed: Ignore username slug when custom meta slug exists when parse user from query
- Templates required update:
Download Ultimate Member Core Plugin v2.5.4 Nulled Free
= v2.5.4: February 17, 2023 =
* Enhancements:
- Added: TikTok, Twitch and Reddit fields
- Added: Handler of restriction settings for blog page
- Added: Support of the `<iframes>` inside textarea with enabled the "HTML using" option
- Added: 'um_get_field_date' hook for filtering date fields
- Added: `UM()->get_allowed_html()` function for using it inside wp_kses allowed HTML tags
* Bugfixes:
- Fixed: Redirect to some links when content is restricted. Using `esc_url_raw()` instead of `esc_url()` for redirect to URLs inside class-access.php
- Fixed: Handle restriction settings for attachments, later hook is used for checking capabilities through `current_user_can()`
- Fixed: Honeypot triggering in password reset, when not set
- Fixed: Small PHP notices and warnings
Download Ultimate Member Core Plugin v2.5.3 Nulled
= 2.5.3: December 19, 2023 =
* Bugfixes:
- Fixed: Plugin upgrade DB initialization and PHP Fatal Error.
Download Ultimate Member Core Plugin v2.5.2 Nulled Free
= v2.5.2: December 14, 2022 =
* Enhancements:
- Added: Custom dropdown callback functions security enhancements. Avoid using blacklisted functions through namespace or uppercase format
- Added: Validation for upgrade package in wp-admin
- Added: `Change Password request limit` option for prevent from any brute-force attacks or password guessing with the form
- Added: Strong password checking for not using username|email inside the password
- Added: `um_custom_authenticate_error_codes` hook for handling 3rd-party login errors on UM invalid form
* Bugfixes:
- Fixed: Some texts sanitizing
- Fixed: PHP Error in url-type field on UM Forms
- Fixed: Using `wp_mkdir` to avoid the filesystem conflict when copy email template to theme
- Fixed: Password Reset URL generating
- Fixed: Multiple users approve
- Fixed: Using regular URL-type field for displaying
* Templates required update:
- members.php
* Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade
= 2.5.1: October 26, 2022 =
* Enhancements:
- Added: Custom fields callbacks blacklist. Use `um_dropdown_options_source_blacklist` filter for adding your custom functions to the custom callbacks blacklist. By default there are all PHP internal functions.
Download Ultimate Member Core Plugin v2.5.0 Nulled
= 2.5.0: August 17, 2022 =
* Enhancements:
- Added: Input type "tel" using for the "Mobile Number" and "Phone Number" fields
* Bugfixes:
- Fixed: Performance issue on wp-admin Users screen. Queries were replaced to the cache transient values
- Fixed: Privacy policy displaying when there are 2 registration forms on the same page
- Fixed: Password Reset process via Ultimate Member - Password Reset form. Reset password links' arguments changed to the same view as WordPress native has. Password Reset available for the same cases as native WordPress Password Reset has
- Fixed: Sanitizing for the Info Text field-type in wp-admin forms. Needed for the proper 3rd-party integrations
- Fixed: Displaying the filters' titles on the Member Directory pages
* Deprecated:
- `UM()->query()->get_users_by_status()` without alternativities. It's unused since 2.5.0. Will be removed since 2.7.0
- `UM()->user()->get_pending_users_count()`. Use `UM()->query()->get_pending_users_count()` instead. It's unused since 2.5.0. Will be removed since 2.7.0
- `UM()->user()->remove_cached_queue()` without alternativities. It's unused since 2.5.0. Will be removed since 2.7.0
* Templates required update:
- password-change.php
- password-reset.php
* Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade
Download Ultimate Member Core Plugin v2.4.2 Nulled
= 2.4.2: July 14, 2022 =
* Bugfixes:
- Fixed: Member Directory vulnerabilities
- Fixed: 3rd-party integration with profile tabs and ability to show edit profile form on the 3rd-party profile tab
- Fixed: PHP fatal error on unset
- Fixed: select2 style conflicts with 3rd-party plugins
Download Ultimate Member Core Plugin v2.4.1 Nulled
= 2.4.1: June 13, 2022 =
* Enhancements:
- Added: Number-type Ultimate Member custom fields to the list of the sorting fields on the member directory
* Bugfixes:
- Fixed: XSS issue related to the JS confirmation and links with JS code inside
- Fixed: PHP error when `um_options` option in wp_options table doesn't exist or has wrong format
- Fixed: select2 styles for RTL languages
- Fixed: Using slashes in the `Choices callback` setting for the dropdown/multi-select fields. It's for the using PHP namespaces
- Fixed: Deleting `um_member_directory_data` user meta when user is deleted
- Fixed: Using special chars inside the password and avoid using "\" symbol (WordPress native logic)
- Fixed: Conflict when `wp_get_current_user()` not exists
- Fixed: Changed hook for member directory variables initialization for getting ability to use Ultimate Member hooks for customizing these variables via theme
- Fixed: Remove a redundant WP_Users_Query when getting empty `account_status` users