Release Announcements

It was only two short weeks ago that 2.9.0 was put into production. As some of you know, I do live in fear of releasing updates. Even though I test and evaluate prior to a release, there is always something that comes up after the fact. With the significant rebuild of the form building function in 2.9.0, I was especially concerned about how smooth the process would be.  Continue Reading →

WP-Members 2.9.0 is nearly done and is now available for testing. This version has been in the works for quite some time. I started the build early last fall. It has taken some time to get everything up to the point where the package is really ready because I have incorporated a number of new features that required some major code overhaul in a few places.  Continue Reading →

If you would like to try out the bleeding edge version of the plugin, I am making the 2.9 alpha versions available.

The components that I expected to update for 2.9 are now completed and I am expecting that at this point we will not be adding new features beyond what is currently included.  It should be noted that I have said that before, and that usually means that something will come up that I will want to add, so consider that the caveat.

Stability testing will now begin in earnest and I hope to move the project forward to beta release soon.  I would like to have 2.9 ready for production by the end of January, but that is only a target.  It could go faster or slower than that.  Continue Reading →

WP-Members 2.8.10 was released today.  This was an unexpected, but important security update.

Some of you may have noticed that for a period of time today, WP-Members was unavailable in the wordpress.org repository.  This was because there was a security vulnerability discovered in the plugin.  It is the policy of wordpress.org to remove any plugin that has a vulnerability until that issue is resolved.

I was notified of this issue at approximately 10:40 central time today.  By 12:30, I had created a patch which was tested and loaded to the repository by 2:00.  The plugin team at wordpress.org tested this new version and restored the plugin to the repository by 8:00.

I appreciate the prompt communication from the wordpress.org team.  We all take security seriously and their prompt contact with me allowed for a very quick turnaround in getting this fix out the door.

You might be wondering if you are affected by the vulnerability.  The issue actually only affects those users that use the WP-Members custom fields on the WordPress default backend registration (wp-login.php?action=register) instead of the plugin’s default frontside registration.  Since this is a feature that was only recently added specifically for users who did not read the plugin’s installation instructions, I suspect that this is only used by a small number of users (especially since the plugin’s default installation gives you a message to turn this off).

Regardless, I still recommend the update.

If you have any questions, please contact me.