- Fixed: Password Confirm field and validation
- Fixed: Form Builder row editing
- Fixed: Spotify URL user URL display on user profile
- Fixed: Spotify URL validation
- Bugfixes:
- Fixed: Email notifications sending
- Fixed: File and Image uploaders and allowed types data for them
- Fixed: Content field-type editor in wp-admin Form Builder
- Fixed: Image and File uploaders max size saving in wp-admin Form Builder
* Enhancements:
- Added: Hook arguments ($form_id, $not_searched) to 'um_members_directory_head'
- Added: Using user locale `get_user_locale()` for localization with the 1st priority
- Added: Hooks to change the profile SEO image: 'um_profile_dynamic_meta_image_size', 'um_profile_dynamic_meta_image_type'
- Added: Filter for making 3rd-party roles editable through Ultimate Member interfaces. Use 'um_extend_editable_roles' and pass there an array of role keys( e.g. 'editor', 'administrator', etc. )
* Bugfixes:
- Fixed: Major issues with the Member Directory search line
- Fixed: Social links (Twitch, TikTok, Reddit) colors in profile header
- Fixed: Exclude registered date field from editable fields
- Fixed: Create the custom table for usermeta if does not exists
- Fixed: Locale loading time and hook for that
- Fixed: Used `wp_unslash()` for input POST data on Change Password
- Fixed: Role setting "Avoid indexing profile by search engines"
- Fixed: Date Picker field value format for 3rd-party integration meta fields
- Fixed: Last login timestamp being lost in the users cache
- Fixed: Textdomain typos
- Fixed: Small PHP warnings and notices
* Deprecated:
- Deprecated: VKontakte and Google+ predefined fields. VKontakte and Google+ fields validation changed to just URL validation.
* Templates required update:
- members.php
- Enhancements:
- Added: TikTok, Twitch and Reddit fields
- Added: Handler of restriction settings for blog page
- Added: Support of the <iframes> inside textarea with enabled the “HTML using” option
- Added: ‘um_get_field_date’ hook for filtering date fields
- Added: UM()->get_allowed_html() function for using it inside wp_kses allowed HTML tags
- Bugfixes:
- Fixed: Redirect to some links when content is restricted. Using esc_url_raw() instead of esc_url() for redirect to URLs inside class-access.php
- Fixed: Handle restriction settings for attachments, later hook is used for checking capabilities through current_user_can()
- Fixed: Honeypot triggering in password reset, when not set
- Fixed: Small PHP notices and warnings
* Bugfixes:
- Fixed: Plugin upgrade DB initialization and PHP Fatal Error.
* Enhancements:
- Added: Custom dropdown callback functions security enhancements. Avoid using blacklisted functions through namespace or uppercase format
- Added: Validation for upgrade package in wp-admin
- Added: `Change Password request limit` option for prevent from any brute-force attacks or password guessing with the form
- Added: Strong password checking for not using username|email inside the password
- Added: `um_custom_authenticate_error_codes` hook for handling 3rd-party login errors on UM invalid form
* Bugfixes:
- Fixed: Some texts sanitizing
- Fixed: PHP Error in url-type field on UM Forms
- Fixed: Using `wp_mkdir` to avoid the filesystem conflict when copy email template to theme
- Fixed: Password Reset URL generating
- Fixed: Multiple users approve
- Fixed: Using regular URL-type field for displaying
* Templates required update:
- members.php
* Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade
* Enhancements:
- Added: Custom fields callbacks blacklist. Use `um_dropdown_options_source_blacklist` filter for adding your custom functions to the custom callbacks blacklist. By default there are all PHP internal functions.
Download Ultimate Member Core Plugin v2.4.2 Nulled
= 2.4.2: July 14, 2022 =
* Bugfixes:
- Fixed: Member Directory vulnerabilities
- Fixed: 3rd-party integration with profile tabs and ability to show edit profile form on the 3rd-party profile tab
- Fixed: PHP fatal error on unset
- Fixed: select2 style conflicts with 3rd-party plugins
Download Ultimate Member Core Plugin v2.4.1 Nulled
= 2.4.1: June 13, 2022 =
* Enhancements:
- Added: Number-type Ultimate Member custom fields to the list of the sorting fields on the member directory
* Bugfixes:
- Fixed: XSS issue related to the JS confirmation and links with JS code inside
- Fixed: PHP error when `um_options` option in wp_options table doesn't exist or has wrong format
- Fixed: select2 styles for RTL languages
- Fixed: Using slashes in the `Choices callback` setting for the dropdown/multi-select fields. It's for the using PHP namespaces
- Fixed: Deleting `um_member_directory_data` user meta when user is deleted
- Fixed: Using special chars inside the password and avoid using "\" symbol (WordPress native logic)
- Fixed: Conflict when `wp_get_current_user()` not exists
- Fixed: Changed hook for member directory variables initialization for getting ability to use Ultimate Member hooks for customizing these variables via theme
- Fixed: Remove a redundant WP_Users_Query when getting empty `account_status` users