Version 2.5.10.1 of Paid Memberships Pro is out with a couple of fixes. Specifically, this update fixes a bug in our getfile.php script, which can be used to lock down files with PMPro.

Version 2.5.10 of Paid Memberships Pro is out with a handful of bug fixes. Please update Paid Memberships Pro from the plugins page of your WordPress dashboard. You can also get the latest version of PMPro here or version 2.5.10 specifically here. The full list of updates is below. SECURITY: Fixed XSS vulnerability on the edit order page (more…)

Version 2.5.9.1 of Paid Memberships Pro is out with a single fix for the issue where admins were getting extra emails about membership level changes that weren’t happening. Please update Paid Memberships Pro from the plugins page of your WordPress dashboard. You can also get the latest version of PMPro here or version 2.5.9.1 specifically (more…)

Version 2.5.9 of Paid Memberships Pro is out with a handful of bug fixes. Specifically, we have reverted a change to the pmpro_is_checkout() function introduced in v2.5.8 that was causing all number of issues with form submissions and redirects on non-checkout pages.

Please update Paid Memberships Pro from the plugins page of your WordPress dashboard. You can also get the latest version of PMPro here or version 2.5.9 specifically here.

Version 2.5.8 of Paid Memberships Pro is out with 30 enhancements and bug fixes. Please update Paid Memberships Pro from the plugins page of your WordPress dashboard. You can also get the latest version of PMPro here or version 2.5.8 specifically here.

Version 2.5.7 of Paid Memberships Pro is out with a handful of bug fixes. These bugs have the potential to hinder sales, so be sure to upgrade. In particular, there are important updates to how subscriptions are handled when using the Braintree Gateway. If you are using Braintree Payments with recurring subscriptions, you will want (more…)

Version 2.5.6 of Paid Memberships Pro is out with 1 security fix and a handful of other bug fixes. Thank you to Gen Sato for the responsible disclosure of the security issue fixed in this release. This issue allowed users with user query access to execute a SQL injection, which could be used to update (more…)

Version 2.5.5 of Paid Memberships Pro is out with a handful of enhancements and bug fixes, including two security related updates. First, we have improved sanitization of parameters for some of our endpoints in the REST API. We are also now requiring reCAPTCHA even for logged in users when that feature is enabled for your checkout.

PMPro v2.5.4 is out with a handful of enhancements and bug fixes. Some of these bugs have the potential to hinder sales, so be sure to upgrade. This update fixes an issue introduced to our reCAPTCHA v2 code in v2.5.3. We have backported a fix for this bug, but anyone who upgraded to v2.5.3 already but doesn’t want to upgrade to v2.5.4 yet, can manually patch this issue by making the change here.