Download Manager

変更履歴

3.3.66 – 2026.07.17

• Security: Author+ Stored Cross-Site Scripting via Package Title – the title was run through stripcslashes() when rendered, which decoded C-style escape sequences back into active markup after save-time sanitization had already accepted them; the title is no longer decoded and is now escaped on output ( Reported by WordPress Plugin Review Team )
• Security: Removed the same escape-sequence decoding from the package description and excerpt, which were open to the identical Author+ Stored XSS vector; the excerpt is now sanitized with wp_kses_post() instead of a filter that only stripped script tags
• Security: The package title and page URL are now escaped where they are substituted into the QR code image attributes
• Security: Removed the unauthenticated POST /wpdm/view-count REST route, which let anyone increment the view counter meta on any post ID; the route was unused, as view counts are recorded through the wpdm_view_count ajax action
• Security: The view count handler now verifies its nonce, which had been left commented out, and only accepts wpdmpro packages, so the counter meta can no longer be created on unrelated posts and pages

3.3.65 – 2026.07.12

• Fixed: The [wpdm_changelog] shortcode rendered unstyled, because its markup was emitted without the wrapper element that the front-end stylesheet scopes every changelog rule to

3.3.64 – 2026.07.12

• Fixed: The [changelog] template tag rendered unstyled, because the front-end stylesheet still targeted an older markup structure – entry content was hidden outright, the timeline had no layout and the icons rendered at their oversized default dimensions
• Fixed: Changelog toggling stopped working entirely on pages holding more than one changelog, where every entry picked up a duplicate click handler that cancelled itself out
• Improved: Changelog toggle buttons now expose their expanded state to assistive technology, and the newest release is highlighted in both light and dark mode

3.3.63 – 2026.07.06

• New: Activity Reports – scheduled weekly or monthly summary emails covering downloads, top packages, trending items, user activity, category breakdown and storage usage, with configurable sections, recipients, schedule and a test-report option
• New: Cron Jobs settings tab showing background job stats, job history and scheduled events
• Improved: Rebuilt the background job system with job queues, priorities, automatic retries and job locking; job handlers are now whitelisted for security
• Improved: Legacy confirmation dialogs now route through the WPDM dialog system with proper button styling and a graceful fallback when the dialog script is unavailable
• Fixed: The “require admin approval” check now applies to every authentication flow, so unapproved accounts can no longer sign in through flows that skip the username parameter
• Fixed: PHP warning for an undefined variable during authentication
• Fixed: The [changelog] template tag is now parsed in package page templates, so the changelog timeline renders instead of printing the raw tag
• Fixed: The [hide_empty:tag] template tag no longer leaks into the markup when the target tag has a value

3.3.62 – 2026.07.02

• Improved: Expirable download link handling
• Improved: Emailed and shareable download links are now kept in a durable, indexed store instead of post meta, so they survive cache clears and no longer bloat package meta
• Improved: Indexed the sessions table and stopped duplicate-row accumulation for faster temporary-token lookups and cleanup
• Security: Added directory-traversal containment to the protected media file handler so the wpdmmedia parameter cannot resolve to files outside the uploads directory
• Security: Media password verification now requires the item to be private with a non-empty password and uses a strict comparison
• Security: Hardened the modal login form redirect field ( REQUEST_URI ) with esc_url() output escaping
• Security: Authenticated (Contributor+) Stored Cross-Site Scripting via the note_before and note_after attributes of the wpdm_reg_form shortcode ( Reported by Wordfence )
• Security: Temporary download link tokens ( _wpdmkey ) are now generated with a cryptographically secure generator instead of uniqid() ( Reported by Pedro Pinho )
• Security: Download links issued after a password, captcha or role lock are now bound to the originating session and can no longer be reused from a different device or session if the link is leaked ( Reported by Pedro Pinho )

3.3.61 – 2026.06.29

• Fixed: Authenticated (Contributor+) Stored Cross-Site Scripting via the no_data_msg attribute of the wpdm_all_packages shortcode ( Reported by Wordfence )

3.3.60 – 2026.06.28

• Fixed: Stats history page no longer sends stored visitor IP addresses to the external geolocation API when IP handling is disabled ( __wpdm_noip )
• Fixed: Stats history page now loads the bundled local Select2 assets instead of an external CDN ( supply-chain hardening )
• Fixed: Escaped the visitor IP in the ip-api.com lookup links on the stats history page

3.3.59 – 2026.06.28

• Fixed: Authenticated (Contributor+) Stored Cross-Site Scripting via the not_found attribute of the wpdm_packages shortcode ( Reported by Wordfence )
• Improved: Modernized admin dialogs by routing alert/confirm/popup modals and the password generator through the WPDM dialog system
• Improved: Redesigned the Add-Ons page with a modern, card-based UI
• Improved: Category filter on the Add-Ons page now shows the add-on count for each category
• Fixed: Social media icons in email templates no longer render with an empty link when the profile URL is left blank

3.3.58 – 2026.06.16

• New: Category filter dropdown on the package list table
• New: Sortable “Views” column on the package list table
• New: Inline status badges ( No file attached / Locked / Password ) on the package list
• New: Bulk actions to duplicate packages and reset download count
• Fixed: Reflected XSS via the REFERRER parameter on the download lock iframe ( Reported by Wordfence )

3.3.57 – 2026.05.28

• Hardened: Use prepared statement in TempStorage::get() as a defense-in-depth measure against SQL injection

3.3.56 – 2026.05.26

• Compatibility update for WorPress 7.0
• Fixed: XSS issue in download history page ( Reported by Jungnickel, Luca Moritz )

3.3.55 – 2026.05.04

• Improved: Crypt class
• Improved: Sanitization function

3.3.54 – 2026.04.15

• Fixed: Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes ( Reported by Patchstack )
• Fixed: An UI issue with the asset manager file settings

3.3.53 – 2026.04.08

• Fixed: Authenticated (Contributor+) Stored Cross-Site Scripting via icon input ( Reported by Wordfence )

3.3.52 – 2026.03.27

• Fixed: Missing Authorization to Authenticated (Contributor+) Media File Protection Removal ( Reported by Wordfence )

3.3.51 – 2026.02.19

• Improved: Page templates
• Fixed: Issue with the modal login form

3.3.50 – 2026.02.16

• Fixed: Missing Authorization to Authenticated (Subscriber+) User Email Enumeration via ‘user’ Parameter ( Reported by Wordfence )

3.3.49 – 2026.02.16

• Fixed: Issued with the user interface color selection
• Fixed: Fixed an issue with email validation before download
• Improved: All page templates

3.3.48 – 2026.02.06

• Fixed: An issue with the lock options modal

3.3.47 – 2026.02.06

• Fixed: Security vulnerability – Reflected XSS in login form redirect parameter
• Added: New modal dialog system with AJAX content loading support
• Improved: Front-end UI

3.3.46 – 2026.01.15

• Redesigned email templates
• Improved light/dark mode support

3.3.45 – 2026.01.13

• Added 2 new link templates: Glassmorphism Card and Spotlight Hero
• Added reCAPTCHA test widget in admin settings to verify configuration
• Added detailed error messages with troubleshooting guidance for reCAPTCHA errors
• Added HTTP referrer restriction warning for reCAPTCHA API keys
• Improved email templates

3.3.44 – 2026.01.07

• Migrated reCAPTCHA to reCAPTCHA Enterprise API for improved security and bot protection
• Added Google Cloud Project ID field in reCAPTCHA settings
• Updated reCAPTCHA verification to use Google Cloud assessments API

3.3.43 – 2026.01.06

• Fixed welcome page redirect not triggering on plugin activation
• Added “Restart Setup Wizard” link to quick actions page
• Improved activation redirect reliability

3.3.42 – 2026.01.06

• Removed auto-redirection to wpdm login page
• Redesigned welcome/onboarding page with modern card-based UI
• Improved first-time user setup experience

3.3.41 – 2026.01.04

• Improved: front-end UI
• Fixed: Security vulnerability in Crypt.php – Addressed CBC bit-flipping attack vector by implementing proper authentication/integrity checks for encrypted data ( Reported by Wordfence )

3.3.40 – 2025.12.26

• Fixed an issue with the all package table
• Improved front-end and admin UI

3.3.39 – 2025.12.23

• Fixed a fatal error with Session class during early WordPress initialization
• Added fallbacks for WordPress functions not available during plugin loading
• Improved compatibility with various server configurations

3.3.38 – 2025.12.23

• Added Color Scheme option (System/Light/Dark) in UI settings
• Modernized front-end CSS with dark mode support
• Added changelog component for file uploads with timeline UI
• Fixed and issue with the Google font preview
• Improved download link generation performance by priming meta caches
• Optimized Session class with in-memory caching and prepared statements
• Optimized Query class with cache priming and batch term lookups

3.3.37 – 2025.12.17

• Enhanced admin interface for an improved user experience

3.3.36 – 2025.12.11

• Enhanced server file picker
• Revamped admin UI for a smoother user experience
• Updated package description rendering with improved link templating

3.3.35 – 2025.12.11

• Fixed an issue with the package description rendering.

3.3.34 – 2025.12.10

• Fixed an issue with the terms lock option.

3.3.33 – 2025.12.08

• Fixed the nonce check issue with the media protection function ( Reported by Wordfence )
• Improved front-end and admin ui

3.3.32 – 2025.11.05

• Fixed an issue with the asset manager file picker

3.3.31 – 2025.11.05

• Improved cron job functions
• Improved ad blocker detection features

3.3.30 – 2025.10.28

• Fixed an issue with the cron job functions ( Reported by Wordfence )
• Added a new option to display custom messages and disable download link when ad-blocking extensions are detected.

3.3.29 – 2025.10.20

• Fixed an issue with the asset manager pagination

3.3.28 – 2025.10.15

• Fixed an issue with the download link options modal popup

3.3.27 – 2025.10.09

• Fixed the display issue with the Generate Download Link modal

3.3.26 – 2025.10.07

• Fixed a CSS issue with the asset manager scroll bar
• Fixed an issue with the stats filtering options
• Updated vue js integrations

3.3.25 – 2025.10.01

• Removed bootstrap dependency
• Updated vue js
• Fixed an issue with the premium package add-on activation ( Reported by Ananda Dhakal from Patchstack )
• Fixed an issue with the lock option iframe ( Reported by Ananda Dhakal from Patchstack )

3.3.24 – 2025.09.16

• Fixed an issue with the download stats page ( reported by Wordfence )

3.3.23 – 2025.09.04

• Improved download stats page

3.3.22 – 2025.09.01

• Fixed an sanitization issue with the all downloads short-code
• Improved cron-job routine

3.3.21 – 2025.08.21

• Improved front-end user dashboard

3.3.20 – 2025.08.06

• Fixed an IPv6 compatibility issue with the wpdm stats data

3.3.19 – 2025.06.18

• Fixed an sanitization issue with the image alt attribute in wpdm_thumb function ( Reported by Wordfence )

3.3.18 – 2025.06.10

• Improved MimeType validation function
• Fixed a post content sanitization issue

3.3.17 – 2025.05.07

• Fixed a compatibility issue with Dropbox integration

3.3.16 – 2025.05.07

• Fixed an issue with the getMimeType function

3.3.15 – 2025.05.01

• Fixed an issue with the URL validation function
• Fixed an issue with the modal login form

3.3.14 – 2025.04.21

• Improved mime type detection function
• Compatibility update for WorPress 6.8

3.3.13 – 2025.04.17

• Improved file upload functions, added validation for uploaded file type ( Issue reported by siavashvafshar )
• Fixed an issue with the file deletion ( Issue reported b Brian Sans-Souci and the sneaky squirrel )

3.3.12 – 2025.04.07

• Improved codebase
• Resolved an issue with attaching files from cloud storage

3.3.11 – 2025.03.24

• Improved URL validation function

3.3.10 – 2025.03.23

• Fixed an issue with functions handling password-protected media files

3.3.09 – 2025.03.10

• Improved front-end ui
• Fixed an issue with the Asset Manager ( Reported by Wordfence )

3.3.08 – 2025.02.05

• Fixed an issue with translation
• Improved sanitization function

3.3.07 – 2025.01.24

• Improved front-end UI
• Fixed an issue with directory browsing

3.3.06 – 2025.01.15

• Removed FontAwesome from front-end
• Fixed an issue with the login form

3.3.05 – 2025.01.08

• Removed bootstrap to minimize javascript and css overload
• Improved UI options

3.3.04 – 2024.12.05

• Fixed an issue with the media access control function ( reported by Rafie Muhammad from Patchstack )
• Fixed an issue with the shortcode-iframe page ( reported by Emiliano Versini to Wordfence )
• Fixed an issue with the password lock ( reported by mikemyers to Wordfence )

3.3.03 – 2024.11.27

• Fixed an issue with the input sanitization in ui settings

3.3.02 – 2024.10.29

• Fixed an issue with the database update option

3.3.01 – 2024.10.29

• Fixed an issue with user interface ui settings
• Added custom cron job manager to handle various wpdm cron job efficiently

3.3.00 – 2024.10.09

• Fixed a parameter sanitization issue with short-code [wpdm_login_form]

3.2.99 – 2024.09.13

• Improved settings options
• Fixed an input sanitization issue ( Reported by Animesh from WPScan )

3.2.98 – 2024.07.28

• Fixed a shortcode parameter sanitization issue with the all downloads shortcode ( reported by Jack Taylor from Wordfence )

3.2.97 – 2024.07.08

• Compatibility update for WorPress 6.6

3.2.96 – 2024.06.10

• Fixed an issue with email template editor
• Updated email templates

3.2.95 – 2024.06.04

• Fixed an issue with the wpdm_all_packages shortcode

3.2.94 – 2024.06.03

• Fixed a parameter sanitization issue with the wpdm_modal_login_form shortcode

3.2.93 – 2024.06.03

• Fixed an input sanitization issue with wpdm_all_packages shortcode ( Reported by WordFence )
• Fixed an issue with the master key validation
• Added option to enable/disable email

3.2.92 – 2024.05.03

• Improved media library file protection option

3.2.91 – 2024.05.03

• Fixed an issue with allowed path check function in file system class
• Fixed an issue with the media library protection function
• Fixed an input sanitization issue with all packages/downloads shortcode

3.2.90 – 2024.04.18

• Fixed a security issue with protected media file download

3.2.89 – 2024.03.27

• Fixed a javascript issue with the login form
• Fixed a UI issue with the media access control

3.2.88 – 2024.03.19

• Fixed a plugin conflict issue with the login form short-code

3.2.87 – 2024.03.18

• Fixed an issue with the category link shortcode
• Fixed an issue with the private package download link
• Fixed an issue with the file size calculation
• Improve input sanitization function
• Fixed an issue with file browser base dir path in Windows server
• Fixed an XSS issue with the front-end edit profile page

3.2.86 – 2024.02.24

• Fixed short-code parameter sanitization issue with category and direct download shortcodes

3.2.85 – 2024.02.20

• Added new option to search package icons online
• Fixed input sanitization issues with short-code parameters
• Improved WPDM Query class

3.2.84 – 2024.01.16

• Added new option to enable/disable password strength validation during signup

3.2.83 – 2023.12.01

• Fixed an issue with the password validation for password-protected files

3.2.82 – 2023.11.15

• Introduced a new constant WPDM_TAG to change wpdm tag taxonomy name
• Fixed the issue with the sorting with file size in all downloads table

3.2.81 – 2023.11.01

• Added password strength indicator with password field in signup form
• Added option to disable master download link

3.2.80 – 2023.09.22

• Fixed an issue with missing text in translation file
• Optimized codebase

3.2.79 – 2023.09.19

• Updated email templates
• Compatibility update for new WordPress plugin guidelines

3.2.78 – 2023.09.13

• Fixed an issue with the file attachment check function

3.2.77 – 2023.09.13

• Fixed an issue with the modal login form
• Improved file attachment option
• Updated font awesome
• Fixed an issue with the user agent handling class

3.2.76 – 2023.07.31

• Fixed an issue with the wpdm session conflict with client and server side

3.2.75 – 2023.07.31

• Compatibility update for WordPres 6.3
• Fixed an issue with the password protected media files
• Improved asset manager

3.2.74 – 2023.07.11

• Added a new hook to control frontend styles
• Added a shortcode parameter to add custom message to show when no package found

3.2.73 – 2023.06.14

• Improved admin options for link/page templates
• Improved page settings options

3.2.72 – 2023.05.19

• Improved download stats
• Fixed a shortcode parameter sanitization issue with the all downloads table and modal login form

3.2.71 – 2023.05.01

• Fixed an issue with password lock option and expirable download links
• Fixed a parameter sanitization issue with the members short-code
• Fixed a parameter sanitization issue with the login form short-code
• Fixed a parameter sanitization issue with the signup form short-code
• Fixed a char encoding issue with file passwords
• Introduced 3 constants WPDM_DISABLE_REMOTE_URL_ATTACHMENT, WPDM_DISABLE_MEDIA_ATTACHMENT, WPDM_DISABLE_SERVER_FILE_ATTACHMENT, in case you want to disable any of the file attachment option

3.2.70 – 2023.03.30

• Optimized link/page template
• Compatibility update for WordPress 6.2

3.2.69 – 2023.03.15

• Redesigned admin settings ui
• Fixed an issue with the password lock option

3.2.68 – 2023.03.09

• Improved asset manager
• Fixed an issue with the media access control

3.2.67 – 2023.02.12

• Fixed a pagination issue with the asset manager

3.2.66 – 2023.01.23

• Fixed an issue with the user signup function
• Added pagination support with the asset manager
• Added file search option with the asset manager
• Improved file upload function

3.2.65 – 2023.01.04

• Improved email templates
• Improved internal codebase

3.2.64 – 2022.12.27

• Fixed an issue on the settings page generated from the previous version

3.2.63 – 2022.12.27

• Fixed input sanitization issue with image selector option field function
• Fixed an issue with the text domain

3.2.62 – 2022.12.19

• Fixed an input sanitization issue with modal login form shortcode
• Added new link template

3.2.61 – 2022.12.11

• Improved session management
• Introduced custom cron url ( Settings >> Privacy >> Cache & Stats ) to clear cache, you can use the URL

3.2.60 – 2022.11.29

• Fixed an input validation issue with the search bar in wpdm shortcodes
• Added a new page template

3.2.59 – 2022.11.02

• Improved admin options
• Fixed a notice with all files table shortcode

3.2.58 – 2022.10.17

• Fixed an issue with sorting by download count for packages shortcode
• Fixed an issue with absolute path recovery for Windows server

3.2.57 – 2022.09.22

• Fixed an issue with the view count function

3.2.56 – 2022.09.08

• Fixed case sensitive file extension issue

3.2.55 – 2022.08.31

• Fixed an issue with file browser root dir selection
• Fixed an issue with URL encoding

3.2.54 – 2022.08.22

• Improved asset manager
• Updated font awesome
• Fixed a few input sanitization and escape output issues

3.2.53 – 2022.08.03

• Fixed an issue with the REQUEST_URI sanitization in modal login form

3.2.52 – 2022.07.28

• Fixed an issue with the insert url option

3.2.51 – 2022.07.27

• Revalidated attached file to avoid any blocked file type attachment

3.2.50 – 2022.07.26

• Added option to allow/disallow proxy IP, disallowed by default

3.2.49 – 2022.07.06

• Fixed several Authenticated Persistent XSS Issues, special thanks to m0ze

3.2.48 – 2022.07.03

• Improved admin UI
• Rechecked code and fixed 2 issues with esc attr

3.2.47 – 2022.06.30

• Fixed input filtering issue with the Insert URL option

3.2.46 – 2022.06.29

• Fixed input filtering issue with the Insert URL option

3.2.45 – 2022.06.23

• Internal codebase update

3.2.44 – 2022.06.23

• Improved email template options
• Internal codebase improvements
• Fixed 2 input sanitization issues with download history and login form template

3.2.43 – 2022.06.02

• Fixed an input sanitization issue with shortcode iframe

3.2.42 – 2022.05.31

• Compatibility update for WordPress 6.0
• Improved asset manager
• Improved default email template
• Improved stats and history

3.2.41 – 2022.05.04

• Improved select2 ui
• Fixed an issue with template path detection
• Fixed the password validation issue with the password lock
• Fixed ssl error issue with the QR code template tag
• Fixed the file download issue for the files when file name starts with space

3.2.40 – 2022.04.12

• Fixed an issue with the password reset form

3.2.39 – 2022.03.14

• Improved master key option
• Fixed an issue with the css variable for Google web font

3.2.38 – 2022.03.08

• Improved all downloads table, added support for wpdm acf add-on

3.2.37 – 2022.02.17

• Compatibility update for wp 5.9
• Improved admin options
• Fixed an issue with the category shortcode

3.2.36 – 2022.02.02

• Adjusted a backward compatibility issue for older php version
• Fixed several variable escaping issues

3.2.35 – 2022.01.25

• Fixed an issue with the password validation

3.2.34 – 2022.01.11

• Fixed data sanitization issue on stats page
• Optimized json api calls

3.2.33 – 2022.01.11

• Codebase optimization
• Changed name from WordPress Download Manager to Download Manager

3.2.32 – 2021.12.21

• Fixed a wpdm add-on compatibility issue

3.2.31 – 2021.12.21

• Improved input sanitization options

3.2.30 – 2021.12.27

• Improved input sanitization options

3.2.29 – 2021.12.24

• Fixed an undefined index notice on download page

3.2.28 – 2021.12.24

• Fixed several input sanitization issues

3.2.27 – 2021.12.20

• Improved add-ons page

3.2.26 – 2021.12.09

• Adjusted some data sanitization issues

3.2.25 – 2021.12.06

• Improved admin ui

3.2.24 – 2021.11.26

• Fixed file path issue for wpdm-admin.js

3.2.23 – 2021.11.25

• Fixed some sanitization issues
• Removed chosen js library, using select2 now

3.2.22 – 2021.11.24

• Fixed a security issue with the email template editor

3.2.21 – 2021.11.23

• Added option to delete file from server
• Improved admin UI
• Fixed an issue with temp storage option

3.2.20 – 2021.10.24

• Added function to clear temp storage and clear session data with Clear All Cache Button
• Improved ui options

3.2.19 – 2021.10.21

• Fixed an issue with cache storage setting

3.2.18 – 2021.10.06

• Remove mbstring dependency

3.2.17 – 2021.10.06

• Fixed a sanitization issue with the wpdm client cookie
• Fixed js undefined variable issue with the modal login form

3.2.16 – 2021.09.27

• Fixed an issue with the pagination function
• Improved UI class
• Improved category and packages shortcode
• Fixed package sorting issue with the category and package shortcode
• Fixed RTL layout issue with wpdm admin settings page

3.2.15 – 2021.08.18

• Improved session manager class
• Fixed an issue with with asset access checking function
• Fixed an issue with the WidgetController class

3.2.14 – 2021.08.16

• Fixed an issue with template file detection in child theme
• Fixed file delete option with the asset manager

3.2.13 – 2021.08.04

• Fixed a security issue around email template function
• Fixed an issue with the wpdm tag query
• Fixed site url tag issue with the email message

3.2.12 – 2021.07.26

• Fixed an issue with recaptcha lock
• Fixed an issue with the text domain

3.2.11 – 2021.07.15

• Fixed an naming conflict with an widget
• Added 2 new filter hooks wpdmpro_single_main_query and wpdmpro_single_main_loop to resolve file page rendering issue outside of main loop/query

3.2.10 – 2021.07.14

• Fixed an issue with plugin update notice

3.2.09 – 2021.07.14

• Improved query class
• Fixed issue with text domain in login form template & edit profile template

3.2.08 – 2021.07.12

• Fixed an issue with the file type icon
• Added a new filter hook wpdm_file_type_icon
• Fixed issue with widget namespace
• Fixed an issue with tag query

3.2.07 – 2021.07.09

• Restored default link template to link-template-default
• Restored wpdm file url slug to download

3.2.06 – 2021.07.08

• Fixed an issue with the doc viewer

3.2.05 – 2021.07.07

• Fixed the issue with the reCaptcha lock
• Fixed icon issue with the all files table

3.2.04 – 2021.07.06

• Fixed thumbnail issue with link-template-bsthumnail
• Added option to hide admin notice for add-on update
• Fixed an issue with the Top Downloads widget

3.2.03 – 2021.07.05

• Fixed the issue with the file duplicate option

3.2.02 – 2021.07.05

• Re-added missing link and page templates

3.2.01 – 2021.07.05

• Fixed an issue with file listing

3.2.00 – 2021.07.04

• Rebuilt codebase from the ground
• Refreshed UI
• Improved asset manager
• Custom taxonomy ( wpdmtag ) as download/file tag

3.1.28 – 2021.06.07

• Fixed file upload issue with the asset manager
• Fixed an issue with the password lock option

3.1.27 – 2021.05.07

• Fixed an issue with file type validation in file download function

3.1.26 – 2021.05.07

• Improved file type validation function

3.1.25 – 2021.05.05

• Fixed an security issue with link/page template file path, thanks for Wordfence for pointing the issue.

3.1.24 – 2021.05.01

• Fixed an issue with user downoad count table creation
• Fixed and issue with stats filtering options

3.1.23 – 2021.04.27

• Improved asset manager

3.1.22 – 2021.04.22

• Fixed settings save issue with plugin update settings

3.1.21 – 2021.04.21

• Fixed an issue with server file picker

3.1.20 – 2021.04.20

• Fixed an issue with asset manager dir explorer

3.1.19 – 2021.04.20

• Fixed 3 security issues and improved security with file upload, asset manager access, settings options. Special thanks to WPScan and Darius Sveikauskas for pointing those issues.

3.1.18 – 2021.04.16

• Fixed an issue with the file copy/duplicate option

3.1.17 – 2021.04.08

• Adjusted shortcode column, removed the popup trigger button and reinstated the preview text field showing the shortcode

3.1.16 – 2021.03.23

• Fixed the issue with the password reset form
• Fixed 2 undefined variable notice in class.Package.php
• Fixed 1 undefined variable notice in class.Email.php

3.1.15 – 2021.02.24

• Fixed an issue user agent detection
• Added new option to duplicate downloads
• Improved shortcode column
• Improved Query class

3.1.14 – 2021.02.09

• Fixed an issue with the file size function
• Fixed an issue with UI selection option

3.1.13 – 2021.01.28

• Fixed an issue with the terms lock
• Fixed an UI issue with the asset manager file editor

3.1.12

• Improved terms lock option
• Added zip and unzip option with the asset manager
• Extended download history feature

3.1.11

• Improved asset manager
• Fixed the issue with displaying download count
• Fixed the date format issue with download history

3.1.10

• Improved email class, added support for custom tags in email to add user meta and REQUEST data

3.1.09

• Improved Crypt class
• Fixed an issue with the category shortcode

3.1.08

• Fixed an issue with the login form parameter handling

3.1.07

• Fixed a security issue ( Thanks to Austin Turecek, security research from Flashpoint )

3.1.06

• Compatibility update for WordPress 5.5

3.1.05

• Fixed an issue with the view counter
• Fixed an issue with modal popup

3.1.04

• Fixed an issue with the media library file protection
• Optimized frontend UI

3.1.03

• Fixed an issue with the login form captcha validation
• Added options to enable/disable login/register form captcha from basic settings
• Improved search widget

3.1.02

• Added new option to mask/unmask download link
• Fixed issue with the class.ShortCode.php, added a missing method

3.1.01

• Fixed an issue with class.UI.php

3.1.0

• Fixed the issue with PHP 5.6 compatibility

3.0.99

• Fixed the issue with terms lock
• Fixed the issue with reCaptcha overlap between modal login form and signup form
• Fixed the style issue with the all downloads table

3.0.98

• New options to customize category page styles
• Improved register and login form shortcodes
• Improved data table view

3.0.97

• Improved asset manager
• Fixed an issue with category handler
  …