MC4WP: Mailchimp for WordPress

変更履歴

4.10.9 – Nov 28, 2025

• Specify apiVersion in call to registerBlockType so that WordPress 6.9 knows it can use the new iframe based editor.
• Add new setting to send an email for critical errors, like API errors returned by Mailchimp.

4.10.8 – Oct 21, 2025

• Show warning to administrators if a form is showing but Mailchimp API key is not set.
• Update third-party JS dependencies.

4.10.7 – Sep 05, 2025

• Handle renewing lists through server-side redirect instead of JS component.

4.10.6 – Jul 23, 2025

• [WooCommerce Checkout] Fix checkbox from showing up in order confirmation email if using Checkout Block.
• [Forms] Fix {response} tag being escaped.

4.10.5 – Jun 25, 2025

• [Ninja Forms] Always show at least one list option so that onchange event fires properly (to load Audience fields).
• Update third-party JS dependencies.
• Optimize SVG icons for reduced file sizes.

4.10.4 – May 26, 2025

• Improved context-dependent escaping in dynamic content tags.

4.10.3 – Apr 16, 2025

• Update third-party JS dependencies.
• Add message setting for when a form submission is marked as spam.
• Log exact anti-spam rule when a form submission is marked as spam.
• Handle potential Prosopo connection errors gracefully.

4.10.2 – Feb 28, 2025

• Fix WPForms parameter type change causing a fatal error if using WPForms with a Mailchimp sign-up field.
• Add Mailchimp data to Personal Data exporter. Contributed by David Anderson from UpdraftPlus.
• Prevent PHP notices in lists overview on general settings page.

4.10.1 – Feb 06, 2025

• Fix JS error breaking Ninja Forms edit form page when not connected to a Mailchimp account or account has no audiences.
• Remove sprintf usage in hot path.
• Lazy load MC4WP_API_V3 class to save some memory and parse time.
• Save a tiny bit of memory in autoloader implementation by not repeatedly storing plugin directory.
• Remove unused setting key from default options.

4.10.0 – Jan 23, 2025

• Bump required PHP version to 7.4 or higher.
• Obfuscate API key the same way as in the Mailchimp.com interface.
• Delete all plugin data when plugin is uninstalled / deleted via WP Admin.
• Fix several PHP 8.4 deprecation warnings.
• Address warning about translations being loaded too early if using Ninja Forms integration.
• Run stored setting values related to user-facing textual messages through i18n functions to allow translating them through plugins like Loco Translate or WPML.

4.9.21 – Jan 08, 2025

• [Forms] Rename “list choice” to “audience choice” in available form fields.
• [Ninja Forms] Fix gettext being called too early warning in Ninja Forms base class.
• [WooCommerce] Allow pre-checking of sign-up checkbox in Checkout Block.

4.9.20 – Dec 18, 2024

• Fix Ninja Forms integration field no longer showing up.
• Fix “link is expired” message because of missing nonce on button to dismiss API key notice.
• [WPML] Added text_no_lists_selected to the config file so it can be translated. Thanks Diego Pereira!

4.9.19 – Nov 11, 2024

• Add integration with Prosopo, a GDPR compliant anti-spam solution for protecting your sign-up forms against bot sign-ups. Thanks Maxim Akimov!

4.9.18 – Oct 21, 2024

• Bump required PHP version to 7.2.
• Prevent non-functional checkbox from showing up on WooCommerce my account page if WooCommerce checkout integration is enabled.
• Update default form content to include a “for” attribute on the label element.
• Minor performance optimizations to MC4WP_Form::get_subscriber_tags()
• Begrudgingly rename Mailchimp lists to Mailchimp audiences throughout the plugin’s admin interfaces.

4.9.17 – Sep 17, 2024

• Fix compatibility with WooCommerce versions 8.5 to 8.8 because of private method that was later made public.
• Fix potential reflected XSS by stripping and escaping all HTML from {email} tag replacements. Thanks to kauenavarro for responsibly disclosing.
• Fix potential stored XSS for attackers with both administrator access and Mailchimp account access by escaping HTML from interest group name. Thanks to Jorge Diaz (ddiax) for responsibly disclosing.

4.9.16 – Sep 11, 2024

• Add support for WooCommerce Checkout Block in sign-up checkbox integration.

4.9.15 – Aug 13, 2024

• Improved anti-spam measures on the custom form integration. If you are using the custom form integration (using the mc4wp-subscribe checkbox), please test your forms after upgrading and report any issues to us.
• Improved anti-spam measures on all sign-up forms.
• Remove unsupported filter hook from Gravity Forms integration.

4.9.14 – Jul 17, 2024

• Very minor code-size improvements to public forms related JavaScript.
• Update third-party JS dependencies.
• Bump tested WordPress version to 6.6.

4.9.13 – Apr 25, 2024

• Fix issue with Composer classmap throwing a fatal error when an older version of Composer is already loaded.

4.9.12 – Apr 22, 2024

• Fix last 10 Mailchimp lists not being pulled-in when having more than 10 lists.

4.9.11 – Jan 8, 2024

• Update third-party JS dependencies.
• Bump tested WordPress version.

4.9.10 – Nov 20, 2023

• Integrations: Update CheckoutWC hook name for WooCommerce checkbox integration.
• Forms: Don’t show form preview to users without edit_posts capability.
• Forms: Explicitly exclude form preview from search engine indexing.
• General: Don’t unnecessarily go through service contrainer while bootstrapping plugin.
• General: Remove some unnecessary JavaScript now that browser support has caught up.

4.9.9 – Oct 3, 2023

• Fix class “MC4WP_Usage_Tracking” not found error for WP Cron / WP CLI processes.

4.9.8 – Oct 3, 2023

• Remove the opt-in usage tracking functionality as we’re not really using it for decision making anymore.
• Add missing label element to the select element for setting the logging level.
• Our JavaScript assets are now transpiled to support the same set of browsers as WordPress core.
  This drops support for some very old browsers, but results in smaller bundle sizes for the supported set of browsers.
• Update third-party JS dependencies to their latest versions.

4.9.7 – Aug 29, 2023

• Update third-party JS dependencies.
• Minor textual improvements.
• Bump tested WordPress version.

4.9.6 – Jul 12, 2023

• Update third-party JS dependencies.
• Address some minor codestyle issues.

4.9.5 – Jun 7, 2023

• Fix generated HTML for list/audience choice fields.
• Fix deprecation warning in includes/admin/class-review-notice.php.
• Update JavaScript dependencies.

4.9.4 – May 2, 2023

• Fallback to default checkbox label if none given. Thanks to Shojib Khan.
• Improve WooCommerce integration settings page by disabling position field if integration is disabled. Thanks to Shojib Khan.
• Update JavaScript dependencies.

4.9.3 – Mar 31, 2023

• Defend against breaking change in latest WPForms update.

4.9.2 – Mar 21, 2023

• Add support for a field named MARKETING_PERMISSIONS to enable GDPR fields configured in Mailchimp. A sample code snippet can be found here.
• Remove Google reCaptcha feature. This was already disabled if you were not already using it.

4.9.1 – Feb 7, 2023

• Fix generated value attribute for fields of type choice (dropdown, checkboxes, radio fields).
• Fix type of marketing_permissions field in API requests. Thanks to George Korakas.
• Refactor list overview JS to not depend on Mithril.js anymore.
• Simplify admin footer text asking for a plugin review.
• When renewing lists, renew cached marketing permissions too.

4.9.0 – Jan 13, 2023

• Removed deprecated filter hook mc4wp_settings_cap, use mc4wp_admin_required_capability instead.
• Removed deprecated filter hook mc4wp_merge_vars, use mc4wp_form_data or mc4wp_integration_data instead.
• Removed deprecated filter hook mc4wp_form_merge_vars, use mc4wp_form_data instead.
• Removed deprecated filter hook mc4wp_integration_merge_vars, use mc4wp_integration_data instead.
• Removed deprecated filter hook mc4wp_valid_form_request, use mc4wp_form_errors instead.
• Removed deprecated function mc4wp_get_api() and deprecated class MC4WP_API.
• Removed deprecated function mc4wp_checkbox().
• Removed deprecated function mc4wp_form(), use mc4wp_show_form() instead.
• Added filter mc4wp_debug_log_message to modify or disable messages that are written to the debug log.
• Fix color of invalid Mailchimp API key notice.
• Sanitize IP address value from $_SERVER['REMOTE_ADDR'] too.
• Fetch GDPR marketing permissions via first subscriber on list and show them in lists overview table.

4.8.12 – Dec 06, 2022

• Minor performance, memory usage & size optimizations for all JavaScript code bundled with this plugin.

4.8.11 – Nov 1, 2022

• Improved default styling for the WooCommerce sign-up checkbox integration.
• Add <strong> to allowed HTML elements for GDPR disclaimer text on settings pages.
• Remove all references to obsolete placeholders.js polyfill.
• Move the GiveWP sign-up checkbox closer to the email input field. Thanks Matthew Lewis.

4.8.10 – Sep 14, 2022

• Fix mc4wp_get_request_ip_address() to return an IP address that matches Mailchimp’s validation format when X-Forwarded-For header contains a port component.

4.8.8 – Aug 25, 2022

• Fix mc4wp_get_request_ip_address() to pass new Mailchimp validation format. This fixes the “This value is not a valid IP.” error some users using a proxy may have been seeing.

4.8.7 – Mar 2, 2022

• Fix PHP 8.1 deprecation warnings in MC4WP_Container class.
• Fix name of action hook that fires before Mailchimp settings rows are displayed on the settings page. Thanks LoonSongSoftware.
• Improve WPML compatibility. Thanks Sumit Singh.
• Fix deprecated function for AMP integration.
• Only allow unfiltered HTML if user has unfiltered_html capability. Please read the below.

Despite extensive testing, we may have missed some more obscure HTML elements or attributes from our whitelist.
If you notice that some of your form HTML is stripped after saving your form, please get in touch with our support team and provide the HTML you attempted to save.

4.8.6 – Jun 24, 2021

• Add nonce field to button for dismissing notice asking for plugin review.
• Add strings from config/ directory to POT file.
• Add nonce check to AJAX endpoint for refreshing cached Mailchimp lists.
• Add capability check to AJAX endpoint for retrieving list details.
• Schedule event to refresh cached Mailchimp list upon plugin activation.

Thanks to the team over at pluginvulnerabilities.com for bringing some of these changes to our attention.

4.8.5 – Jun 1, 2021

Add nonce verification to all URL’s using _mc4wp_action query parameter.
This fixes a CSRF vulnerability where a malicious website could trick a logged-in admin user in performing unwanted actions.

A special thanks to Erwan from WPScan for bringing this issue to our attention.

4.8.4 – May 7, 2021

• Add defer attribute to JS file, so page parsing isn’t blocked at all.
• Rewrite plugin CSS to optimize for selector performance and get rid of some duplication.

After installing this update, make sure to also update any add-on plugins like Mailchimp for WordPress Premium and Mailchimp Top Bar.

4.8.3 – Jan 21, 2021

• Fix fatal error on older PHP versions when submitting form without any subscriber tags set in the form settings.
• Minor performance improvement in bootstrap method of the plugin.

4.8.2 – Jan 20, 2021

• Allow short-circuiting mc4wp_subscriber_data filter by returning null or false.
• Use a subdirectory for the default debug log file location, so that it’s easier to protect using htaccess.
• Improved reliability for fetching lists from mailchimp when lists have high stats.member_count property.

4.8.1 – Aug 25, 2020

• Fix notice by explicitly setting permission_callback on registered REST route.
• Minor internal code improvements.

4.8 – Jul 9, 2020

• Plugin now requires PHP 5.3 or higher.
• Prefix overlay classname to prevent styling collissions with other plugins.
• Form sign-ups can now add tags to both new and existing subscribers.
• Update JavaScript dependencies.
• Register script early to work with Gutenberg preview.

4.7.8 – Jun 04, 2020

• Add MC4WP_API_V3::add_template method.
• Minor code hardening to ensure a default form is always set.
• Update JS dependencies to their latest versions.
• Fix icon for Gutenberg block.

4.7.7 – Apr 28, 2020

• Update JS dependencies to their latest versions.
• API client add_list_member method now has an additional parameter to skip merge field validation.
• Simplify code for updating an existing form.

4.7.6 – Apr 9, 2020

• Update JS dependencies to their latest versions.
• Check if className is of type string, fixes a console warning when clicking inside a SVG element.
• Minor improvements to the AMP implementation to address harmless validation warnings.

4.7.5 – Feb 10, 2020

• Add AMP compatibility to sign-up forms, thanks to Claudiu Lodromanean. This uses the official AMP plugin for WordPress.
• Add settings key to WPML config so settings can easily by copied over to translated versions of a form.
• Optimize size & performance of JavaScript code, resulting in a file that is 40% smaller.
• Update CodeMirror to its latest version.
• Escape all string translations.

4.7.4 – Dec 7, 2019

修正

• htaccess config for servers running Apache 2.4 or later.

4.7.3 – Dec 4, 2019

修正

• Top Bar & User Sync add-on using API v2 since version 4.7.1.
• Revert change in formatter for date fields, breaking all forms with date fields in them.

改善

• Add getter method for raw (unmodified) data on form class.

4.7.2 – Nov 27, 2019

修正

• Invalid .htaccess file in case there already is one in the uploads directory.

4.7.1 – Nov 26, 2019

改善

• Update MemberPress hook names. Thanks Ian Heggaton!
• Use WordPress.org translations instead of bundling translation files in plugin itself.
• Write .htaccess to directory of debug log file, to …