Limited-Time Offer

Get Extra 20% off on FullCharge Yearly Plan — available for first 10 users only. Don’t miss out! 🚀

TrackWP

Advanced iFrame · Version history

Advanced iFrame changelog and version history

Latest version
2026.5
Nov 2, 2026 (6 days ago)
Releases
10
since 2011
In the last year
4
about one every 105 days
Tested up to
WordPress 7.1.4
PHP 7.4 or later

Releases each year

  • 20111 release
  • 20132 releases
  • 20241 release
  • 20253 releases
  • 20263 releases

20263 releases

  1. Advanced iFrame 2026.5Latest

  2. Advanced iFrame 2026.3

    • New: Added the AI Assistant: https://www.advanced-iframe.com/advanced-iframe-ai-assistant
    • New: A new template for the pro version was added to enable google analytic tracking in the iframe in js/ai_post_message_converter_google_analytics_template.js. Check the documentation in this file.
    • New: The active tab is now remembered after a page reload
    • New: Tested with WordPress 7.1.2
    • New: Updated Freemius to v2.13.4
    • Fix: Admin styles optimized for WordPress 7

  3. Advanced iFrame 2026.0

    • Breaking change: Due to the security fix for “Add iframe URL as param” and “Prefix/id/urlrewrite for iframe URL,” the hash/hashrewrite needs to be set in both the administration AND the shortcode.
    • Breaking change: The postMessage send from the iframe is only processed if the feature is enabled. This was added for: “Add iframe URL as param”, “Use the iframe title for the parent”, “Include content directly from the iframe”. Please read the updated documentation. Most users will not have to do…
    • Security fix: The feature “Include content directly from the iframe” was accepting any postMessage in the correct structure and adding it to the parent page. Now the feature needs to be enabled and also the input is sanitized by removing all script tags. If you enable this feature only the configur…
    • Security fix: Cross-Site Scripting (XSS) was reported by Patch Stack. The setting additional_height has now XSS detection. The same sanitation was also applied to iframe_zoom and onload_scroll_top. See https://www.wordfence.com/threat-intel/vulnerabilities/id/dcdcb29e-48d0-4e22-8e11-0c76b4355268 an…
    • Security fix: Broken Access Control reported by the patch stack has been fixed. There is no official CVE number yet. The URL cache is now a first-in, first-out (FIFO) cache and cannot be fully filled anymore. The cache is now only active if “Add iframe URL as param” with hash/hashrewrite is enabled…
    • Security fix: At hide_part_of_iframe the URL was escaped with esc_html and not esc_url. Now settings like javascript:alert%28document.domain%29 are removed.
    • New: Tested with WordPress 6.9.1
    • New: Tested with PHP 8.5. The entire code was also analyzed with ChatGPT 5.2, which reported no breaking changes.
    • New: The minimum PHP version has been increased to 7.4. While the plugin itself still works with lower versions, such PHP versions are insecure and should no longer be used!
    • New: The minimum WordPress version was increased to 5.5. The plugin works with older versions of WordPress, but they are insecure and should not be used.
    • Fix: user meta and user info data output is using esc_html to avoid that invalid data can cause any issues.
    • Fix: The debug console has now removed any global background image from its div to always be displayed properly.
    • Fix: id could be set to empty which leads to issues in the Javascript. Not it is mandatory and checked in the administration and in the external workaround.
    • Fix: Changed the demo link from “Use the iframe title for the parent” from the general demo page to the sub demo where it is used.
    • Fix: The style shortcode attribute is now always concatenated with a ;

20253 releases

  1. Advanced iFrame 2025.10

    • New: Tested with WordPress 6.9
    • New: Updated Freemius to v2.13.0

  2. Advanced iFrame 2025.6

    • Security fix: Vulnerability Title: Advanced iFrame <= 2025.5 – Authenticated (Contributor+) Stored Cross-Site Scripting CVE ID: CVE-2025-6987 was fixed.
    • New: Tested with WordPress 6.8.2
    • New: advanced iframe has a new domain: https://www.advanced-iframe.com. All links in the plugin where updated and checked.
    • New: https://www.advanced-iframe.com is live now. Everything from www.tinywegballery.com/blog was moved. Also a new menu structure was introduced.
    • New: Edge was added as setting in the browser detection.
    • New: Standalone version is now also available in the freemius version.
    • New: Standalone examples where reworked and old links removed.
    • New: Standalone version is now even easier to setup because the site_url handling was rewritten and the default should work now even better.
    • New: Standalone version now also uses jQuery 3.7.1 like WordPress does.
    • New: The freemius section documentation was improved based on user feedback.
    • New: No 10.000 hit limit anymore. The powered by text is now removed automatically when you OPT-IN or if you disable it.
    • New: Updated Freemius to 2.12.1
    • Fix: Add iframe url as param: Same domain with hash” was broken because one of the last security fixes was too tight. Now it works fine again: https://www.advanced-iframe.com/advanced-iframe/advanced-iframe-pro-demo/add-iframe-url-as-param-same-domain-hash
    • Fix: add_iframe_url_as_param_direct was not working anymore because of a wrong security check. Now https://www.advanced-iframe.com/advanced-iframe/advanced-iframe-pro-demo/add-iframe-params-to-parent works fine for the remove and same domain again.
    • Fix: documentation of the external workaround was improved.
    • Fix: When switching between free and pro a notice about unwanted characters was shown. This was a notice because both plugin where active for a small amount of time. This is solved now.
    • Fix: Users often use false in hide_part_of_iframe and a message was shown. Users contacted the advanced iframe team to solve this. Now this setting is simply ignored.
    • Removed: iframe_zoom_ie8 was removed and all the code that comes with it as ie8 browser is not used anymore.
    • Removed: “Special case sub domain” section was removed as it was only containing the removal info text for one year.

  3. Advanced iFrame 2025.2

    • Fix: The close icon of show iframe as layer was not shown because of an old path. Now the correct path in the pro version is used. https://www.advanced-iframe.com/advanced-iframe/advanced-iframe-pro-demo/show-the-iframe-as-layer
    • Fix: Some links in the new pro version where still pointing to the old path. They are now working properly.

20241 release

  1. Advanced iFrame 2024.5

    • New: Tested with WordPress 6.5.4
    • New: Description of ai_external.min.js was optimized.
    • Fix: filterBasicXSS could cause a fatal php error with some configurations.

20132 releases

  1. Advanced iFrame 3.0

  2. Advanced iFrame 2.1

20111 release

  1. Advanced iFrame 1.3

Questions about Advanced iFrame’s releases

What is the latest version of Advanced iFrame?

2026.5, released on Nov 2, 2026 (6 days ago). It’s tested up to WordPress 7.1.4 and needs PHP 7.4 or later.

How often is Advanced iFrame updated?

4 releases in the last year, about one every 105 days. Its first release on WordPress.org dates from September 2011.

Know when your rivals ship

Track your plugin and its rivals: TrackWP sees each new release in the nightly snapshot and alerts you, with what it did to their rank.

Start free

Release dates come from the day each version’s folder was made in Advanced iFrame’s WordPress.org SVN repository; the notes from its readme’s changelog, as its authors wrote it.