Bookit · Version history
Bookit changelog and version history
- Latest version
- 2.6.0.7
- Oct 29, 2026 (11 days ago)
- Releases
- 63
- since 2020
- In the last year
- 14
- about one every 27 days
- Tested up to
- WordPress 7.1.4
- PHP 7.4 or later
Releases each year
- 202011 releases
- 202120 releases
- 20226 releases
- 20239 releases
- 20243 releases
- 20251 release
- 202613 releases
202613 releases
Bookit 2.6.0.7Latest
- Security – Hardened the public booking endpoint. Props to AndrewN for reporting.
- Security – Hardened price handling on the public booking endpoint. Props to cazy for reporting.
Bookit 2.6.0.6
- Security – Hardened payment handling on the public booking endpoint. Props to Alpaslan Fatih Sözer for reporting.
Bookit 2.6.0.5
- Security – Hardened the appointment management AJAX endpoints.
Bookit 2.6.0.4
- Security – Harden the Stripe Connect payment handler.
- Fix – Correct a price-formatting bug affecting some fractional-cents prices.
Bookit 2.6.0.3
- Security – Harden the PayPal payment handler.
Bookit 2.6.0.2
- Security – Harden the booking AJAX endpoint.
- Fix – Reused an existing customer for repeat guest bookings instead of creating duplicate records.
Bookit 2.6.0.1
- Security – Harden the day-appointments AJAX endpoint. [SVUL-L48]
Bookit 2.6.0
- Security – Require login or registration before completing a booking in Registered mode, and link the booking to the current user. [SVUL-31]
- Security – Harden the booking and customer account AJAX endpoints. [SVUL-26]
Bookit 2.5.5
- Fix – Resolved an issue that prevented Stripe from connecting. [BI-48]
Bookit 2.5.4.1
- Security – Add validation to Payment Intent in AJAX endpoints. [SVUL-67]
Bookit 2.5.4
- Security – SQL injection vulnerabilities in AJAX endpoints. [SVUL-55]
Bookit 2.5.3
- Fix – Update plugin display name to comply with WordPress.org naming guidelines and improve clarity. [BI-42]
- Fix – Correct gettext usage to ensure all translatable strings use static text and the proper text domain for full compatibility with WordPress translation tools. [BI-45]
- Tweak – Upgrade Freemius SDK to the latest stable version to improve security, compatibility, and support. [BI-44]
- Tweak – Replace bundled “freemius” package folder with Composer-based autoloading to follow WordPress.org best practices and reduce potential library conflicts. [BI-47]
- Tweak – Add missing composer.json file to the plugin root to improve transparency and align with open-source standards. [BI-43]
- Tweak – Change the description on readme.txt to comply with WordPress.org guidelines. [BI-46]
Bookit 2.5.2
- Fix – Copy button for the PayPal IPN now copies the correct URL.
- Fix – Add phone number validation on staff and customer add/edit forms.
- Fix – “Add to Calendar” feature now includes timezone information, ensuring calendar apps show the correct local time.
20251 release
Bookit 2.5.1
- Security – Add authorization check to Stripe Connect REST API endpoint to prevent unauthorized account connections. [SVUL-29]
- Tweak – Update GitHub Actions cache from deprecated v2 to v4 for CI/CD workflows.
- Tweak – Update tested WordPress version to 6.8.
- Tweak – Replace wp_redirect with wp_safe_redirect to improve security compliance.
- Tweak – Add allowed_redirect_hosts filter for WhoDat domain in Stripe Connect disconnect flow.
- Fix – Add missing ‘bookit’ text domain to 16 internationalization function calls across 4 files.
- Fix – Add translator comments for strings with placeholders to improve translation context.
- Fix – Escape SQL table names properly in all database queries to improve security.
- Fix – Escape exception messages in Container.php to prevent potential XSS vulnerabilities.
20243 releases
Bookit 2.5.0
- Feature – Add Stripe Connect as a payment option. [BI-13]
- Feature – Add PayPal Legacy as a payment option. [BI-13]
- Fix – Fix settings import that failed on the file type. [BI-4]
- Fix – Prevent fatal error in PHP 8.0+ on Add-ons page if service returns no add-ons. [BI-6]
- Fix – Fix date and text search in the Appointments admin list. [BI-8]
- Fix – Add phone validation to appointment forms. [BI-5]
- Fix – Sanitize inputs of the appointment form in VUE. [BI-5]
Bookit 2.4.6
- fixed: Minor bug fixes.
Bookit 2.4.5
- fixed: Minor bug fixes.
20239 releases
Bookit 2.4.4
- fixed: Resolved vulnerability based on a report from PatchStack fixed: Minor bug fixes
Bookit 2.4.3
- fixed: Minor bug fixes.
Bookit 2.4.2
- fixed: Resolved vulnerability based on a report from PatchStack
Bookit 2.4.1
- updated: Compatibility with WordPress 6.3
Bookit 2.3.8
- fixed: The “Authentication vulnerability” reported by Wordfence is fixed.
Bookit 2.3.7
- fixed: The authentication Bypass vulnerability is fixed. fixed: The demo import did not complete and returned a 500 error on the console.
Bookit 2.3.6
- fixed: Minor bug fixes.
Bookit 2.3.5
- fixed: Compatibility with PHP 8 to ensure appointments can be created successfully.
Bookit 2.3.4
20226 releases
Bookit 2.3.3
Bookit 2.3.2
Bookit 2.3.1
Bookit 2.3.0
Bookit 2.2.9
Bookit 2.2.8
202120 releases
Bookit 2.2.7
Bookit 2.2.6
Bookit 2.2.5
Bookit 2.2.4
Bookit 2.2.3
Bookit 2.2.2
Bookit 2.2.1
Bookit 2.2.0
Bookit 2.1.9
Bookit 2.1.8
Bookit 2.1.7
Bookit 2.1.6
Bookit 2.1.5
Bookit 2.1.4
Bookit 2.1.3
Bookit 2.1.2
Bookit 2.1.1
Bookit 2.1.0
Bookit 2.0.9
Bookit 2.0.8
202011 releases
Bookit 2.0.7
Bookit 2.0.6
Bookit 2.0.5
Bookit 2.0.4
Bookit 2.0.3
Bookit 2.0.2
Bookit 2.0.1
Bookit 2.0.0
Bookit 1.2.3
Bookit 1.2.2
Bookit 1.2
Questions about Bookit’s releases
What is the latest version of Bookit?
2.6.0.7, released on Oct 29, 2026 (1 week ago). It’s tested up to WordPress 7.1.4 and needs PHP 7.4 or later.
How often is Bookit updated?
14 releases in the last year, about one every 27 days. Its first release on WordPress.org dates from January 2020.
Know when your rivals ship
Track your plugin and its rivals: TrackWP sees each new release in the nightly snapshot and alerts you, with what it did to their rank.
Start freeRelease dates come from the day each version’s folder was made in Bookit’s WordPress.org SVN repository; the notes from its readme’s changelog, as its authors wrote it.