WP Customer Area · Version history
WP Customer Area changelog and version history
- Latest version
- 8.4.4
- Nov 3, 2026 (6 days ago)
- Releases
- 142
- since 2013
- In the last year
- 13
- about one every 29 days
- Tested up to
- WordPress 7.1.4
- PHP 7.2 or later
Releases each year
- 201355 releases
- 201421 releases
- 20158 releases
- 201610 releases
- 201715 releases
- 20184 releases
- 20214 releases
- 20223 releases
- 20235 releases
- 20243 releases
- 20254 releases
- 202610 releases
202610 releases
WP Customer Area 8.4.4Latest
- Security: the payment currency is now checked against the list of known currencies, saved as a plain code and escaped on display. This fixes a stored cross-site scripting issue in the admin payments list. Updating is recommended.
- Security: payments can only be started by a logged-in user for an item they own, and the test payment gateway is now disabled by default and only available when WP_DEBUG is on.
- Security: the layout and title attributes of the [customer-area-protected-content] shortcode are now sanitized and escaped. This fixes a stored cross-site scripting issue. Updating is recommended.
- Hardening: user names and e-mails are escaped in the payments screens, and shortcode error messages are escaped.
- Thanks to Lee Bales and HeeDong Cho for responsibly reporting these issues through Patchstack.
- Template versions bumped: protected-content-shortcode-loop-default, protected-content-shortcode-empty-default, protected-content-shortcode-layout-default-before, protected-content-shortcode-layout-list-before (3.0.1), payment-editor-payer (3.2.1). If your theme overrides them, update your copies.
WP Customer Area 8.4.3
- Improvement: clearer message when an outdated WP Customer Area 7 add-on is still installed.
WP Customer Area 8.4.2
- Security: the pagination and date archive parameters of the private files, pages and add-on listings (page-num, cuar_year, cuar_month, cuar_author, cuar_category) are now validated, and listing subtitles are filtered before display. This fixes a reflected cross-site scripting issue. Updating is rec…
- Security: the “Edit account” page now escapes the Biography field and only refills the form with submitted values after the form’s security check has passed. This fixes a reflected cross-site scripting issue. Updating is recommended.
- Hardening: author names and collection types are escaped in the private files and pages listings, and account form error messages are escaped.
- Thanks to Van Phuc (VCI – VNPT Cyber Immunity) and mroccon for responsibly reporting these issues through Patchstack.
- Template versions bumped: customer-private-files-content, customer-private-pages-content (3.2.1), customer-private-files-content-item, customer-private-pages-content-item (3.3.1). If your theme overrides them, update your copies.
WP Customer Area 8.4.1
- Security: user, group, project and role names are now escaped everywhere they are displayed (Logs screen, content owner links, widgets, account form). Names saved from the account form can no longer contain HTML or double quotes. Updating is recommended.
- Thanks to Kuba (Wordfence) for responsibly reporting CVE-2026-116551, fixed in 8.4.1.
- Template versions bumped: post-owner-link-usr, -grp, -prj, -rol (1.0.1), widget-content-authors, widget-content-list (3.0.1), widget-terms-cloud, widget-terms-tree (3.1.1). If your theme overrides them, update your copies.
WP Customer Area 8.4.0
- New: when an add-on license is no longer active, a clear notice explains what it stops (compatibility and security fixes, support) and links straight to the renewal. It appears on the dashboard, the Plugins page and the WP Customer Area screens only, and can be hidden for 15 days.
- New: optional newsletter subscription on the About page and in the setup wizard. It opens our double opt-in form; the plugin itself sends no data.
- Improvement: the license status is refreshed with each WordPress update check, so a renewed license is recognized quickly. An “Already renewed? Check again” link is also available.
- Security: updated the bundled PDF libraries (html2pdf 5.3.3, TCPDF 6.11.4) to fix known vulnerabilities.
- Fix: compatibility with PHP 8.4. Tested with WordPress 7.1.
- Fix: no more fatal error on the first page load after an update when an outdated add-on (such as Content Expiry 2.1.3) is installed.
- Fix: licensing traces are written to the PHP error log only when WP_DEBUG is enabled.
- Removed: the Twitter widget of the About page (third-party script) and an unused bundled licensing library.
- Requirement: PHP 7.2 or higher.
- Thanks to Nguyen Tran Tuan Dung (Patchstack) for responsibly reporting CVE-2025-49982, fixed in 8.3.7.
WP Customer Area 8.3.7
- Security: fixed a missing capability and nonce check on an AJAX action of the setup wizard (CVE-2025-49982).
- Fix: links to the WP Customer Area website (account, add-ons, documentation) now point to their current location.
WP Customer Area 8.3.6
- Security: fixed a stored XSS vulnerability via the unescaped type attribute of the [customer-area-protected-content] shortcode (CVE-2026-7640).
WP Customer Area 8.3.5
- Security: fixed multiple privilege/path validation issues in file and editor-image handlers to prevent unauthorized post updates, path traversal, and arbitrary image deletion.
WP Customer Area 8.3.4
- Fix: Licenses validation and error messages
WP Customer Area 8.3.3
- Fix: Licenses check stuck on activation/validation
20254 releases
WP Customer Area 8.3.2
- Fix: Compatibility with WP 6.9
WP Customer Area 8.3.1
- Security: Fixed Local File Inclusion (LFI) vulnerability in file download feature
- Security: Added strict path validation to prevent directory traversal attacks
- Security: Improved file access controls and sanitization
WP Customer Area 8.3.0
WP Customer Area 8.2.5
- Fix: Security update
20243 releases
WP Customer Area 8.2.4
- Fix: Roles allowed to manage any attachment were not allowed to attach files to other users’ posts
- Fix: Minor graphic issue with the frontend editor
- Fix: PHP 8.3 Warning in settings page
- ** Add-on Changes **
- ** Authentication Forms ** – Fix: Login form issue
- ** Design Extras ** – Fix: Minor graphic issue with the frontend editor
WP Customer Area 8.2.3
- Fix: Update some translation strings
- Tweak: Update languages files
- Tweak: Payment notes can now be multiline
- ** Add-on Changes **
- ** Bulk Import ** – Fix: Bug preventing some capabilities to show in the settings panel
- ** Content Expiry ** – Fix: Option “Set a post expiry” was not showing up in Capabilities page if Front-Office add-on was deactivated
- ** Projects ** – Fix: User role was able to list any project in the backend if he had the “Edit projects” capability
- ** Projects ** – Tweak: Added a “List all projects” option in Capabilities page to allow some roles to list all projects on the system
WP Customer Area 8.2.2
- Fix: Enhance some ownership and security checks
20235 releases
WP Customer Area 8.2.1
- Fix: Code review
- Fix: Authored posts were not showing up on the admin side even when ‘hide authored posts’ option was unchecked
- Fix: Archive widget was not taking in account authored posts when ‘hide authored posts’ option was unchecked
- Fix: Recent posts widgets not showing up without previously selecting a category
- ** Add-on Changes **
- ** FTP PMass Import ** – Fix: Bug preventing some capabilities to show in the settings panel
- ** Invoicing ** – Fix: Addresses’ fields
WP Customer Area 8.2.0
- New: Support for new Bulk Import add-on
- New: Support for new Elementor Compatibility add-on
- New: Allow admin listing to be sorted by title and date
- Tweak: Few design and CSS tweaks (menu, sidebars, content styling, etc…)
- Tweak: Enhanced compatibility with components from Elementor included into private contents
- Fix: Compatibility issue with Twenty Thirteen theme
- Fix: Authored contents were missing from widget listings when Content Expiry add-on was enabled
- Fix: Select boxes styles missing in admin profile page
- Fix: Textarea autogrow was not working anymore (for invoices and account)
- Fix: Prevent add-ons to stop working in case their folder are renamed
- ** Add-on changes **
- ** All add-ons ** – Fix: Prevent add-ons to stop working in case their folder are renamed
- ** All add-ons ** – Tweak: Update languages files and fr_FR translations
- ** Design Extras ** – New: Support for new styles from WP Customer Area 8.2.0
- ** DIVI compatibility ** – New: Add-on is now disabled if current theme is not running Divi as current or parent theme
- ** Content Expiry ** – New: Compatibility with Front-Office Publishing add-on (expiration dates can now be set from the frontend)
- ** Content Expiry ** – New: Added new permission to allow roles to set a post expiry from the frontend
- ** Content Expiry ** – New: Add expired badge on dashboard and collections view if post is expired
- ** Content Expiry ** – Fix: Fixed some meta_queries that were slowing down content listings page loading in some cases
- ** Content Expiry ** – Fix: The author of an expired post will now still be able to view it
- ** Content Expiry ** – Tweak: Update tile validation status on single content posts in case post is expired
- ** Conversations ** – New: Add emojis compatibility in conversations replies
- ** Conversations ** – New: Alternate colors and replies position depending on currently connected user
- ** Conversations ** – Tweak: Add editor replies default styles (such as lists, links, etc..)
- ** Conversations ** – Fix: Height sizing issue that was making conversations replies overlapping the site’s footer
- ** Conversations ** – Fix: Wrong left/right position for replies in some cases
- ** Front-Office Publishing ** – Tweak: Allow files upload dialog box to select multiple files if Enhanced Files add-on is active
- ** Invoicing ** – Fix: invoicing vat fields were not properly loading data on the admin edit post screen
- ** Projects ** – Fix: Removed compatibility with the content expiry add-on. Post expiration should now be set into attached posts
- ** Protect Post Types ** – Fix: Post Owners were not showing up in the “Assigned to” column of the protected post types listing, in the backend
WP Customer Area 8.1.6
- New: Frontend rich-editor options and translatable strings using standard WP translation system (filter ‘cuar/core/js-richEditor’)
- New: Copying/pasting HTML to the editor is now allowed but tags are all filtered out by default (allowed tags are customizable through filter ‘cuar/core/js-richEditor’)
- New: Button to style the Ul and Ol lists in the toolbar of the frontend rich-editor
- New: Button to add Embed shortcode from external media sites (youtube, soundcloud, vimeo, etc.)
- Fix: Authored contents were missing from listings when Content Expiry add-on was enabled
- Fix: New lines in the frontend rich-editor are now div wrapped
- Fix: Not properly working Ul and Ol lists of the frontend rich-editor
- Fix: Some 404 links to WPCA’s site
- Tweak: Update languages
- ** Add-on changes **
- ** Design Extras ** – New: Support for new styles from WP Customer Area 8.1.6
- ** Owner Restrictions ** – New: Add new user restriction “Any member of the groups where the author is a member”
- ** Authentication Forms ** – Fix: “Invalid Key” error was showing up in some cases when using the Lost-Password form
- ** Unread Documents ** – Fix: Do not mark post as “updated” for a user that updated its own post
- ** FTP Mass Import ** – Fix: Option “Import all the selected files within the same private post” not working in some cases
WP Customer Area 8.1.5
- Tweak: All pages of the private area will now get the same min-height (editable with filter cuar/core/page/sidebar-attributes)
- ** Add-on changes **
- ** Conversations ** – New: Add emojis compatibility in conversations replies
- ** Conversations ** – Fix: Height sizing issue that was making conversations replies overlapping the site’s footer
- ** Design Extras ** – New: Support for new styles from WP Customer Area 8.1.5
WP Customer Area 8.1.4
- Fix: Security issue
- Fix: PHP error when viewing a PDF Invoice
20223 releases
WP Customer Area 8.1.3
- New: Support for WP 6.1.x
- New: Add new category tile for private pages and files in single content pages
- Fix: Add-ons were performing update checks on every page loads
- Fix: Remove Project Add button sub-item (Attach new private file) if current user does not have required capabilities
- Fix: Remove Project Add button sub-item (Attach new private page) if current user does not have required capabilities
- Fix: Missing permalinks for private posts and private categories in admin area
- Fix: Monthly archives link in single content pages
- Tweak: Reduced width for customer-account-edit page based on cuar/private-content/view/max-width-for-forms
- Tweak: Reduced width for customer-dashboard page based on cuar/private-content/view/max-width-for-inner-pages
- Tweak: Languages files updated
- ** Add-on changes **
- ** All ** – New: Compatibility with WordPress 6.1.x
- ** All ** – Languages files updated
- ** ACF Integration ** – New: Support for ACF Version 5.12.x
- ** ACF Integration ** – New: Support for ACF Version 6.0.x
- ** Design Extras ** – New: Support for new styles from WP Customer Area 8.1.3
- ** FTP Mass Import ** – Fix: Publish automatically checkbox not properly working
- ** FTP Mass Import ** – Fix: Files not deleted in some cases
- ** FTP Mass Import ** – Fix: Files wrongly published within a same private post in some cases
- ** FTP Mass Import ** – Fix: Disable Option where Enhanced Files add-on is required, if it is not activated
- ** Projects ** – Fix: Remove Project Add button (or sub-items) if current user does not have required capabilities
- ** Projects ** – Fix: Missing permalinks for private posts and private categories in admin area
- ** Tasks ** – Fix: Missing permalinks for private posts and private categories in admin area
- ** Tasks ** – Fix: Monthly archives link in single content pages
- ** Invoices ** – Fix: Missing permalinks for private posts and private categories in admin area
- ** Conversations ** – Fix: Missing permalinks for private posts and private categories in admin area
- ** Conversations ** – Fix: Monthly archives link in single content pages
- ** Unread Documents ** – Fix: Missing permalinks for private posts and private categories in admin area
- ** Authentication forms ** – Fix: Registration was not working in the last WordPress releases
- ** Search ** – Fix: Errors where returned when searching within a specific content type without specifying a query
WP Customer Area 8.1.2
- Fix: Prevent WP Customer Area to affect other menus on the site
- Fix: Prevent WP Customer Area to display in multiple areas of the page
- Fix: Few 404 URLs to our main site
WP Customer Area 8.1.1
- Tweak: Update Html2pdf lib and add dejavusans font to plugin
- Tweak: Fix some strings and review French translations
- ** Add-on changes **
- ** Design Extras ** – New: Support for new styles from WP Customer Area 8.1.1
- ** Authentication Forms ** – Fix: Reset password form was returning “Invalid Key”
- ** Authentication Forms ** – Tweak: Fix some strings and review French translations
- ** Conversations ** – Tweak: Fix some strings and review French translations
- ** Invoicing ** – Tweak: Fix some strings and review French translations
- ** Notifications ** – Tweak: Fix some strings and review French translations
- ** Projects ** – Tweak: Fix some strings and review French translations
- ** Tasks ** – Tweak: Fix some strings and review French translations
- ** Switch Users ** – Tweak: Fix some strings and review French translations
20214 releases
WP Customer Area 8.1.0
- New: Support for new add-on: WP Customer Area – FTP Mass Import
- New: Plugin will now use translations from WP official translation system
- New: Plugin will now check if you have the required version of cURL and OpenSSL in order to validate the licenses
- Fix: Content listings were not displaying authored content on the admin side if option “hide authored contents” was unchecked
- ** Add-on changes **
- ** Notifications ** – New: Allow adding attachments to notifications via hook ‘cuar/notifications/attachments’
- ** Design Extras ** – New: Support for WP Customer Area 8.1.0
- ** ACF Integration ** – New: Support for ACF Version 5.11.x
- ** ACF Integration ** – Fix: ACF Integration throwing a headers already sent error when using French translations
WP Customer Area 8.0.5
WP Customer Area 8.0.3
WP Customer Area 8.0.0
20184 releases
WP Customer Area 7.5.1
WP Customer Area 7.5.0
WP Customer Area 7.4.6
WP Customer Area 7.4.5
201715 releases
WP Customer Area 7.4.3
WP Customer Area 7.4.2
WP Customer Area 7.4.1
WP Customer Area 7.4.0
WP Customer Area 7.3.0
WP Customer Area 7.2.1
WP Customer Area 7.2.0
WP Customer Area 7.1.9
WP Customer Area 7.1.8
WP Customer Area 7.1.7
WP Customer Area 7.1.6
WP Customer Area 7.1.5
WP Customer Area 7.1.4
WP Customer Area 7.1.3
WP Customer Area 7.1.2
201610 releases
WP Customer Area 7.1.0
WP Customer Area 7.0.8
WP Customer Area 7.0.7
WP Customer Area 7.0.6
WP Customer Area 7.0.5
WP Customer Area 7.0.4
WP Customer Area 7.0.3
WP Customer Area 7.0.2
WP Customer Area 7.0.1
WP Customer Area 7.0.0
20158 releases
WP Customer Area 6.3.0
WP Customer Area 6.2.2
WP Customer Area 6.2.1
WP Customer Area 6.2.0
WP Customer Area 6.1.1
WP Customer Area 6.1.0
WP Customer Area 6.0.0
WP Customer Area 5.0.7
201421 releases
WP Customer Area 5.0.6
WP Customer Area 5.0.5
WP Customer Area 5.0.4
WP Customer Area 5.0.3
WP Customer Area 5.0.2
WP Customer Area 5.0.0
WP Customer Area 4.6.0
WP Customer Area 4.5.0
WP Customer Area 4.4.0
WP Customer Area 4.3.0
WP Customer Area 4.2.3
WP Customer Area 4.2.2
WP Customer Area 4.2.1
WP Customer Area 4.2.0
WP Customer Area 4.1.2
WP Customer Area 4.1.1
WP Customer Area 4.0.3
WP Customer Area 4.0.2
WP Customer Area 4.0.1
WP Customer Area 4.0.0
WP Customer Area 3.8.3
201355 releases
WP Customer Area 3.8.2
WP Customer Area 3.8.1
WP Customer Area 3.8.0
WP Customer Area 3.7.5
WP Customer Area 3.7.3
WP Customer Area 3.7.2
WP Customer Area 3.7.1
WP Customer Area 3.7.0
WP Customer Area 3.6.2
WP Customer Area 3.6.1
WP Customer Area 3.6.0
WP Customer Area 3.5.0
WP Customer Area 3.4.1
WP Customer Area 3.4.0
WP Customer Area 3.3.0
WP Customer Area 3.2.3
WP Customer Area 3.2.2
WP Customer Area 3.2.0
WP Customer Area 3.1.3
WP Customer Area 3.1.2
WP Customer Area 3.1.1
WP Customer Area 3.1.0
WP Customer Area 3.0.1
WP Customer Area 3.0.0
WP Customer Area 2.4.0
WP Customer Area 2.3.6
WP Customer Area 2.3.5
WP Customer Area 2.3.4
WP Customer Area 2.3.3
WP Customer Area 2.3.2
WP Customer Area 2.3.1
WP Customer Area 2.3.0
WP Customer Area 2.2.1
WP Customer Area 2.2.0
WP Customer Area 2.1.0
WP Customer Area 2.0.2
WP Customer Area 2.0.1
WP Customer Area 1.6.4
WP Customer Area 1.6.3
WP Customer Area 1.6.2
WP Customer Area 1.6.1
WP Customer Area 1.6.0
WP Customer Area 1.5.0
WP Customer Area 1.4.0
WP Customer Area 1.3.1
WP Customer Area 1.3.0
WP Customer Area 1.2.0
WP Customer Area 1.1.2
WP Customer Area 1.1.1
WP Customer Area 1.1.0
WP Customer Area 1.0.4
WP Customer Area 1.0.3
WP Customer Area 1.0.2
WP Customer Area 1.0.1
WP Customer Area 1.0.0
Questions about WP Customer Area’s releases
What is the latest version of WP Customer Area?
8.4.4, released on Nov 3, 2026 (6 days ago). It’s tested up to WordPress 7.1.4 and needs PHP 7.2 or later.
How often is WP Customer Area updated?
13 releases in the last year, about one every 29 days. Its first release on WordPress.org dates from April 2013.
Know when your rivals ship
Track your plugin and its rivals: TrackWP sees each new release in the nightly snapshot and alerts you, with what it did to their rank.
Start freeRelease dates come from the day each version’s folder was made in WP Customer Area’s WordPress.org SVN repository; the notes from its readme’s changelog, as its authors wrote it.