Powerkit · Version history
Powerkit changelog and version history
- Latest version
- 3.1.1
- Jul 31, 2026 (3 months ago)
- Releases
- 86
- since 2020
- In the last year
- 9
- about one every 31 days
- Tested up to
- WordPress 7.0.8
- PHP 5.4 or later
Releases each year
- 202019 releases
- 202113 releases
- 202223 releases
- 202310 releases
- 20246 releases
- 20258 releases
- 20267 releases
20267 releases
Powerkit 3.1.1Latest
- Security fix: patched Stored XSS in the Separator shortcode ‘style’ attribute (CVE-2026-15644). The value is now validated against the list of CSS border styles.
- Security fix: patched Stored XSS in the Progress Bar shortcode ‘height’, ‘value’ and ‘color’ attributes. Dimensions are cast to numbers and the color is sanitized as a CSS class name.
- Security fix: patched Stored XSS in the Progress Bar shortcode when “Display value” is enabled — the value was written into the page as HTML instead of text.
- Security fix: patched Stored XSS in the Tabs shortcode ‘nav’ and ‘type’ attributes. Both are now sanitized as CSS class names.
- All four issues required contributor-level access or above. Rendering of existing content is unchanged.
- Security hardening: the author name in post meta and the admin-only warning notices are now filtered before output, so an error message returned by a remote API can no longer inject markup into an administrator’s screen.
- Security hardening: request values on the settings, Connect, Fonts, Custom Fonts, Post Format, Post Views, Featured Categories and Share Buttons admin screens are now consistently unslashed and sanitized. No change to any saved value.
Powerkit 3.1.0
- Improved PHP 8.1–8.3 compatibility: prevented a fatal error that could occur when a third-party plugin registers an invalid callback on a WordPress user-query hook (e.g. pre_user_query). The user lookup now fails safe instead of taking down the site.
- The Author Box and Contributors blocks no longer query the site’s user list on front-end requests — that list is only needed for the block editor’s author/contributor dropdown, so front-end pages are lighter and unaffected by that class of third-party errors.
Powerkit 3.0.9
- Security fix: patched Stored XSS in the Slider and Justified Gallery shortcode attributes (attribute values are now escaped on output — same class of issue as CVE-2026-2390)
- Security fix: added a capability check to the module activate/deactivate handler so only administrators can toggle modules
- Security fix: added capability checks to the Opt-In Forms integration-refresh AJAX handlers (Kit, MailChimp, MailerLite)
- Security improvement: added capability checks to the Post Format UI gallery/oEmbed AJAX handlers, restricted the Table of Contents preview REST route to editors, and escaped the Table of Contents anchor-link URL
Powerkit 3.0.8
- Added compatibility with WordPress 7.0
- Moved all Powerkit settings pages under a single Powerkit menu (fixes duplicate “Fonts” and “Connect” menu items in WordPress 7.0)
- Improved security and code quality: output escaping, input sanitization, prepared database queries, and direct file access protection (WordPress Plugin Check compliance)
- Updated icon font for improved compatibility
- Fixed Scroll to Top button visibility with overlapping elements
Powerkit 3.0.7
- Security improvement: apply esc_attr() to all attribute values in Lazy Load image reconstruction (defense in depth, follow-up to CVE-2026-2390)
Powerkit 3.0.6
- Improved performance: Tippy script is now loaded only for logged-in users
Powerkit 3.0.5
- Security fix: patched Stored XSS vulnerability in Lazy Load (CVE-2026-2390)
- Fixed Post Views: Google OAuth token no longer expires every 60 minutes
20258 releases
Powerkit 3.0.4
- Updated Twitter branding to X
Powerkit 3.0.3
- Added Threads to Social Links
Powerkit 3.0.2
- Added Plugin URI
Powerkit 3.0.1
- Fixed Custom Fonts (PHP Warning)
Powerkit 3.0.0
- Added support for Kit.com in Opt-In Forms
- Added support for MailerLite in Opt-In Forms
- Added support for Custom forms in Opt-In Forms
- Updated Opt-In Forms documentation with new services
Powerkit 2.9.9
- Minor improvements
Powerkit 2.9.8
- Added compatibility with WordPress 6.8
Powerkit 2.9.7
- Added Bluesky to Social Links
20246 releases
Powerkit 2.9.6
- Added typography compatibility with WordPress 6.7
Powerkit 2.9.5
- Added compatibility with WordPress 6.7
Powerkit 2.9.4
- Added compatibility with WordPress 6.6
Powerkit 2.9.3
- Minor improvements
Powerkit 2.9.2
- Improved plugin security
Powerkit 2.9.1
- Improved Post Views compatibility with GA4
202310 releases
Powerkit 2.9.0
- Improved manual settings of socials
Powerkit 2.8.9
- Changed Twitter icon
- Improved support PHP 8.2
Powerkit 2.8.8
- Added manual settings for Instagram \ Facebook \ Twitter
Powerkit 2.8.7
- Fixed Instagram API
Powerkit 2.8.6
Powerkit 2.8.5
Powerkit 2.8.4
Powerkit 2.8.3
Powerkit 2.8.2
Powerkit 2.8.1
202223 releases
Powerkit 2.8.0
Powerkit 2.7.9
Powerkit 2.7.8
Powerkit 2.7.7
Powerkit 2.7.6
Powerkit 2.7.5
Powerkit 2.7.4
Powerkit 2.7.3
Powerkit 2.7.2
Powerkit 2.7.1
Powerkit 2.7.0
Powerkit 2.6.9
Powerkit 2.6.8
Powerkit 2.6.7
Powerkit 2.6.6
Powerkit 2.6.5
Powerkit 2.6.4
Powerkit 2.6.3
Powerkit 2.6.2
Powerkit 2.6.1
Powerkit 2.6.0
Powerkit 2.5.9
Powerkit 2.5.8
202113 releases
Powerkit 2.5.7
Powerkit 2.5.6
Powerkit 2.5.5
Powerkit 2.5.4
Powerkit 2.5.3
Powerkit 2.5.2
Powerkit 2.5.1
Powerkit 2.5.0
Powerkit 2.4.9
Powerkit 2.4.8
Powerkit 2.4.7
Powerkit 2.4.6
Powerkit 2.4.5
202019 releases
Powerkit 2.4.4
Powerkit 2.4.3
Powerkit 2.4.2
Powerkit 2.4.1
Powerkit 2.4.0
Powerkit 2.3.9
Powerkit 2.3.8
Powerkit 2.3.7
Powerkit 2.3.6
Powerkit 2.3.5
Powerkit 2.3.4
Powerkit 2.3.3
Powerkit 2.3.2
Powerkit 2.3.1
Powerkit 2.3.0
Powerkit 2.2.9
Powerkit 2.2.8
Powerkit 2.2.7
Powerkit 2.2.6
Questions about Powerkit’s releases
What is the latest version of Powerkit?
3.1.1, released on Jul 31, 2026 (3 months ago). It’s tested up to WordPress 7.0.8 and needs PHP 5.4 or later.
How often is Powerkit updated?
9 releases in the last year, about one every 31 days. Its first release on WordPress.org dates from July 2020.
Know when your rivals ship
Track your plugin and its rivals: TrackWP sees each new release in the nightly snapshot and alerts you, with what it did to their rank.
Start freeRelease dates come from the day each version’s folder was made in Powerkit’s WordPress.org SVN repository; the notes from its readme’s changelog, as its authors wrote it.