Sidebar Login · Version history
Sidebar Login changelog and version history
- Latest version
- 3.1.0
- Oct 12, 2026 (28 days ago)
- Releases
- 43
- since 2008
- In the last year
- 1
- Tested up to
- WordPress 7.1.4
- PHP 7.4 or later
Releases each year
- 20084 releases
- 200912 releases
- 20105 releases
- 20116 releases
- 20122 releases
- 20135 releases
- 20142 releases
- 20152 releases
- 20204 releases
- 20261 release
20261 release
Sidebar Login 3.1.0Latest
- Security – After an AJAX login, only redirect to pages on this site (or hosts allowed with the allowed_redirect_hosts filter), as wp-login.php does. Props Chiranj Damasiya (Chiru) for reporting this responsibly.
- Security – The default login and logout redirects use the site address rather than the request’s Host header.
- Security – Shortcodes in a user’s profile fields, such as their display name, no longer run in the widget title.
- Security – AJAX logins apply the login_errors filter and post every form field, so login hardening and captcha plugins work with the widget.
- Security – Widget settings are sanitized when saved, and AJAX logins ignore non-string values.
- Fix – Set a secure login cookie on HTTPS pages when the site address uses HTTP, as wp-login.php does.
- Fix – Undefined index notices in the widget settings form. Props @JoryHogeveen.
- Fix – When an AJAX login can’t complete, for example with a two-factor plugin, the form is posted to wp-login.php instead.
- Fix – Each login form on a page gets its own field IDs, so the labels work.
- Fix – Double slash in the default Profile link.
- Fix – Field ID of the logged-in title setting, and the closing tag of login error messages.
- Fix – Warnings when the widget renders without a Host header, such as in widget editor previews.
- Tweak – AJAX logins apply the login_redirect filter, as wp-login.php does.
- Tweak – Load a right-to-left stylesheet for RTL languages.
- Performance – Template tag values, including the avatar, are built once per widget.
- Dev – Build tooling moved to @wordpress/scripts, with PHPUnit and end-to-end tests run in CI.
- Dev – Requires WordPress 6.6 and PHP 7.4.
20204 releases
Sidebar Login 3.0.1
- Fix – Fix rendering of additional links when using non-latin characters in the link text.
Sidebar Login 3.0.0
- Refactor – Rewritten majority of plugin using more up to date standards and namespaces.
- Refactor – Cleaned up the widget settings form to make functionality clearer.
- Refactor – Removed email->username conversion since this is supported natively.
- Tweak – Added %nicename% placeholder.
- Tweak – Improved default styling and included extra wrapping divs (.sidebar-login-form, .sidebar-login-account, .sidebar-login-links).
- Performance – Removed jQuery dependency and BlockUI script.
- Performance – Removed sidebar_login_js_in_footer filter – this is now true by default.
- Fix – Prevent notices due to incorrect sizeof() usage.
Sidebar Login 3.0.0.beta2
Sidebar Login 3.0.0.beta
20152 releases
Sidebar Login 2.7.3
- Tweak – %avatar% placeholder.
- Tweak – Removed translations due to WordPress.org language packs.
- Tweak – sidebar_login_widget_wp_login_form filter.
- Fix – Removed force_ssl_login which is deprecated in 4.4 in favour of force_ssl_admin.
Sidebar Login 2.7.2
- Feature – Added firstname, lastname, name tags.
- Fix – PHP4 widget contructors (https://gist.github.com/chriscct7/d7d077afb01011b1839d).
- Fix – Missing strings in localisation.
- Fix – Change email to username during wp_authenticate hook.
20142 releases
Sidebar Login 2.7.1
- Make rememberme show by default, without a widget save.
Sidebar Login 2.7.0
- Renamed textdomain from sidebar_login to sidebar-login.
- Moved translations to Transifex.
- Added Grunt.
- Removed deprecated sidebarlogin function.
- Option to show/hide the rememberme checkbox.
- Allow login using an email address – username will be queried based on address given.
20135 releases
Sidebar Login 2.6.0
- Support for Buddypress Profile URL via %buddypress_profile_url%. Thanks Tim Reeves.
- Support for BBPress Profile URL via %bbpress_profile_url%.
- Slovakian translation by Alexander Kriss
- Swedish translation by Tommy Wahlund
- Dutch translation by Bert Smulders
- Russian and Ukranian translation by Yarri
- Polish translation by Czeslaw Liebert
Sidebar Login 2.5.3
- Removed nonce check on frontend due to conflict with caching scripts
- Arabic translation by Mamoun Elkheir
- Brazillian translation by Marco André Argenta
- Italian translation by Adriano Calvitto
Sidebar Login 2.5.2
- Latvian translation by Lana Mangusa
- German translation by Klaus-Peter
- Wrapped response to prevent crap plugins breaking the response
Sidebar Login 2.5.1
- Filterable error classes
- Tweak to how SSL logins are handled.
- FR translation
- Fix $link_cap
Sidebar Login 2.5.0
- Rewrite and code cleanup – class based.
- Optionless – Moved all settings to the widgets themselves rather than having a settings page.
- Removed all localisations (these are out of date, and need re-doing)
- Removed JSONP/GET request – although this allowed logins between urls of different origin, it poses a security risk as GET requests are logged.
20122 releases
Sidebar Login 2.4
Sidebar Login 2.3.5
- Use jsonp to enable login from http to https
- Fixed remember me logic (in js)
- Sanitize redirect url
- Removed esc_attr from username and password to prevent breaking login
- Updated french and italian langs
- Added Swedish lang by Ove Kaufeldt
20116 releases
Sidebar Login 2.3.4
- SSL URL tweak
- Better handling for force_ssl_login and force_ssl_admin
Sidebar Login 2.3.3
- Removed a link after request from WordPress.org staff
- wp_lostpassword_url() for lost password link
- sanitized user_login
- Uses wp_ajax for ajax login instead of init functions
- Secure cookie logic change
Sidebar Login 2.3.2
- Login redirect fix
Sidebar Login 2.3.1
- Error loop fix
- Added filter for errors – sidebar_login_error
Sidebar Login 2.3
- Put the project on GitHub
- Added new localisations
- New options panel
- AJAX Login
Sidebar Login 2.2.15
- FORCE_SSL_LOGIN/ADMIN double login issue fix (Thanks to bmaupin)
- Only added openid styling if other plugin is installed
- Added more languages
20105 releases
Sidebar Login 2.2.14
- Further revised the |true / |user_capability code – only need to use one or the other now.
Sidebar Login 2.2.13
- Updated translations
- Support for https and style.css
- is_date fix
- Added option for headings
- Removed attribute_escape for esc_attr – therefore this version needs wp 2.8 and above
- USER LEVEL option gone – replaced with USER CAPABILITY instead – use a capability like ‘manage_options’
Sidebar Login 2.2.12
- Headers sent bugs fixed
- Avatar display option
Sidebar Login 2.2.10
- Moved settings to appearance menu
- Changed min user level to capilbilty ‘manage_options’
- Fixed menu showing in wordpress 3.0
- Added %USERID% for links
- Fixed white space bug for link options
Sidebar Login 2.2.9
200912 releases
Sidebar Login 2.2.8
- Min level setting for links. Add user level after |true when defining the logged in links.
- Moved ‘settings’ from tools to settings.
- Encoded ampersand for valid markup
- Moved Labels about
- Fixed SSL url
- Reusable widget
Sidebar Login 2.2.7
Sidebar Login 2.2.6
- Added changelog to readme.
- OpenID Plugin (https://wordpress.org/extend/plugins/openid/) Integration.
- %username% can be used in your custom links shown when logged in (gets replaced with username)
- WP-FacebookConnect (https://wordpress.org/extend/plugins/wp-facebookconnect/) integration (untested!)
- Minor fixes (worked through a big list of em!)
Sidebar Login 2.2.5
Sidebar Login 2.2.4
Sidebar Login 2.2.3
Sidebar Login 2.2.2
Sidebar Login 2.2.1
Sidebar Login 2.2
Sidebar Login 2.1.7
Sidebar Login 2.1.6
Sidebar Login 2.1.5
20084 releases
Sidebar Login 2.1.2
Sidebar Login 2.1.1
Sidebar Login 2.1
Sidebar Login 2.0
Questions about Sidebar Login’s releases
What is the latest version of Sidebar Login?
3.1.0, released on Oct 12, 2026 (4 weeks ago). It’s tested up to WordPress 7.1.4 and needs PHP 7.4 or later.
How often is Sidebar Login updated?
One release in the last year. Its first release on WordPress.org dates from August 2008.
Know when your rivals ship
Track your plugin and its rivals: TrackWP sees each new release in the nightly snapshot and alerts you, with what it did to their rank.
Start freeRelease dates come from the day each version’s folder was made in Sidebar Login’s WordPress.org SVN repository; the notes from its readme’s changelog, as its authors wrote it.