Sign-up Sheets · Version history
Sign-up Sheets changelog and version history
- Latest version
- 2.4.1
- Oct 31, 2026 (9 days ago)
- Releases
- 33
- since 2020
- In the last year
- 5
- about one every 74 days
- Tested up to
- WordPress 7.1.4
- PHP 7.2 or later
Releases each year
- 20203 releases
- 20211 release
- 20228 releases
- 20237 releases
- 20243 releases
- 20256 releases
- 20265 releases
20265 releases
Sign-up Sheets 2.4.1Latest
- Fixed saving a sheet after adding a header row failing with a “You are not authorized to modify this task.” notice.
- Fixed sheet save notices sometimes being shown to a different logged-in user instead of the user who saved the sheet. [Security]
- Fixed XSS issue in the “Sign up” link on public sheet pages. [Security]
- Hardened redirect URL validation. [Security]
- Hardened access controls to better protect sign-up data. [Security]
- Hardened task titles to remove disallowed markup when saved. [Security]
- Hardened output escaping on public sheet pages and in the admin. [Security]
- Removed the unused deprecated Data::get_tasks() and Data::get_signups() methods. Use the Sheet and Task models instead.
- Removed the unused email alert option from internal logging so log entries no longer collect the visitor IP address or browser user agent. [Security]
- Hardened access controls when copying sheets. [Security]
- Hardened access controls on the Manage Sign-ups page. [Security]
- Hardened access controls when adding sign-ups from the admin. [Security]
- Hardened access controls on the data migration re-run action. [Security]
- Fixed the data migration progress indicator on the Settings page, which never updated because its status check was always rejected.
- Hardened password-protected sheet handling in the [sign_up_sheet] shortcode. [Security]
- Updated copied sheets to be created as drafts and to skip the original’s legacy v2.0 ID and editing meta, so a copy can no longer take over a legacy sheet shortcode.
- Fixed the Help page test email leaving its custom sender address applied to other emails sent later in the same request.
- Hardened access controls when updating or deleting sign-ups. [Security]
- Hardened sign-up form input validation. [Security]
- Updated the Id::getClientIP() helper to use the connecting address by default. Sites behind a reverse proxy can add trusted forwarding headers with the new fdsus_client_ip_trusted_headers filter. [Security]
- Hardened the class autoloader. [Security]
- Hardened the sign-up CSV export. [Security]
- Updated the sign-up CSV export to convert non-text values returned by export filters to text.
- Hardened the fdsus_current_url() and fdsus_back_to_sheet_url() template tags. Templates should still escape their output with esc_url(). [Security]
- Fixed an unrecognized sheet date being saved as January 1, 1970 and an unrecognized task date causing a PHP error. Both are now saved empty.
- Hardened the email typo suggestion on the sign-up form. [Security]
- Hardened the Help page test email form. [Security]
- Hardened the simple captcha. [Security]
- Added the fdsus_simple_captcha_token_ttl filter to set how long a simple captcha form stays valid (default 12 hours). Forms cached before the update keep working for 12 hours after it.
- Hardened sanitization of values saved from the sheet editor. [Security]
Sign-up Sheets 2.4.0
- Added preview to the Gutenberg block with settings moved to the editor sidebar.
- Updated Gutenberg block to use block API version 3 (requires WordPress 6.0+).
- Updated Settings page to a redesigned layout with sidebar navigation and live search.
- Updated the default simple captcha to use a randomized answer instead of a fixed one.
- Added ability for sheet “Preview” to show preview of meta field values such as sheet date and tasks rather than just the sheet description WP offers natively.
- Added config to disable the default sheet “archive” page that lists all sheets the /sheet/ URL.
- Added setting to hide your theme’s default Previous/Next post navigation on sheet pages if theme implements it (hidden by default).
- Fixed an inverted honeypot anti-spam check that could allow spam submissions through.
- Fixed error when accessing Manage Sign-ups page with invalid post ID by adding validation check.
- Fixed cursor jumping to the end of task fields when clicking to edit them in the admin sheet editor.
- Fixed the confirmation email message field stripping the “<{removal_link}>” placeholder (and any other literal “<…>” text) on every settings save.
- Hardened nonce verification, capability checks, input sanitization, and output escaping across Settings, bulk edit, sheet preview, custom fields, and the Gutenberg block. [Security]
- Hardened an internal file-loading safeguard. [Security]
- Hardened access control for displaying full sign-up contact details on the front end. [Security]
- Hardened access control on sheet task save and the Manage Sign-ups deletion actions (single and bulk). [Security]
- Hardened debug logging to prevent unauthorized data exposure. [Security]
- Hardened access control on the Manage Sign-ups page and CSV export, and narrowed the Sign-up Sheet Viewer role to read-only capabilities. [Security]
- Hardened database migration state checks and re-run access control. [Security]
- Hardened signup meta field handling against tampering from submitted form data. [Security]
- Hardened role capability revocation on deactivation so previously granted capabilities, including Pro sheet-category taxonomy permissions, are fully removed. [Security]
- Hardened the Help page email test form with nonce verification, input sanitization, and output escaping. [Security]
- Hardened the public sign-up form against unpublished tasks and unauthorized field submissions. [Security]
- Hardened access control on the sign-up form and sheet shortcodes to enforce sheet visibility. [Security]
- Hardened output escaping for custom field metadata in the admin sheet editor. [Security]
- Hardened task capacity enforcement on the sign-up form submission handler. [Security]
- Hardened access control so individual tasks and sign-ups respect their parent sheet’s visibility. [Security]
- Hardened output escaping in the notice display system and signup form response template tag. [Security]
- Hardened reCAPTCHA verification against spoofing and bypass attempts. [Security]
- Hardened validation of the redirect destination after a successful sign-up. [Security]
- Hardened validation on the admin Edit Sign-up page. [Security]
Sign-up Sheets 2.3.4
- Added security checks to AJAX migration status endpoint.
- Fixed output escaping of admin notice CSS class names.
- Removed duplicate function definition fdsus_scode_user_sign_ups_actions().
- For the changelog of earlier versions, please see changelog.txt.
Sign-up Sheets 2.3.1.1
Sign-up Sheets 2.3.3.2
20256 releases
Sign-up Sheets 2.3.3.1
Sign-up Sheets 2.3.3
Sign-up Sheets 2.3.2
Sign-up Sheets 2.3.1
Sign-up Sheets 2.3.0.1
Sign-up Sheets 2.3.0
20243 releases
Sign-up Sheets 2.2.14
Sign-up Sheets 2.2.13
Sign-up Sheets 2.2.12
20237 releases
Sign-up Sheets 2.2.11.1
Sign-up Sheets 2.2.11
Sign-up Sheets 2.2.10
Sign-up Sheets 2.2.9
Sign-up Sheets 2.2.8
Sign-up Sheets 2.2.7
Sign-up Sheets 2.2.6
20228 releases
Sign-up Sheets 2.2.5
Sign-up Sheets 2.2.4
Sign-up Sheets 2.2.3
Sign-up Sheets 2.2.2
Sign-up Sheets 2.2.1
Sign-up Sheets 2.2.0.1
Sign-up Sheets 2.2
Sign-up Sheets 1.0.14
20211 release
Sign-up Sheets 1.0.13
20203 releases
Sign-up Sheets 1.0.12
Sign-up Sheets 1.0.11
Sign-up Sheets 1.0.10
Questions about Sign-up Sheets’s releases
What is the latest version of Sign-up Sheets?
2.4.1, released on Oct 31, 2026 (1 week ago). It’s tested up to WordPress 7.1.4 and needs PHP 7.2 or later.
How often is Sign-up Sheets updated?
5 releases in the last year, about one every 74 days. Its first release on WordPress.org dates from April 2020.
Know when your rivals ship
Track your plugin and its rivals: TrackWP sees each new release in the nightly snapshot and alerts you, with what it did to their rank.
Start freeRelease dates come from the day each version’s folder was made in Sign-up Sheets’s WordPress.org SVN repository; the notes from its readme’s changelog, as its authors wrote it.