Simple JWT Login · Version history
Simple JWT Login changelog and version history
- Latest version
- 3.6.8
- Aug 9, 2026 (3 months ago)
- Releases
- 25
- since 2022
- In the last year
- 7
- about one every 35 days
- Tested up to
- WordPress 7.0.8
- PHP 5.5 or later
Releases each year
- 20224 releases
- 20234 releases
- 20244 releases
- 20256 releases
- 20267 releases
20267 releases
Simple JWT Login 4.0.2
Simple JWT Login 4.0.1
Simple JWT Login 3.6.8Latest
- Improve Google Oauth Security (Reported by @FaridNarimanov)#174
- JWT Payload: strip reserved claims improvement
Simple JWT Login 3.6.7
- Improve plugin security
Simple JWT Login 4.0.0
Simple JWT Login 3.6.6
- Update WordPress 7.0 Compatibility
Simple JWT Login 3.6.5
- Fix CVE-2025-58648 – Stored Cross-Site Scripting vulnerabilityPR
- Fix for bug: Reset password function doesn’t use base64 encoding logic and doesn’t allow user to use any special character #161 #163
- Fix PHP session initialization warning #159
- Update WordPress 6.9 Compatibility
20256 releases
Simple JWT Login 3.6.4
- Update WordPress 6.8 Compatibility
Simple JWT Login 3.6.3
- Fix protect endpoints #149
Simple JWT Login 3.6.2
- Fix blocked backened endpoints by ProtectEndpoints #146
- Ensure Protect endpoints searches for JWT in session
Simple JWT Login 3.6.1
- Validate JWT on protect endpoints#141
- Fix backward compatibility for protect endpoints. Add match/start_with option for endpoints.#143
Simple JWT Login 3.6.0
- Add support for configuring request methods on Protect endpoints #129
- Beta: Authenticate user when performing queries with WPGraphQL #32
- Code refactorization and UI improvements
- Authenticate by Username or Email (similar to WP login)#19
Simple JWT Login 3.5.8
- Use wp_safe_redirect for redirects #115
- Ensure JWT middleware only run once #125:
20244 releases
Simple JWT Login 3.5.7
- Update WordPress 6.7 Compatibility
Simple JWT Login 3.5.6
- Update WordPress 6.6 Compatibility
- Fix revoked token validation when middleware enabled #110
Simple JWT Login 3.5.5
- Update README
- Refactor Protect Endpoints
Simple JWT Login 3.5.4
- Add OAuth support for Google #97
- Fix status code for expired tokens #102
- Update WordPress 6.5 Compatibility
20234 releases
Simple JWT Login 3.5.3
- Fix licence in composer.json
- Update WordPress 6.4 compatibility
Simple JWT Login 3.5.2
- Fix change user password with revoked JWT
- Change routes priority from floats to int and fix deprecation message “Implicit conversion from float to int loses precision”
- Add iss to JWT payload and allow to configure it
- Fix user meta on register user #86
- Fix calling protected endpoints with revoked token #75
Simple JWT Login 3.5.1
- Update WordPress 6.3 compatibility
Simple JWT Login 3.5.0
- Fix unable to create post issue when protect endpoints is enabled for all endpoints
- Search user by email on reset password
- Switch get_user_by_email to get_user_by() due to deprecation
- Remove method convertUserToArray from WordPressData.
- Drop support for PHP 5.3 and PHP 5.4
20224 releases
Simple JWT Login 3.4.9
- Add Strength indicator for JWT decryption key
- Allow setting custom length for random password. The default is 10 characters.
- Allow sending base_64 encoded password and passhash on the /auth endpoint
- Fix issue with includeRequestParameters that has been building incorrect URLs
- Add query parameters filter on autologin redirect
- Add the simple_jwt_login_before_endpoint hook before all simple-jwt-login routes are initialized
Simple JWT Login 3.4.8
- Add filter to allow the change for authentication payload
- Change how we log in the user on while using the “protect endpoint” feature
- Refactor Route Service getUserFromJWT method
- Sanitize data from request
- Fix password issue when it contains special characters
- /auth/validate endpoint supports both GET and POST methods
Simple JWT Login 3.4.7
- Remove unused code from the JWT library
- Move JWT Library to a folder
- Stay on current page after saving settings
- Some small text sanitizations
- Change how views are loaded in order to prevent “local file inclusion risk”
Simple JWT Login 3.4.6
- Fix user_meta when passed as json in request body
Questions about Simple JWT Login’s releases
What is the latest version of Simple JWT Login?
3.6.8, released on Aug 9, 2026 (3 months ago). It’s tested up to WordPress 7.0.8 and needs PHP 5.5 or later.
How often is Simple JWT Login updated?
7 releases in the last year, about one every 35 days. Its first release on WordPress.org dates from April 2022.
Know when your rivals ship
Track your plugin and its rivals: TrackWP sees each new release in the nightly snapshot and alerts you, with what it did to their rank.
Start freeRelease dates come from the day each version’s folder was made in Simple JWT Login’s WordPress.org SVN repository; the notes from its readme’s changelog, as its authors wrote it.