WCFM Membership · Version history
WCFM Membership changelog and version history
- Latest version
- 2.12.1
- Nov 2, 2026 (8 days ago)
- Releases
- 117
- since 2017
- In the last year
- 6
- about one every 70 days
- Tested up to
- WordPress 7.1.4
- PHP 5.6 or later
Releases each year
- 20176 releases
- 201836 releases
- 201934 releases
- 202013 releases
- 20219 releases
- 20223 releases
- 20236 releases
- 20242 releases
- 20253 releases
- 20265 releases
20265 releases
WCFM Membership 2.12.1Latest
- Updated – 02/11/2026
- Enhance – Registration form custom fields can differ per membership plan – filter added: wcfmvm_registration_custom_fields.
- Fixed – WPML: renewal reminder emails were sent in the site’s default language, and the vendor approval email and Additional Info ignored the translated settings.
- Fixed – Quotes in membership settings and vendor rejection reasons showed with a backslash in emails and thank-you pages. Affected settings are cleaned up automatically.
- Fixed – {site_name} placeholder not replaced in several membership email bodies.
- Fixed – Broken Access Control allowing a pending applicant to underpay a recurring PayPal membership. Reported by Elaprendiz1927 (Patchstack), credit goes to Elaprendiz1927 for identifying this issue.
- Fixed – Broken Access Control allowing a one-time PayPal membership to be activated without payment.
- Fixed – Broken Access Control allowing an abandoned PayPal plan upgrade to be applied by the vendor’s next renewal payment.
- Fixed – Broken Access Control allowing a WooCommerce checkout membership order to activate a different, more expensive plan than the one paid for. Reported by hera-user (Patchstack), credit goes to hera-user for identifying this issue.
- Fixed – The first PayPal payment of a plan upgrade awaiting approval was recorded under the previous plan.
- Fixed – Cancelling or ending a vendor’s previous PayPal subscription cancelled their current membership.
- Fixed – A PayPal payment failure or stray signup replaced the subscription on record, and subscriptions started under 2.11.11 were saved without their subscription ID (now recorded at the next renewal).
- Fixed – Unauthenticated Stored Cross-Site Scripting via the vendor registration Store Name and First Name fields. Reported by Sawyer and by AndrewN (Patchstack), credit goes to Sawyer and AndrewN for identifying this issue.
- Fixed – Payment bypass allowing a vendor to switch to a paid membership plan through the administrator “Change or Upgrade” action (CVE-2026-12967 follow-up).
- Fixed – Broken Access Control allowing a vendor’s shop staff to use administrator-only membership actions.
- Fixed – Broken Access Control allowing an unauthenticated visitor to activate a membership plan disabled by the administrator. Reported by dcs (Patchstack), credit goes to dcs for identifying this issue.
WCFM Membership 2.12.0
- Updated – 30/08/2026
- Fixed – Payment bypass allowing a paid vendor membership to be activated without a verified gateway payment (CVE-2026-12967). Reported independently by yagamimoon (Patchstack) and Muni Nitish Kumar Yaddala, credit goes to both researchers for identifying this issue.
- Fixed – Broken Access Control allowing an administrator-disabled payment method to complete a membership subscription. Reported by mySebbe (Patchstack), credit goes to mySebbe for identifying this issue.
- Fixed – Limited Privilege Escalation via User Role Overwrite through legacy Stripe IPN handlers (endpoints retired). Reported by mySebbe (Patchstack), credit goes to mySebbe for identifying this issue.
- Fixed – PHP warning “Undefined variable $next_payment_time” while setting the membership schedule for a recurring plan saved without a trial or billing period.
- Fixed – Membership cancellation confirmation message could not be translated, the source text did not match the translation catalog.
- Fixed – PayPal recurring payments were rejected by the IPN price check, which compared against a plan field that does not exist, so recurring PayPal memberships could never complete.
- Fixed – Subscription amounts were truncated to whole numbers in the membership ledger, dropping the fractional part.
- Fixed – Memberships paid through WooCommerce checkout were recorded with no amount in the membership ledger.
- Fixed – PayPal IPN replay guard could process the same transaction twice when notifications arrived concurrently.
- Fixed – Renewal could add duplicate entries to a membership’s subscriber list.
- Enhance – Membership renewal engine, letting payment gateway add-ons collect recurring membership payments and manage their own renewal dates.
- Enhance – Membership payment forms dispatch through per gateway action handlers, with membership pay modes recognised through a filterable map.
- Enhance – Signed Stripe webhook endpoint for membership payment notifications.
WCFM Membership 2.11.11
- Updated – 02/05/2026
- Fixed – Broken Access Control vulnerability in PayPal IPN payment processing.
- Fixed – Insecure Direct Object Reference (IDOR) to Limited Privilege Escalation via User Role Overwrite in membership AJAX actions.
WCFM Membership 2.11.10
- Updated – 25/04/2026
- Enhance – PHP compatibility expanded: now supports versions 7.2–8.4
WCFM Membership 2.11.9
- Updated – 07/02/2026
- Fixed – Insecure Direct Object Reference to Update Membership Payment vulnerability reported by Jing Xuan Sun, Credit goes to Jing Xuan Sun for identifying this issue.
- Enhance – WordPrss 6.9+ compatibility check added
- Enhance – WooCommerce 10.5+ compatibility check added
20253 releases
WCFM Membership 2.11.8
- Updated – 12/11/2025
- Enhance – WooCommerce 10.3+ compatibility check added
- Fixed – Corrected 404 Bad Link error for PayPal membership subscription payment links in Sandbox mode.
- Fixed – Added translation support for the Membership welcome email based on the membership page language (WPML).
WCFM Membership 2.11.7
- Updated – 09/07/2025
- Enhance – WordPress 6.8+ compatibility check added
- Enhance – WooCommerce 9.9+ compatibility check added
WCFM Membership 2.11.6
- Updated – 12/01/2025
- Enhance – WordPress 6.7+ compatibility check added
- Enhance – WooCommerce 9.5+ compatibility check added
20242 releases
WCFM Membership 2.11.5
- Updated – 26/06/2024
- Enhance – WooCommerce 9.0+ compatibility check added
- Enhance – Added support for new create Checkout Session API parametes
- Enhance – Update support for Stripe API v2023-10-16
WCFM Membership 2.11.4
- Updated – 07/06/2024
- Enhance – WordPress 6.5+ compatibility check added
- Enhance – WooCommerce 8.9+ compatibility check added
- Fixed – Encountering a fatal error upon clicking the vendor approve/reject button.
20236 releases
WCFM Membership 2.11.3
- Updated – 29/11/2023
- Enhance – WordPress 6.4+ compatibility check added
- Enhance – WooCommerce 8.3+ compatibility check added
- Fixed – PHP deprecation warning issue resolved
WCFM Membership 2.11.2
- Updated – 30/07/2023
- Enhance – WooCommerce 7.9+ compatibility check added
- Fixed – Membership payment issue resolved for Free plans
WCFM Membership 2.11.1
- Updated – 16/07/2023
- Enhance – WooCommerce 7.8+ compatibility check added
- Enhance – WooCommerce HPOS compatibility added
- Enhance – WPML email translation added
- Fixed – Membership PayPal payment issue resolved
WCFM Membership 2.11.0
- Updated – 03/05/2023
- Enhance – WooCommerce 7.6+ compatibility check added
- Fixed – Security patch added: Unauthenticated Insecure Direct Object Reference to Arbitrary User Password Change
WCFM Membership 2.10.7
- Updated – 26/03/2023
- Enhance – WooCommerce 7.5+ compatibility check added
- Fixed – Other minor fixes
WCFM Membership 2.10.6
- Updated – 14/01/2023
- Enhance – WooCommerce 7.3+ compatibility check added
- Enhance – PHO 8.0+ compatibility added
- Enhance – Stripe library updated to 10.2.0
20223 releases
WCFM Membership 2.10.5
- Updated – 29/10/2022
- Enhance – WooCommerce 7.0+ compatibility check added
WCFM Membership 2.10.4
- Updated – 19/02/2022
- Enhance – WordPress 5.9+ compatibility check added
- Enhance – WooCommerce 6.2+ compatibility check added
WCFM Membership 2.10.3
- Updated – 28/12/2021
- Enhance – WooCommerce 6.0+ version compatibility added
- Tweak – Stripe JS enqueue process changed
20219 releases
WCFM Membership 2.10.2
- Updated – 27/11/2021
- Fixed – Membership subscription button url not working issue resolved
WCFM Membership 2.10.1
- Updated – 21/11/2021
- Fixed – Membership subscription payment processing issue resolved
WCFM Membership 2.10.0
- Updated – 19/11/2021
- Enhance – WordPress 5.9+ compatibility check added
- Enhance – Ajax functions nonce check and user permission check added
- Fixed – Admin area PHP error issue resolved
WCFM Membership 2.9.10
- Updated – 26/09/2021
- Enhance – WordPress 5.8+ compatibility check added
- Enhance – WooCommerce 5.7+ compatibility check added
WCFM Membership 2.9.9
- Updated – 21/07/2021
- Enhance – WooCommerce 5.5+ compatibility check added
- Enhance – Many security check improved
WCFM Membership 2.9.8
- Updated – 13/06/2021
- Enhance – WooCommerce 5.4+ compatibility check added
- Enhance – Membership setting form security check improved
WCFM Membership 2.9.7
WCFM Membership 2.9.6
WCFM Membership 2.9.5
202013 releases
WCFM Membership 2.9.4
WCFM Membership 2.9.3
WCFM Membership 2.9.2
WCFM Membership 2.9.1
WCFM Membership 2.9.0
WCFM Membership 2.8.6
WCFM Membership 2.8.5
WCFM Membership 2.8.4
WCFM Membership 2.8.3
WCFM Membership 2.8.2
WCFM Membership 2.8.1
WCFM Membership 2.8.0
WCFM Membership 2.7.6
201934 releases
WCFM Membership 2.7.5
WCFM Membership 2.7.4
WCFM Membership 2.7.3
WCFM Membership 2.7.2
WCFM Membership 2.7.1
WCFM Membership 2.7.0
WCFM Membership 2.6.6
WCFM Membership 2.6.5
WCFM Membership 2.6.4
WCFM Membership 2.6.3
WCFM Membership 2.6.2
WCFM Membership 2.6.1
WCFM Membership 2.6.0
WCFM Membership 2.5.10
WCFM Membership 2.5.9
WCFM Membership 2.5.8
WCFM Membership 2.5.7
WCFM Membership 2.5.6
WCFM Membership 2.5.5
WCFM Membership 2.5.4
WCFM Membership 2.5.3
WCFM Membership 2.5.2
WCFM Membership 2.5.1
WCFM Membership 2.5.0
WCFM Membership 2.4.5
WCFM Membership 2.4.4
WCFM Membership 2.4.3
WCFM Membership 2.4.2
WCFM Membership 2.4.1
WCFM Membership 2.4.0
WCFM Membership 2.3.3
WCFM Membership 2.3.2
WCFM Membership 2.3.1
WCFM Membership 2.3.0
201836 releases
WCFM Membership 2.2.5
WCFM Membership 2.2.4
WCFM Membership 2.2.3
WCFM Membership 2.2.2
WCFM Membership 2.2.1
WCFM Membership 2.2.0
WCFM Membership 2.1.4
WCFM Membership 2.1.3
WCFM Membership 2.1.2
WCFM Membership 2.1.1
WCFM Membership 2.1.0
WCFM Membership 2.0.7
WCFM Membership 2.0.6
WCFM Membership 2.0.5
WCFM Membership 2.0.4
WCFM Membership 2.0.3
WCFM Membership 2.0.2
WCFM Membership 2.0.1
WCFM Membership 2.0.0
WCFM Membership 1.3.2
WCFM Membership 1.3.1
WCFM Membership 1.3.0
WCFM Membership 1.2.4
WCFM Membership 1.2.3
WCFM Membership 1.2.2
WCFM Membership 1.2.1
WCFM Membership 1.2.0
WCFM Membership 1.1.9
WCFM Membership 1.1.8
WCFM Membership 1.1.7
WCFM Membership 1.1.6
WCFM Membership 1.1.5
WCFM Membership 1.1.4
WCFM Membership 1.1.3
WCFM Membership 1.1.2
WCFM Membership 1.1.1
20176 releases
WCFM Membership 1.1.0
WCFM Membership 1.0.4
WCFM Membership 1.0.3
WCFM Membership 1.0.2
WCFM Membership 1.0.1
WCFM Membership 1.0.0
Questions about WCFM Membership’s releases
What is the latest version of WCFM Membership?
2.12.1, released on Nov 2, 2026 (1 week ago). It’s tested up to WordPress 7.1.4 and needs PHP 5.6 or later.
How often is WCFM Membership updated?
6 releases in the last year, about one every 70 days. Its first release on WordPress.org dates from December 2017.
Know when your rivals ship
Track your plugin and its rivals: TrackWP sees each new release in the nightly snapshot and alerts you, with what it did to their rank.
Start freeRelease dates come from the day each version’s folder was made in WCFM Membership’s WordPress.org SVN repository; the notes from its readme’s changelog, as its authors wrote it.