Premium Packages · Version history
Premium Packages changelog and version history
- Latest version
- 7.3.3
- Nov 4, 2026 (5 days ago)
- Releases
- 127
- since 2018
- In the last year
- 29
- about one every 11 days
- Tested up to
- WordPress 7.1.4
Releases each year
- 20181 release
- 20204 releases
- 202110 releases
- 202228 releases
- 202327 releases
- 202415 releases
- 202516 releases
- 202626 releases
202626 releases
Premium Packages 7.3.3Latest
- Added Order Notes Awaiting Reply dashboard widget listing orders whose latest note is from the customer
- Fixed Audio Preview for files attached by URL (Dropbox, S3 links); they now play in full instead of failing
Premium Packages 7.3.2
- Fixed Pay Now and Renew acting on any order by ID; they now need the buyer and a nonce, and paying never grants another buyer’s guest order ( Reported via WPScan )
- Fixed abandoned cart recovery links loading any order’s cart; links are now signed, so older links open an empty cart
Premium Packages 7.3.1
- Fixed PayPal subscription activation accepting any active subscription to complete an order; it must now be the order’s own ( Reported by Enrico Marcolini, Claudio Marchesini and Dottor Marc )
- Fixed guest order status being readable by order ID alone ( Reported by Ryan Fabella )
- Fixed saved carts loading for anyone with the cart link; carts now load only for the shopper who saved them ( Reported by Ryan Fabella )
- Fixed any logged-in user linking a guest order to their account by order ID; linking now needs the order email or the buyer’s session ( Reported via WPScan )
- Fixed guest billing info being editable with a reused password reset token ( Reported by Muni Nitish Kumar Yaddala )
Premium Packages 7.3.0
- Added commerce abilities so AI agents can read orders, customers, licenses and sales totals (needs Download Manager 7.6+ on WordPress 6.9+)
- Fixed authenticated stored XSS in order notes where a hex-escaped tag could be decoded into live markup and execute script in the admin order view
- Fixed customer profiles showing 0 completed orders
Premium Packages 7.2.8
- Fixed “Invalid download link” for products added to an order from the admin order page, and removed products staying downloadable
- Fixed changing an item’s license on an order not changing the files the customer gets. Re-adding a product now replaces it instead of adding a duplicate
- Orders edited this way before the update are repaired when opened in admin
Premium Packages 7.2.7
- Fixed the checkout button ignoring the color chosen in Button Settings
- Fixed the View and Download buttons for log files showing “Sorry, you are not allowed to access this page”
- Fixed stored XSS in the billing Phone, State, Email and Tax ID fields
Premium Packages 7.2.6
- Fixed Audio Preview play buttons not playing MP3 files before purchase
- New: Audio Preview length setting (default 30 seconds). Requires Download Manager 7.5.9+
- Preview plays no longer count as downloads or toward download limits
Premium Packages 7.2.5
- Fixed billing details not being saved for orders placed through the checkout page with Test Payment, Cash, Cheque or any other redirect-based payment method. The order was created with the customer’s name, email and address, but the payment step then overwrote them with an empty value, so the order…
- Paying for an existing order (renewals and Pay Now) no longer clears the billing details already stored on it
- The default Purchase Confirmation – Guest email now links to the Guest Order page with a Download button when Guest Download is enabled, instead of asking the guest to create an account. The template uses the {{guest_order_url}} tag, which you can also add to a customised version of this email. Sit…
Premium Packages 7.2.4
- Fixed license keys being generated with a domain limit of 0, which the plugin treats as unlimited. The limit configured for each license type in the Premium Package settings was never applied when a key was created for an order, so a customer who bought a Standard license could activate the key on…
- Keys that were already generated with a limit of 0 keep that value. Open the key from the Licenses screen in the admin and set its domain limit to correct it
- The license types REST endpoint now returns the configured domain limit for each type instead of always 0
Premium Packages 7.2.3
- Fixed automatic updates for products sold with license keys. The download link returned by license validation only worked for the order owner’s logged-in browser session, but WordPress fetches update packages from the server with no session, so every automatic update was refused with “Invalid Acces…
- License download links are honoured only while the order is Completed. A link issued earlier stops working once the order expires, is cancelled or refunded, or the license is deactivated or the domain removed from it
- License download links are always issued as signed links, including on sites using the WPDMPPD_PERMALINK short-link format, so the domain in a link can’t be altered
- Fixed a fatal error when a download link referenced an order that no longer exists
Premium Packages 7.2.2
- Security: fixed an unauthenticated stored cross-site scripting issue and cart price tampering. The legacy cart update handler merged whatever item fields a request sent into the cart, so a visitor could store script in a product name – which then ran for anyone viewing that order’s invoice – or set…
- Security: invoices now escape product names and billing details, so orders that already contain injected markup display it as text
- Security: a logged-in customer can no longer open the invoice of an order that isn’t theirs, which previously exposed other customers’ names, addresses and email addresses. Administrators can still view every invoice
- If your theme overrides invoices/default/invoice.php, compare it with the updated template and escape the product name and billing fields in your copy too
- Reported via Wordfence
Premium Packages 7.2.1
- Security: PayPal webhook events are now verified with PayPal before being acted on. Both the REST endpoint and the legacy listener accepted any JSON posted to them, so an unauthenticated request could forge a payment event to mark an order paid and extend its expiry, or forge a cancellation event t…
- Security: renewing an order no longer completes one that was never paid. A renewal continues a subscription that has been paid for at least once, so an order still awaiting payment is left alone unless an administrator renews it deliberately
- Reported by Farid Narimanov
Premium Packages 7.2.0
- Shoppers can now choose the currency they see prices in. Package pages, the cart and the checkout all convert at the live exchange rate, while the payment itself is taken in your store currency – the checkout says so and names the exact amount that will be billed, so nothing changes about how money…
- Fixed a failed rate refresh being reported indefinitely. Only the scheduled job cleared the recorded error, so refreshing successfully from the settings button left the warning in place – in some cases naming a provider that was no longer even selected. Any successful refresh now clears it, and a f…
- How often rates refresh is configurable, defaulting to every 12 hours. Most providers publish once a day, so refreshing more often returns the same figures; the setting is there for stores that want a tighter window, and is capped at a week. Prices are always shown from the stored rate and never fe…
- Exchange rates work without setting anything up. Frankfurter is the default source: no account, no API key, no quota, and 165 currencies published from central bank data. Rates refresh on a schedule, an outage leaves the previous rates in place rather than failing, and a single-currency store never…
- Rates are kept as dated snapshots rather than one value that gets overwritten, so the rate that applied on any past day can be recovered and a bad refresh can be discarded without having destroyed what it replaced
- Added a Currency settings tab holding everything in one place: store currency, symbol position, decimals and separators with a live preview, which currencies to offer, where rates come from, when they were last updated and how many pairs are stored. Currencies that are enabled but have no rate yet…
- Three ways to offer the choice: a [wpdmpp_currency_switcher] shortcode, a “WPDM Currency Switcher” widget for any sidebar or block area, and a floating panel that sits on every page. The panel is off by default and can be placed in any of five positions with an adjustable distance from the edge, so…
- Reporting figures across the admin are converted into your reporting currency and labelled with it – dashboard widgets, the orders and renewals lists, the customer list, seller earnings and payout balances. Each order records the currency it was taken in and its value in the reporting currency, so…
- Orders taken before rates existed can be restated, valuing each at the rate that applied on the day it was placed rather than one blanket rate. Only currencies with a known rate are touched; the rest stay flagged rather than converted at a guess
- Prices, discounts and thresholds round to the number of decimals their currency actually uses. Currencies with no minor unit, such as yen and won, no longer gain decimal places – which could previously reach a gateway as an amount a hundred times too large
- Fixed-amount coupons, and their minimum and maximum order thresholds, are converted into the currency prices are shown in. A flat “10 off” was otherwise worth a hundred times more against a weak currency than a strong one
- Subscription renewals stay in the currency the subscription started in and are reported at the rate captured on the original order, so the same recurring charge does not report a different figure every cycle purely because rates moved. PayPal subscription plans are created in the currency the subsc…
- Fixed the checkout total ignoring role-based discounts. It was worked out as the subtotal minus any coupon only, so a cart with a role discount showed a subtotal, a discount beneath it, and a total that had not subtracted it. The order was always built at the correct figure, so the summary quoted a…
- Fixed a fatal error on the currency settings screen when the saved currency is one the plugin does not recognise
Premium Packages 7.1.1
- Transaction ids on the admin orders list, order details and renewed orders screens now link to the entry in the payment gateway’s own dashboard. PayPal is handled in core, and points at the billing subscription or the payment activity page depending on what the id refers to, using the sandbox dashb…
- Fixed pagination on the Renewed Orders tab ignoring the search filters. The page count came from a count of every row in the renewals table rather than the filtered set, so searching – by date range, status or customer – listed the right renewals but still offered pages for the whole history, and f…
- Fixed the product on a coupon not saving when an existing coupon was edited. The admin form posts the field as “product” while the update routine only looked for “product_id”, so the value was dropped on every edit – creating a coupon was unaffected, because the coupon model already accepted either…
- Fixed an order note attachment needing a page refresh before it could be downloaded. The note markup returned straight after adding a note rendered each attachment as a dead “#” link, so the file only became reachable once the page was reloaded and the template built the real download token. The ad…
Premium Packages 7.1.0
- Fixed the “Disable Product Coupon Field” setting doing nothing. Like the role discount toggle it was written by the settings page and never read. The separate per-product coupon input the setting was named for is no longer rendered anywhere – the checkout summary coupon box is the only coupon input…
- Fixed the “Disable Role-based Discount” setting doing nothing. The option was written by the settings page but never read anywhere in the plugin, so role discounts carried on being applied whether it was on or off. Every place that applies one now honours it – the price shown on the package page, t…
- Fixed the Pricing & Discounts tab missing from the package settings when editing a package in the front-end author dashboard, which left sellers with no way to set a price outside wp-admin. The tab was registered only for admin requests – the metabox service was not loaded on the front end at all,…
- Fixed the billing address never appearing at checkout when tax calculation was turned off. The checkout template gated the whole address block on the tax setting alone, so a store that asked for a billing address but did not charge tax collected no address at all. The address is now shown whenever…
- Fixed the archive name when a customer downloads a purchased package that holds more than one file. The zip arrived as “-123.zip” instead of “Product Name-123.zip”, because the premium download path handed the package to the download handler with only post_title set while the handler builds the arc…
Premium Packages 7.0.9
- Fixed add to cart failing with a server error on PHP 8.0 and above. The /cart and /cart/dynamic REST routes registered floatval() directly as a sanitize callback, but WordPress passes three arguments to sanitize callbacks and floatval() accepts one, which throws an ArgumentCountError. The /cart rou…
- Fixed payment gateways always charging in US dollars when the store currency was set to anything else. The shared gateway base class read the currency from a _wpdmpp_currency option that is never written, so it always fell back to USD; it now reads the configured store currency and honours the wpdm…
- Security: Fixed an unauthenticated price manipulation flaw in the /cart/dynamic REST route. The route was registered with a public permission callback and took the line item price straight from the request body, so any visitor could place a paid package in their cart at a price of their choosing an…
- Security: Applied the same restriction to the legacy ?addtocart=dynamic request handler, which took its price from the query string on every page load with no capability check and no nonce
Premium Packages 7.0.8
- Added a Premium/Free filter to the package list in admin, so the list can be narrowed to packages that have a price. A package counts as premium when its base price or an active sale price is above zero, matching what the front end treats as paid
- Fixed the PayPal Buy Now button failing with “Request is not well-formed” when auto renew is enabled. The button was built with an empty subscription plan id on the product page, where no order exists yet; it now requests the plan when it is clicked, the same way the checkout page already did. This…
- Added a gateway-agnostic Buy Now checkout route, so payment add-ons can contribute their own button to the Buy Now box through the existing wpdmpp_buynow_options filter without reimplementing order creation. The Stripe add-on uses it for a Pay with Card button from version 3.0.2
- Fixed Buy Now charging for the wrong product. The button built its order from the shopper’s cart, so it billed whatever was already in there – buying from a product page with another item in the cart charged for that other item instead, and an empty cart failed outright. Buy Now now builds the orde…
- Fixed the PayPal Buy Now button being rejected for missing billing details. Buy Now has no checkout form, so a signed-in buyer’s name, email and address now come from their saved billing profile, and a guest is asked for name and email beside the button. The checkout endpoints also accept the older…
Premium Packages 7.0.7
- Security: Fixed a missing balance validation in the withdrawal/payout system, where a withdrawal request was never checked against the seller’s actual earned balance; any logged-in user could submit a payout request for an arbitrary amount, and a seller with any earnings at all could request an unl…
- Security: Added nonce verification to the front-end withdrawal request handler, which previously accepted a plain POST on every page load and was open to cross-site request forgery ( Reported by Farid Narimanov )
- Seller balances are now calculated in a single place ( PayoutService ), so the amount shown on the earnings dashboard always matches the amount the server will authorise
- The admin Payouts > Dues list now shows each seller’s total earnings alongside the requested amount, and flags any request that exceeds them
Premium Packages 7.0.6
- Security: Fixed an unauthenticated stored XSS via the guest billing order_email field, where a payload submitted through the guest billing update endpoint was rendered unescaped in the admin orders list and executed in the administrator’s browser; all customer name and email values in the orders li…
Premium Packages 7.0.5
- Security: Fixed an authenticated (admin+) SQL injection in the order renewals list, where the orderby parameter was interpolated into the ORDER BY clause unescaped; sortable columns are now restricted to a fixed allow-list and every filter value ( order id, customer, status, payment status, date ra…
- Security: Fixed an unauthenticated authentication bypass in the premium download handler, where a base64/JSON download token was accepted with no signature and could mint a login session for the order owner; the session-issuing code path has been removed so a download link can no longer log anyone…
Premium Packages 7.0.4
- Fixed clearing all domains from a license – the license is now reactivated at the same time, so a deactivated license becomes usable again without a separate status change
Premium Packages 7.0.3
- Improved license creation – the domain limit is now set automatically from the purchased license type across the admin New License form, the REST API, and customer license key generation
- Fixed generated license keys always getting a 1-domain limit regardless of the purchased license tier
- Unlimited licenses now use their configured limit, falling back to 999 when no limit is set
Premium Packages 7.0.2
- Fixed license domain removal from the user dashboard – the Remove button now uses the REST API and correctly unlinks domains
- Improved license validate API response – the expiration date now reflects the associated order’s expire date
Premium Packages 7.0.1
- Added full license details to the license validate API response – order ID, order status, auto-renew status, activation and expiration dates
- Fixed potential fatal errors in scheduled tasks when the core Download Manager plugin is unavailable
Premium Packages 7.0.0
- A ground-up codebase overhaul for better performance, stability, security, and extensibility
- NEW: REST API – Full REST API covering cart, checkout, orders, coupons, licenses, products, customers, and invoices
- Redesigned customer dashboard – Refreshed orders list and order details pages with a modern, mobile-friendly interface and dark mode support
- Modernized admin dashboard widgets (sales overview, latest orders, recent sales, top sellers) with faster lazy loading
- Redesigned setup wizard – modern step-by-step onboarding that launches automatically on fresh installs, with PayPal API credentials setup
- Improved payment gateway settings with a cleaner, more consistent configuration UI
- Improved single-page checkout, PayPal Smart Buttons, and auto-renewing subscription reliability
- Removed legacy dead code and unused files for a lighter, cleaner plugin package
- Numerous bug fixes, security hardening, and compatibility improvements
Premium Packages 6.2.0
202516 releases
Premium Packages 6.1.3
Premium Packages 6.1.2
Premium Packages 6.1.1
Premium Packages 6.1.0
Premium Packages 6.0.9
Premium Packages 6.0.8
Premium Packages 6.0.7
Premium Packages 6.0.6
Premium Packages 6.0.5
Premium Packages 6.0.4
Premium Packages 6.0.3
Premium Packages 6.0.2
Premium Packages 6.0.1
Premium Packages 6.0.0
Premium Packages 5.9.9
Premium Packages 5.9.8
202415 releases
Premium Packages 5.9.7
Premium Packages 5.9.6
Premium Packages 5.9.5
Premium Packages 5.9.4
Premium Packages 5.9.3
Premium Packages 5.9.2
Premium Packages 5.9.1
Premium Packages 5.9.0
Premium Packages 5.8.9
Premium Packages 5.8.8
Premium Packages 5.8.7
Premium Packages 5.8.6
Premium Packages 5.8.5
Premium Packages 5.8.4
Premium Packages 5.8.3
202327 releases
Premium Packages 5.8.2
Premium Packages 5.8.1
Premium Packages 5.8.0
Premium Packages 5.7.9
Premium Packages 5.7.8
Premium Packages 5.7.7
Premium Packages 5.7.6
Premium Packages 5.7.5
Premium Packages 5.7.4
Premium Packages 5.7.3
Premium Packages 5.7.2
Premium Packages 5.7.1
Premium Packages 5.7.0
Premium Packages 5.6.9
Premium Packages 5.6.8
Premium Packages 5.6.7
Premium Packages 5.6.6
Premium Packages 5.6.5
Premium Packages 5.6.4
Premium Packages 5.6.3
Premium Packages 5.6.2
Premium Packages 5.6.1
Premium Packages 5.6.0
Premium Packages 5.5.92
Premium Packages 5.5.91
Premium Packages 5.5.9
Premium Packages 5.5.8
202228 releases
Premium Packages 5.5.7
Premium Packages 5.5.6
Premium Packages 5.5.5
Premium Packages 5.5.4
Premium Packages 5.5.3
Premium Packages 5.5.2
Premium Packages 5.5.1
Premium Packages 5.5.0
Premium Packages 5.4.9
Premium Packages 5.4.8
Premium Packages 5.4.7
Premium Packages 5.4.6
Premium Packages 5.4.5
Premium Packages 5.4.4
Premium Packages 5.4.3
Premium Packages 5.4.2
Premium Packages 5.4.1
Premium Packages 5.4.0
Premium Packages 5.3.9
Premium Packages 5.3.8
Premium Packages 5.3.6
Premium Packages 5.3.5
Premium Packages 5.3.4
Premium Packages 5.3.3
Premium Packages 5.3.1
Premium Packages 5.3.0
Premium Packages 5.2.9
Premium Packages 5.2.6
202110 releases
Premium Packages 5.2.5
Premium Packages 5.2.4
Premium Packages 5.2.3
Premium Packages 5.2.2
Premium Packages 5.2.1
Premium Packages 5.1.9
Premium Packages 5.1.0
Premium Packages 5.0.8
Premium Packages 5.0.5
Premium Packages 4.7.2
20204 releases
Premium Packages 4.6.9
Premium Packages wpdm-premium-packages
Premium Packages 4.6.5
Premium Packages 4.6.2
20181 release
Premium Packages 3.9.9
Questions about Premium Packages’s releases
What is the latest version of Premium Packages?
7.3.3, released on Nov 4, 2026 (5 days ago). It’s tested up to WordPress 7.1.4.
How often is Premium Packages updated?
29 releases in the last year, about one every 11 days. Its first release on WordPress.org dates from July 2018.
Know when your rivals ship
Track your plugin and its rivals: TrackWP sees each new release in the nightly snapshot and alerts you, with what it did to their rank.
Start freeRelease dates come from the day each version’s folder was made in Premium Packages’s WordPress.org SVN repository; the notes from its readme’s changelog, as its authors wrote it.