User Registration Brevo (ex Sendinblue) 6.2.8

6.2.8 - 09/09/2026
- Fix - Standardized Pro upgrade link UTMs.
- Fix - Stored XSS in the Form Analytics user journey table.
- Fix - Hardened form analytics queries with prepared statements.
- Fix - Content restriction bypassed via WordPress core REST API.
- Fix - Team Membership: invited members now receive the plan's role.
- Fix - Team Membership: team leaders could edit teams they don't lead.
- Fix - Standardized outbound UTM parameters and invalid campaign keys.
- Fix - Users could be redirected to an outside website after logging in.
- Fix - Frontend Listing title-save request could rename unrelated posts.
- Fix - Unauthenticated force-logout of any user via ?force-logout=.
- Fix - Membership thank you page exposed another member's account details.
- Fix - Team Membership: scoped Edit Team form nonce to the team being edited.
- Fix - Use timing-safe comparison for email confirmation and approval tokens.
- Fix - Stripe payment could be replayed to renew a membership without paying.
- Fix - Privilege escalation via membership role and open redirect after login.
- Fix - Coupons and Frontend Listing bulk delete triggerable via a crafted link.
- Fix - Coupons AJAX handlers allowed arbitrary post deletion and coupon minting.
- Add - `{{force_logout_url}}` smart tag for Pro's prevent concurrent login email.
- Fix - Tax regions and rates could be deleted without a nonce or permission check. […]

6.2.7 - 12/08/2026
- Fix - Payment related issues for tax & others
- Fix - User login after invalid failed payment.
- Fix - Performance issue on flush rewrite rules.
- Fix - Malformed my account URL on Plain permalinks.
- Fix - Both renewal emails sent regardless of setting.
- Fix - Disable emails setting not blocking all emails.
- Fix - Fatal error on registration if form data is null.
- Fix - Default subscriber role added for disabling settings.
- Fix - False success shown when profile update saves nothing.
- Fix - Show emails only when respective settings are enabled.
- Fix - Membership links not translated on multilingual sites.
- Fix - Change Plan/Renew links not using correct language page.
- Fix - Profile Picture removed when saving another user's profile.
- Fix - Added site assistant and admin notice when registration disabled.
- Fix - Hide Payments and Subscriptions menus until relevant data exists.
- Fix - Hide Global Restriction Message setting until a plan or rule exists.
- Fix - Membership field hides radio button for single plan; correct Total for free plans.
- Fix - Hide Renewal Behaviour setting on Membership settings until a membership plan is created.
- Fix - Site Assistant hides membership/payment notices until a plan exists for Advanced Registration users.