Version 11.5.1

Version 11.5.1 is a BuddyPress security and maintenance release. It was released on September 24, 2025. Two changes were introduced including 1 security fix and 1 bug fix.

For Version 11.5.1, the database version (_bp_db_version in wp_options) was 13408, and the Trac revision was 14137.

Security fix

• The BP REST API signups endpoint could leak signup data, including user email addresses, because of a too-lenient lookup function. Thanks to Asim Alshaya for responsibly reporting this issue.

Bug Fixes

• Improve behavior of bp_email_unsubscribe_handler(). After the changes in the “Improve security of status update messages” changeset, non-logged-in users clicking an unsubscribe link received no feedback on the success of their action (see #9301).