Version 14.4.0

Version 14.4.0 is a BuddyPress security and maintenance release. It was released on September 24, 2025. Two changes were introduced including 1 security fix and 1 bug fix.

For Version 14.4.0, the database version (_bp_db_version in wp_options) was 13906, and the Trac revision was 14128.

Security fix

• The BP REST API signups endpoint could leak signup data, including user email addresses, because of a too-lenient lookup function. Thanks to Asim Alshaya for responsibly reporting this issue.

Bug Fixes

• Improve behavior of bp_email_unsubscribe_handler(). After the changes in the “Improve security of status update messages” changeset, non-logged-in users clicking an unsubscribe link received no feedback on the success of their action (see #9301).