BuddyPress Codex

Version 14.0.0 is a major BuddyPress feature release. For Version 14.0.0, the database version (_bp_db_version in wp_options) was 13906, and the Trac revision was 13962. Read the full ticket log here. Highlights Administration Enhancements: Added contextual help tabs across various admin screens including BP Email and Group Types, improving user guidance (#9159, #9161, #9183). Build […]

Version 12.5.1 is a BuddyPress security release. It was released on June 10, 2024. 1 vulnerability was fixed. For Version 12.5.1, the database version (_bp_db_version in wp_options) was 13422, and the Trac revision was 13916. Security fix The Members block was vulnerable to a Stored Cross-Site Scripting. Discovered by Wesley (wcraft) from the Wordfence organization.

Version 12.4.1 is a BuddyPress security release. It was released on May 1, 2024. 1 vulnerability was fixed. For Version 12.4.1, the database version (_bp_db_version in wp_options) was 13422, and the Trac revision was 13829. Security fix The dynamic Members, dynamic Friends & dynamic Groups blocks were vulnerable to a Stored Cross-Site Scripting. Discovered by Wesley (wcraft) from the Wordfence […]

Version 12.4.0 is a BuddyPress maintenance release. It was released on March 25, 2024. 6 changes were introduced and 4 bugs were fixed. For Version 12.4.0, the database version (_bp_db_version in wp_options) was 13422, and the Trac revision was 13780. Bug Fixes #9086 BP Rewrites API: improve the page / buddypress post types slugs unicity checks. #9099 BP Rewrites API: only parse heartbeat requests which […]

Version 12.3.0 is a BuddyPress maintenance release. It was released on February 23, 2024. 7 changes were introduced to fix 7 bugs. For Version 12.3.0, the database version (_bp_db_version in wp_options) was 13422, and the Trac revision was 13738. Bug Fixes #9106 Settings: generate the email verification link the right way #9074 BP Blocks: make sure default block titles […]

Version 12.1.1 is a BuddyPress security and maintenance release. It was released on January 16, 2024. 11 changes were introduced including 1 security issue & 10 bug fixes. For Version 12.1.1, the database version (_bp_db_version in wp_options) was 13422, and the Trac revision was 13701. Security fix Using the Cover Image group’s REST API Endpoints, it was possible to […]

Version 12.0.0 is a major BuddyPress feature release. For Version 12.0.0, the database version (_bp_db_version in wp_options) was 13422, and the Trac revision was 13666. Read the full ticket log here. Highlights 🪢 The BP Rewrites API (a massive change!) Site Administrators now have a full control over all BuddyPress-generated URLs. They can choose slugs (portions of […]

Version 11.3.2 is a BuddyPress security release. It was released on October 17, 2023. 1 vulnerability was fixed. For Version 11.3.2, the database version (_bp_db_version in wp_options) was 13271, and the Trac revision was 13611. Security fix Potential Cross Site Scripting using Members/Groups block props by a user having a contributor role vulnerability was fixed. Discovered by Rafie Muhammad (Patchstack).

Version 11.3.1 is a BuddyPress security and maintenance release. It was released on August 24, 2023. 4 changes were introduced including 1 security issue & 3 bug fixes. For Version 11.3.1, the database version (_bp_db_version in wp_options) was 13271, and the Trac revision was 13559. Security fix A blind SQL Injection from unauthenticated users vulnerability was fixed in BP_XProfile_Query->find_compatible_table_alias(). Discovered […]

Version 11.0.0 is a major BuddyPress feature release. Please note BuddyPress 11.0.0 requires WordPress 5.7. Read the developer note about this requirement. All published developer notes are available here. For Version 11.0.0, the database version (_bp_db_version in wp_options) was 13271, and the Trac revision was 13391. Read the full ticket log here here. Highlights 🚀 BuddyPress […]