== Changelog == = 2.9.2 January 14, 2025 = * Enhancements: - Added: Compatibility with the new [Ultimate Member - Zapier](https://ultimatemember.com/extensions/zapier/) extension - Added: Only approved user Reset Password setting defined as true by default - Added: `UM()->is_new_ui()` function for future enhancements related to new UI - Added: Filter hook `um_before_user_submitted_registration_data` - Tweak: Changed hook's priority for initialization of email templates paths - Tweak: Removed `load_plugin_textdomain` due to (article)[https://make.wordpress.org/core/2024/10/21/i18n-improvements-6-7/#Enhanced-support-for-only-using-PHP-translation-files] * Bugfixes: - Fixed: Security issue CVE ID: CVE-2025-0308 - Fixed: Security issue CVE ID: CVE-2025-0318 - Fixed: Using placeholders in email templates when Action Scheduler is active. Using `fetch_user_id` attribute for fetching necessary user before sending email - Fixed: PHP 8.4 compatibility. Using WordPress native `wp_is_mobile()` instead of MobileDetect library - Fixed: PHP errors related to `UM()->localize()` function - Fixed: PHP errors in user meta header when `last_update` meta is empty - Fixed: Small CSS changes and avoid duplicates - Fixed: Removed ms-native show password button for type="password" field in UM forms - Fixed: Define scalable attribute for cropper * Deprecated: - Fully deprecated `UM()->mobile()` function - Fully deprecated `UM()->localize()` function - Fully deprecated `um_language_textdomain` filter hook * Templates required update: - account.php * Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade = 2.9.1 November 15, 2024 = * Enhancements: - Added: `um_image_upload_validation` hook for 3rd-party validation during upload images * Bugfixes: - Fixed: "Load textdomain just in time" issue - Fixed: Capabilities checking in the wp-admin > Users list table - Fixed: File/image upload on the role specific profile form - Fixed: Issues when the form's custom fields meta has a wrong format - Fixed: Validation of the "Registration Default Role" slug - Fixed: Allowed query variables via registered REST API class only when REST_REQUEST is defined = 2.9.0 November 12, 2024 = * Enhancements: - Added: Action Scheduler (version 3.8.1) for email sending. More info is [here](https://actionscheduler.org/) - Added: Supporting new `wp_register_block_metadata_collection()` function for registering WP Blocks * Bugfixes: - Fixed: `ajax_image_upload()` and `ajax_resize_image()` handlers vulnerability. CVE ID: CVE-2024-10528 - Fixed: Disabling user status column wp-admin > Users screen - Fixed: User status filter on wp-admin > Users on mobile devices - Fixed: Extra unwrapping of the WP Editor field's value * Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade = 2.8.9 October 14, 2024 = * Enhancements: - Added: Using PHP tidy extension (if it's active) to make HTML textarea value clear - Added: `um_tidy_config` filter hook for setting PHP tidy config - Tweak: Avoid using force `set_status()` function. - Tweak: Properly using `UM()->common()->users()->get_status( $user_id )` instead of `um_user( 'account_status' )` - Tweak: Properly using `UM()->common()->users()->get_status( $user_id, 'formatted' )` instead of `um_user( 'account_status_name' )` - Tweak: Properly using `um_user( 'status' )` for getting user role setting while registration * Bugfixes: - Fixed: UM tipsy removing inside .um-page selector (e.g. tipsy init from um-modal) - Fixed: Rollback using `