פורום wpForo

שינויים

הערות חשובות לעדכון

• לאחר העדכון, נא למחוק את כל המטמונים ולנקות את ה-CDN אם יש לך
• לאחר העדכון, נא לשטוף את Redis Object Cache אם הפעלת את המטמון הזה

wpForo Forum v3.1 Release Summary

wpForo Forum 3.1.1 | 31.05.2026

• Security: Fixed Broken Authentication vulnerability allowing administrator email mutation
• Security: Fixed PHP Object Injection vulnerability via widget AJAX handlers

wpForo Forum 3.1.0 | 19.05.2026

• Security: Fixed vulnerability issue in the Revisions module
• Security: Fixed vulnerability issue in Gutenberg block renderers
• New: Tools – Email Queue Tab, email notifications now sent asynchronously with automatic fallback to direct sending when WP-Cron is broken or disabled, dramatically reducing post-submission delays on busy forums
• New: Tools – Cron Jobs Tab, listing every WordPress scheduled event with per-row Run Now / Delete / Details, wpForo events sorted to the top
• Fixed: Duplicate email notifications could be sent for posts that pass moderation
• Fixed: Duplicate topic view counts could be recorded for the same user
• Fixed: Processing spinner could remain visible after indexing completed
• Fixed: Email Queue admin tab now shows "Cron idle" instead of "unknown" when there are no emails to send
• AI New: Custom Knowledge – upload TXT, MD, JSON, and PDF files (Business+ plan) to enhance AI Chatbot and Bot Reply with your own documentation
• AI New: Custom Knowledge – scanned/image-only PDFs auto-fall back to OCR when native text is sparse
• AI New: Custom Knowledge integrated into AI Chatbot, and AI Topic Suggestions
• AI Improved: AI cron jobs are now only registered when a tenant is connected to the AI service, preventing stale wp_cron entries on installs that do not use AI features
• AI Improved: AI Indexing breakdown loads asynchronously on large forums for faster admin page loads
• AI Improved: AI Logs filter now includes Knowledge Indexing entries

wpForo Forum 3.0.9 | 28.04.2026

• Fixed: AI Task "Topic Tag Manager" now runs asynchronously to avoid blocking topic creation
• Fixed: AI Content Moderation now correctly exempts admins and moderators from spam detection
• Fixed: AI Logs timezone display – timestamps now stored in UTC for correct timezone conversion
• Fixed: Built-in moderation logs now correctly identify replies vs topics
• Fixed: Forum Content Indexing "Stop" button now works correctly
• Fixed: Forum Content Indexing status auto-refresh now survives page reloads
• Fixed: Forum Content Indexing "Total Threads Indexed" count updates immediately after indexing
• Fixed: Local indexing progress detection for both manual and auto-indexing queues
• Added: WordPress Indexing post type filters for customization
• Added: Description explaining indexed count vs total count differences

wpForo Forum 3.0.8 | 24.04.2026

• Fixed: AI Chat WordPress content citations not displaying as clickable links
• Updated: New phrases to wpForo Phrase System
• Updated: Translation template (wpforo.pot) with AI feature phrases

wpForo Forum 3.0.7 | 23.04.2026

• Security: Fixed usergroup privilege escalation vulnerability during registration
• New: WordPress Indexing now has its own dedicated admin tab
• Fixed: AI Chatbot now respects "Bot Reply Unapproved" setting correctly
• Fixed: AI subscription status not refreshing immediately after purchase
• Fixed: AI Tasks multi-board support and scheduled task permissions
• Fixed: Forum Layout 5 dark mode styling

wpForo Forum 3.0.6 | 19.04.2026

• Security: Added authorization check to profile file deletion
• Security: Prevent AI search cache from leaking private content
• New: AI Indexing – Clear Selected Forum Index button to delete specific forum embeddings
• Fixed: AI Tasks board_id not saved correctly for non-default boards
• Fixed: AI Indexing – Forum permission checks blocking WP Cron background indexing
• Fixed: AI Indexing – Forum indexed counts not updating during indexing
• Fixed: AI Indexing – Nonce verification fails on Clear Forum Index action
• Fixed: AI Search – Browser auto-translate corrupting typewriter text effect
• Fixed: Forum checklist hierarchy sorting and recursive checkbox cascading
• Fixed: Forum topic counts cache not clearing when topics change
• Fixed: Form submit button value lost when disabling during submission

wpForo Forum 3.0.5 | 13.04.2026

• Security: Hardened sorting parameter validation
• Fixed: PHP warning for undefined board locale property in Task Manager
• Fixed: PHP warning for non-existent ram_cache method in AI Content Moderation
• Fixed: AI Indexing admin page unnecessary auto-refresh when jobs queued for future

wpForo Forum 3.0.4 | 12.04.2026

• Fixed: AI WordPress Content Indexing now works on hosts with disabled WP-Cron
• Fixed: AI Content Indexing admin page performance on large forums
• Fixed: Registration form losing field values when validation error occurs
• Fixed: Spam protection flow issues, enabled 'Can pass moderation' allows new users to pass the moderation

wpForo Forum 3.0.3 | 10.04.2026

• Security: Prevent arbitrary file deletion
• New: Boxed Layout – Forum cover image is now fully clickable
• New: AI Search – Quality signal boosting for better result ranking
• New: AI Indexing – Progress tracking during local storage indexing
• New: AI Indexing – Noise filtering to improve search quality
• Improved: AI Topic Suggestions now respect forum access permissions
• Improved: AI performance with optimized default quality settings
• Improved: reCAPTCHA only loads on forum pages when needed
• Fixed: Auto-indexing spinner showing endlessly on active forums
• Fixed: Sticky topic icon priority in mixed layout mode
• Fixed: Local semantic search relevance thresholds
• Fixed: Empty forum access array causing search errors

wpForo Forum 3.0.2 | 08.04.2026

• Fixed: Subscription Manager shows empty forum tree on multi-board installations
• Fixed: Stale user permissions after switching boards on profile tabs
• Fixed: Board switcher only works one direction on profile pages (multi-board)
• Fixed: AI checkbox settings (chatbot_allowed_groups, bot_reply_includes) reset to defaults on every page load
• Improved: AI Content Indexing admin page performance on large forums
• Security: Prevent unauthenticated post disclosure via RecentPosts widget (Broken Access Control)

wpForo Forum 3.0.1 | 07.04.2026

• Version 3.0.1
• Fixed: Simplified and threaded forum layout issues on mobile screen
• Fixed: reCAPTCHA v3 doesn't work in some cases

wpForo Forum 3.0.0 | 06.04.2026

• New Theme: 2026

  • New default theme – Modern, clean design with improved readability
  • Forum Layouts – Extended, Simplified, Threaded, and Boxed layout options
  • Members Page redesign – Improved member listing with better UX
  • Topic Tags widget – Restyled with clean flat designThreaded Layout improvements
  • New: Boxed Forum Layout

• New Features

  • Recent Activity (What’s New) Page
  • Timeline-based activity feed showing forum actions
  • Configurable activity retention with daily cleanup cron
  • Mobile-responsive design
  • Access control for viewing activities
  • Delete button for moderators

• Security & Spam Protection

  • reCAPTCHA v2 Invisible support
  • Less intrusive spam protectionreCAPTCHA v3 support
  • Score-based invisible protectionEnhanced flood protection
  • Time-window rate limiting to prevent spam floodsProper moderation log messages for flood protection

• Forum Features

  • "Make All Topics Private" option
  • For Ticket/Support forums
  • Popular Tags
  • Now clickable with links to forum tag searchTop Contributors
  • Added usergroup, topics, and posts columnsAutofocus to search field
  • Improved search UXMulti-language support for members search

• Widgets

  • Block widgets with improved functionality
  • New UI for Topic Tags widget with clean flat design

• Performance Improvements

  • Static caching for wpforo_phrase()
  • Significant speed boost for English locale
  • Static caching for wpforo_is_bot() – Faster bot detection
  • Subscription status caching – Faster frontend loading
  • Semantic search caching – Avoid duplicate API calls
  • Translation caching with post invalidation

• AI Features (wpForo AI)

  • Core AI Features
  • AI Chatbot – Conversational AI assistant with conversation management
  • AI Insights – Sentiment analysis, trending topics, and recommendations
  • Content Moderation – AI-powered spam detection with configurable actions
  • Topic Generator – Auto-generate discussion topics
  • Reply Generator – AI-assisted replies with 23 style options
  • Tag Maintenance – Automatic topic tagging
  • Topic Summary – Summarize long discussions

• Search & Indexing

  • Semantic Search – Natural language search across forum content
  • Local & Cloud Storage – Choose where to store embeddings
  • Image Indexing – Multimodal RAG for Professional+ plans
  • WordPress Content Indexing – Index custom post types
  • Auto-indexing with configurable settings

• Analytics

  • AI Usage Analytics – Track credit consumption
  • Forum Activity Analytics – Activity trends and statistics
  • User Engagement analytics
  • Content Performance analytics
  • AI Logs with filtering and detail view

• Other AI Improvements

  • Bot Reply with tone and style options
  • Topic Suggestions with related topicsTranslation support
  • Activity retention settings
  • Multi-board support for analytics

• Security: Unauthenticated SQL Injection via 'referer' Parameter

• Security: Missing Authorization to Authenticated (Subscriber+) Arbitrary Forum Post Modification via 'guestposting' Parameter

wpForo Forum 2.4.17 – Last 2.x Version | 15.03.2026

• Security: Authenticated (Subscriber+) Arbitrary File Deletion

wpForo Forum 2.4.16 | 28.02.2026

• New: Admin notice announcing wpForo 3.0 AI Edition with links to introduction and beta program
• New: Auto-update protection — blocks automatic updates from 2.x to 3.x to prevent unattended major upgrades
• New: Inline warning on Plugins page when wpForo 3.0 update is available
• New: Auto-update toggle replaced with backup reminder when major version is pending
• Security: Added permission checks for post approve/unapprove actions
• Security: Added permission checks for topic close/open actions
• Security: Added permission checks for topic move, merge, and split actions
• Security: Added capability check for role synchronization
• Security: Fixed RSS feed exposing private and unapproved content
• Security: Fixed stored XSS via forum description output
• Security: Blocked SVG file uploads in avatar to prevent XSS
• Security: Replaced json_encode with wp_json_encode to prevent script injection

wpForo Forum 2.4.0 – 2.4.15 | 10.02.2026

סיכום השחרור של wpForo Forum v2.4

• Version 2.4.15
• Security: Vulnerability – Unauthenticated Time-Based SQL Injection
• ———
• Version 2.4.14
• Security: Vulnerability – Authenticated (Subscriber+) PHP Object Injection
• ———
• Version 2.4.13
• Security: Vulnerability – Unauthenticated SQL Injection
• ———
• Version 2.4.12
• Compatibility: PHP 8.5
• Compatibility: WordPress 6.9
• Security: Vulnerability – Unauthenticated SQL Injection
• Fixed: Multi-language integration issues with Polylang
• ———
• Version 2.4.11
• Security: Vulnerability – Unauthenticated Attacker to Post Revisions
• ———
• Version 2.4.10
• Security: Vulnerability Authenticated (Susbscriber+) SQL Injection
• Fixed Bug: PHP Error: array_filter(): Argument #1 ($array) must be of type array, string given in classes/Members.php:2032
• ———
• Version 2.4.9
• Security: Unauthenticated SQL Injection
• Security: Object unserialize code injection
• ———
• Version 2.4.8
• Added: New option in widgets to sort topics/posts randomly
• Fixed Bug: Post editor text/object alignment issue
• ———
• Version 2.4.7
• Removed: Unnecessary profile buttons of guest posters
• Removed: HTML tags from category description
• Security: Fixed IDOR vulnerability, Insecure Direct Object References
• Addon Support: The rich editor is modified to allow aligning (left,right,center) gif and inline attachment objects
• Addon Support: Supports displaying voters on poll result
• Fixed Bug: PHP Error on the activation process of a user registration. Fatal error: Uncaught TypeError: array_intersect(): Argument #1 ($array) must be of type array, null given in /wp-content/plugins/wpforo/includes/hooks.php:37
• Fixed Bug: Missing user information in the admin email when user deletes own account
• ———
• Version 2.4.6
• Security: Fixed XSS vulnerability, Stored Cross-Site Scripting
• Updated: Hooks to manage the email sending test and error report in the tools
• Fixed Bug: Text domain loading issue
• Fixed Bug: Link RSS Module and RSS Settings to disable if the module is disabled
• Fixed Bug: PHP Warning: Undefined array key max-number-value when wpForo is integrated with Profile Builder plugin.
• ———
• Version 2.4.5
• Fixed Bug: Q&A forum layout threads issue on mobile devices
• Fixed Bug: Warning: Trying to access array offset on null in ../functions-template.php
• Fixed Bug: Missing field 'url' (in 'author') with DiscussionForumPosting structured data
• Fixed Bug: Missing field 'name' (in 'comment.author') with DiscussionForumPosting structured data
• ———
• Version 2.4.3 – 2.4.4
• Added: Discussion forum (DiscussionForumPosting) structured data for Google Search
• Security: Fixed issue with manipulation and privilege escalation via hidden parameter
• Fixed Bug: BuddyPress Integration problems related to deprecated functions
• Fixed Bug: False positive spam file detection and notification in the dashboard
• Fixed Bug: Problems related to PHP 8.4
• Fixed Bug: Issues with saving antispam settings
• Fixed Bug: More robust solution for "Arbitrary File Reading" problem by changing wp_remote_get() function to wp_safe_remote_get()
• ———
• Version 2.4.2
• Security: Unauthenticated Arbitrary File Read in update
• Fixed Bug: In some cases user couldn't see own private topics
• Fixed Bug: Problem with topic slugs containing negative number (-1234)
• Fixed Bug: Issue with x.com URL in users profile pages
• Fixed Bug: Forum tree displaying issue related the secondary user-groups cache
• ———
• גרסה 2.4.1
• תאימות: וורדפרס 6.7
• נוסף: בקש אישור לפני מחיקת החשבון
• נוסף: הודעת דוא"ל למנהלים כאשר משתמשים מוחקים את חשבונם
• ———
• גרסה 2.4.0
• נוסף: ייצוא וייבוא ​​של הגדרות. מאפשר לייצא ולייבא קבוצות שונות של הגדרות בנפרד.
• נוסף: שינוי אוטומטי של סטטוס הפוסט ל'לא מאושר' כאשר משתמש זכאי מדווח עליו.
• נוסף: reCAPTCHA לטופס [הוסף נושא] בדף יצירת נושא עצמאי (/add-topic/)
• אופטימיזציית SEO: מניעת אינדוקס של כתובות URL דינמיות עם פרמטרים GET כאשר הדף נוצר לאחר בחירת אפשרויות בתפריטי נפתח.
• אופטימיזציית SEO: הוסף rel="nofollow" לקישורים בפעילות המשתמש ובדפים מועדפים.
• השתנה: קישורים קצרים לנושאים ולפוסטים הראו בעבר שגיאת 404 אם התוכן היה פרטי או לא אושר. כעת, הם מפנים לדף הכניסה כדי לאשר את המשתמש לפני הצגת התוכן.
• תוסף חדש: wpForo – תגובות מתקדמות