This is an important milestone as we progress toward the BuddyPress 6.0.0 final release date. “Release Candidate” means that we think the new version is ready for release, but with more than 200,000 active installs, hundreds of BuddyPress plugins and Thousands of WordPress themes, it’s possible something was missed.
BuddPress 6.0.0 is slated for release on Thursday, May 14, but we need your help to get there—if you haven’t tried 6.0.0 yet, now is the time!
A detailed changelog will be part of our official release note, but you can get a quick overview by reading the post about the 6.0.0 Beta1 release.
Plugin and Theme Developers
Please test your plugins and themes against BuddyPress 6.0.0. If you find compatibility problems, please be sure to post to this specific support topic so we can figure those out before the final release. We strongly advise you to have a look at the 6.0.0 development notes to figure out what to focus on during your testing.
Polyglots, we need you!
Do you speak a language other than English? Help us translate BuddyPress into many languages! This release also marks the string freeze point of the 6.0.0 release schedule. For your information, we are now using WP CLI to generate the buddypress.pot file and you’ll see we’ve paid attention to add translators comments to all the strings needing some.
BuddyPress 5.2.0 is now available. This is a security and maintenance release. All BuddyPress installations are strongly encouraged to upgrade as soon as possible.
The 5.2.0 release addresses four security issue:
A vulnerability was fixed that could allow group moderators improper control over group membership via a REST API endpoint.
A vulnerability was fixed that could allow a CSRF attack related to xProfile field deletion links in the Dashboard.
A vulnerability was fixed that could allow users to delete group activity items belonging to groups to which they don’t have administrative access.
A vulnerability was fixed that could allow site Editors or Authors improper edit access over items belonging to BuddyPress’s Email post type.
These vulnerabilities were reported privately to the BuddyPress team by Kien Hoang, in accordance with WordPress’s security policies. Our thanks to the reporter for practicing coordinated disclosure.
Version 5.2.0 also fixes five bugs, including compatibility updates for WordPress 5.4.
We’ve introduced a repair tool in case something went wrong during the 5.0.0 BP Groups invitations upgrade. Read more about it here.
We’ve gathered all BP Blocks settings into one panel to save you some clicks :). See this ticket for an updated screenshot of the BP Blocks settings sidebars.
We’ve fixed a formatting issue about the total number of members displayed into the Members directory when the BP Nouveau Template pack (the default one) is active. Here’s a link to the commit.
We’ve updated our use of a specific privacy function that has been deprecated in WordPress 5.4.0. Read more about it here.
We’d love you to give us a hand to get there. Testing this new beta release is the very first way you can get involved into BuddyPress. You can test the 6.0.0-beta2 pre-release in 4 ways :
6.0.0 is almost ready, but please do not run this Beta 2 pre-release in a production environment just yet. Let us know of any issues you find in the support forums and/or on our development tracker.
We’ve just updated the plugin to help you test BuddyPress beta & RC releases. From now on, when testing BuddyPress pre-releases, you’ll find a new section into the plugin’s administration screen called “What to expect from next release?” as shown below.
By clicking on the “our Development Blog” link you will be headed to the development notes of the BuddyPress next release. It’s a good way to know about the important changes the BuddyPress final release will bring.
It’s the right time to play with this plugin! BuddyPress 6.0.0-beta1 has been released a few days ago. Once again thanks in advance for testing it: it’s an important stage of the development process for us.
Finally props to @iamthewebb for contributing to this new version of BP Beta Tester.
We’ve scheduled the 6.0.0 stable release to the end of April, and we’d love you to give us a hand to get there!
Testing for bugs is an important part of polishing the release during the beta stage and a great way to contribute. Here are some of the big changes and features to pay close attention to while testing (Check out this report on Trac for the full list).
User Profile Photo & User Cover Image are now belonging to the BP Members component.
Since the very first version of BuddyPress, the local avatar management feature (renamed as Profile Photo in version 2.1) was depending on the BP Extended Profile component. When we introduced the Cover Image feature in version 2.4, we’ve also made it dependent of the BP Extended Profile component. In 6.0.0, both features has been moved to the BP Members component. It means they will always be available even if the BP Extended Profile component is not active on your setup. We recommend you to read this development note to learn what this move changes for end users and for BuddyPress plugin/theme developers.
The BP REST API is now completed!
In 5.0.0, we’ve introduced the first endpoints and a reference documentation about them. In 6.0.0, we are adding the remaining ones so that you can build great BuddyPress full featured apps!
PS: we will update the reference documentation with these new endpoints during this beta stage.
The first BuddyPress Blocks are arriving 🙂
In 6.0.0, you will be able to feature a specific member or a specific group of your community site into your posts or pages: discover more information about the BP Member Block and the BP Group Block reading this development note.
New PHP and WordPress required versions.
BuddyPress 6.0.0 is requiring PHP >= 5.6 and WordPress >= 4.8
If you think you’ve found a bug, you can post in the support forums. We’d love to hear from you! If you’re comfortable writing a reproducible bug report, file one on BuddyPress Trac.
BuddyPress 5.1.2 is now available. This is a security release. All BuddyPress installations are strongly encouraged to upgrade as soon as possible.
The 5.1.2 release addresses one security issue:
Certain REST API requests could result in the exposure of private data. Discovered and reported independently by Petter Walbø Johnsgård and Jacek Suski.
The vulnerability was reported privately to the BuddyPress team, in accordance with WordPress’s security policies. Our thanks to the reporters for practicing coordinated disclosure.
BuddyPress 5.1.1 is now available. This is a security release. All BuddyPress installations are strongly encouraged to upgrade as soon as possible.
The 5.1.1 release addresses one security issue:
A denied of service was fixed that could allow a logged in user to remove another user’s avatar and also any empty folder. Discovered by nomnom.
Thi vulnerability was reported privately to the BuddyPress team, in accordance with WordPress’s security policies. Our thanks to the reporter for practicing coordinated disclosure.
Immediately available is BuddyPress 5.1.0. This maintenance release fixes 8 bugs related to the 5.0.0 release, and is a recommended upgrade for all BuddyPress installations.
This plugin’s goal is to make it easier to beta test our pre-releases. You just need to install and activate the plugin to be ready to try our beta and release candidate versions once we’ve announced them on this blog. Beta testing BuddyPress is very important to make sure it behaves the right way for you and for the community. Although we, the BuddyPress Development Team, are regularly testing it, it’s very challenging to test every possible configuration of WordPress and BuddyPress. That’s why we absolutely need your help during these pre-release stages.
Making this plugin available was one of the means we thought about during our post 5.0.0 release development meeting to have more BuddyPress contributors. Beta testing is actually a good way to start contributing, to anticipate and fix potential issues before you have the bad surprise to meet them once you’re upgrading to a new stable version of the plugin.
NB: to beta test BuddyPress, we strongly advise you to have a local copy of your live site or a staging site : it’s always safer than doing it on a production site.
During our next pre-release stages, when you will find something is going wrong during your beta tests, please think of warning us about it submitting a ticket on our Development Tracker or posting a new topic in our support forums.
First, we’d like to thank all the people who contributed to the poll we shared on our development updates blog and into a topic of one of our forums a month ago. It was really important for us to have your expectations about the content the plugin should provide to the WordPress Block Editor.
It’s now time for us to share with you the results of this poll and tell you how we plan to work on BuddyPress blocks for the next release(s) of your favorite community engine!
