BuddyPress.org

• Please note the plugin is still in development, so we recommend running this beta release on a testing site.
• Please note BuddyPress 14.0.0 will require at least WordPress 6.1.
• The current target for final release is: July 8, 2024.

The BuddyPress contributors have been hard at work baking our next release, version 14.0.0. This release is all about code modernization, focusing on these areas:

• Adding BuddyPress information to the WordPress Site Health reporting tool.
• New functionality and improvements for the BuddyPress Command Line Interface (CLI), resulting in a new version, v3.0.
• Many code improvements bringing the BP code base more in line with WordPress Coding Standards.
• Even more code improvements bringing the BP code base in line with PHPDoc Standards.
• Treating Signups the same way whether BuddyPress is installed on a multisite network or on a single site.
• Allow group moderators to… moderate content in groups! This sounds obvious, but we’ve finally given site admins the opportunity to grant all the power to group moderators.
• Preparing to bring new BuddyPress features playing nice with BuddyPress standalone themes using a second argument to current_theme_supports( 'buddypress', [ 'component', 'feature'] ).
• Laying the groundwork for supporting PHP 8.3 by adding this version to our continuous integration testing routine.
• Starting a whole new documentation project! We’re reviewing every doc about BuddyPress and migrating the necessary information to an all-new docs repository. (This is going to be amazing!).
• Making sure we can preview BuddyPress using WP Playground!

We are excited for you to try our new release. Please run it through its paces, and let us know what problems you run into! Thanks for your help in crafting the best release we can build.

How to test BuddyPress 14.0.0-beta1?

You can test BuddyPress 14.0.0-beta1 in 5 ways :

• Try the BP Beta Tester plugin.
• Download the beta here (zip file).
• Check out our SVN repository: svn co https://buddypress.svn.wordpress.org/trunk/
• Clone our read-only Git repository: git clone git://buddypress.git.wordpress.org/
• Preview it into WP Playground

Props @dcavins for his great contribution crafting this announcement post!

Thanks to BuddyPress: get together safely, in your own way, in WordPress.

BuddyPress 12.5.1 is now available. This is a security release. All BuddyPress installations should be updated as soon as possible.

The 12.5.1 release addresses the following security issue:

• The Members block was vulnerable to a Stored Cross-Site Scripting. Discovered by Wesley (wcraft) from the Wordfence organization.

This vulnerability was impacting BuddyPress branches from 9.0 to 12.0. It was reported privately to the BuddyPress team, in accordance with WordPress’s security policies. Our thanks to the reporter for practicing coordinated disclosure.

For complete details, visit the 12.5.1 changelog.

You can get the latest version by clicking on the above button, downloading it from the WordPress.org plugin directory or checking it out from our Subversion repository.

If for a specific reason you can’t upgrade to 12.5.1, we have also ported the security fix to BuddyPress versions going all the way back to branch 9.0. Here’s the list of the available downloads for the corresponding tags, you can also find these links on our WordPress.org Plugin Directory “Advanced” page:

• If you are using BP 9.x and can’t upgrade to 12.5.1, please upgrade to 9.2.4
• If you are using BP 10.x and can’t upgrade to 12.5.1, please upgrade to 10.6.4
• If you are using BP 11.x and can’t upgrade to 12.5.1, please upgrade to 11.4.2

Immediately available is BuddyPress 12.5.0. This maintenance release fixes 8 bugs. We are releasing this new version pretty soon after our latest security release in order to fix 5 regressions introduced by it. Thanks in advance for your understanding.

For details on all changes, please read the 12.5.0 release notes.

Update to BuddyPress 12.5.0 today in your WordPress Dashboard, or by downloading it from the WordPress.org plugin repository.

Many thanks to 12.5.0 contributors 

respawnsive, gingerbooch, boonebgorges, r-a-y, johndawson155, poojasahgal, emaralive & imath.

BuddyPress 12.4.1 is now available. This is a security release. All BuddyPress installations should be updated as soon as possible.

The 12.4.1 release addresses the following security issue:

• The dynamic Members, dynamic Friends & dynamic Groups blocks were vulnerable to a Stored Cross-Site Scripting. Discovered by Wesley (wcraft) from the Wordfence organization.

This vulnerability was impacting BuddyPress branches from 9.0 to 12.0. It was reported privately to the BuddyPress team, in accordance with WordPress’s security policies. Our thanks to the reporter for practicing coordinated disclosure.

For complete details, visit the 12.4.1 changelog.

You can get the latest version by clicking on the above button, downloading it from the WordPress.org plugin directory or checking it out from our Subversion repository.

If for a specific reason you can’t upgrade to 12.4.1, we have also ported the security fix to BuddyPress versions going all the way back to branch 9.0. Here’s the list of the available downloads for the corresponding tags, you can also find these links on our WordPress.org Plugin Directory “Advanced” page:

• If you are using BP 9.x and can’t upgrade to 12.4.1, please upgrade to 9.2.3
• If you are using BP 10.x and can’t upgrade to 12.4.1, please upgrade to 10.6.3
• If you are using BP 11.x and can’t upgrade to 12.4.1, please upgrade to 11.4.1

Immediately available is BuddyPress 12.4.0. This maintenance release fixes 4 bugs, mainly to improve the BP Rewrites API we introduced in 12.0.0. We also exceptionally decided to remove the repair tool about the Members last activity in this minor release (we usually do this kind of changes in major releases).

For details on all changes, please read the 12.4.0 release notes.

Update to BuddyPress 12.4.0 today in your WordPress Dashboard, or by downloading it from the WordPress.org plugin repository.

Many thanks to 12.4.0 contributors 

nhrrob, espellcaste, Slaffik, needle, ahegyes, vapvarun, emaralive & imath.

Immediately available is BuddyPress 12.3.0. This maintenance release fixes 7 bugs. The most serious one was happening when a community member requested an email address change from her/his front-end profile: the link to verify the request validity was not generated the right way. This bug is only concerning versions 12.0.0 to 12.2.0. It was reported 12 hours ago and we decided to quickly build this maintenance release to fix it as soon as possible.

For details on all changes, please read the 12.3.0 release notes.

Update to BuddyPress 12.3.0 today in your WordPress Dashboard, or by downloading it from the WordPress.org plugin repository.

Many thanks to 12.3.0 contributors 

yagniksangani, johnjamesjacoby, r-a-y, vapvarun, testovac, emaralive & imath.

Dear end users & site owners,

Please note BP Classic 1.4.0 is now available for upgrade/download. 1.4.0 is a maintenance release of the BuddyPress backwards compatibility Add-on helping you to stay classic so that you can carry on:

• enjoying 3rd party BP plugins / themes that are not ready yet for the modern BuddyPress (12.0.0 & up);
• and / or using the deprecated BuddyPress Legacy widgets;
• and / or using the deprecated BP Default theme.

Only 1 issue has been fixed: the bbPress topics/replies pagination should now behave as expected with BuddyPress 12.0 & up (See #44)

Please upgrade!

Dear end users & site owners,

Please note BP Classic 1.3.0 is now available for upgrade/download. 1.3.0 is a maintenance release of the BuddyPress backwards compatibility Add-on helping you to stay classic so that you can carry on:

• enjoying 3rd party BP plugins / themes that are not ready yet for the modern BuddyPress (12.0.0 & up);
• and / or using the deprecated BuddyPress Legacy widgets;
• and / or using the deprecated BP Default theme.

What about 1.3.0 changes?

4 issues have been fixed:

• Switch to BP root blog when migrating directories if necessary (See #33).
• Make sure BP Tooltips are used in Legacy widgets (See #35 & #39).
• Use a npm script to get BP Default (See #37).
• Improve how we check BP Nouveau is the current BP Template Pack in use (See #41)

Please upgrade!

Immediately available is BuddyPress 12.2.0. This maintenance release fixes four bugs. One of them was pretty annoying for users first activating BuddyPress with version 12.1.1. In this particular case, the 12.0 deprecated code wasn’t loaded which could cause nasty errors with 3rd party BP plugins / themes not ready yet for the modern BuddyPress (12.0.0 & up). That’s the reason why we’ve been working hard and as fast as possible to quickly wipe this bug.

For details on all changes, please read the 12.2.0 release notes.

Update to BuddyPress 12.2.0 today in your WordPress Dashboard, or by downloading it from the WordPress.org plugin repository.

Many thanks to 12.2.0 contributors 

 jnie, roberthemsing, vapvarun, emaralive, & imath.

BuddyPress 12.1.1 is now available. This is a security and maintenance release. Please update your BuddyPress as soon as possible.

The 12.1.1 release addresses the following minor security issue:

• Using the Cover Image group’s REST API Endpoints, it was possible to a non member of private/hidden group to get the corresponding group Cover Image URL. Discovered by Colin Xu.

This vulnerability was reported privately to the BuddyPress team, in accordance with WordPress’s security policies. Our thanks to the reporter for practicing coordinated disclosure.

BuddyPress 12.1.1 also fixes 10 bugs. For complete details, visit the 12.1.1 changelog.

You can get the latest version by clicking on the above button, downloading it from the WordPress.org plugin directory or checking it out from our Subversion repository.

Many thanks to 12.1.1 contributors 

 sabernhardt, emaralive, shawfactor, strategio, vapvarun, perchenet & imath.