Blog · bbPress.org

bbPress 2.6.21 is a security and maintenance release. Everyone running bbPress should update. 🔒
This release strengthens access control across forum feeds, search results, BuddyPress activity, group forums, attachment requests, topic moves, and old topic and reply redirects. Inherited forum passwords now apply consistently when WordPress renders topic and reply content, and Akismet moderation requests now require HTTPS.
Maintenance fixes improve forum freshness and child-count queries, preserve metadata when database lookups fail, tighten route and user-profile handling, retain original dates and revision content during moderation and editing, and correct the administration reply destination controls. This release also repairs straightforward orphaned list items on WordPress 6.9 and newer, keeps generated bbPress excerpts available without duplicating content, adds the ugc relationship to topic and reply links, and refreshes administration icons for WordPress 7.2 and newer.
bbPress 2.6.21 still requires WordPress 6.0 or newer and PHP 7.2 or newer, and is tested through WordPress 7.2. The database version remains 264, so no database upgrade is required. The 2.6.21 upgrade notes cover compatibility details.
These changes are also in the 2.7 development branch, which remains 2.7.0-alpha-4. Thank you to antaloaalonso, arielmeadow, bor0, Clorith, dd32, deborah86, diddledani, lmstearn, netweb, noruzzaman, Otto42, Pebbleontheshore, r-a-y, rollybueno, sbask, shadow043, SirLouen, softglaze, terresquall, tharsheblows, and ton-ha for reports, patches, testing, and review.
Download bbPress 2.6.21 from WordPress.org, or update from your WordPress dashboard.
bbPress 2.6.20 is a security and maintenance release. Everyone running bbPress should update. 🔒
This release strengthens topic and reply password validation and keeps bbPress post shortcodes literal in ordinary WordPress content loops. It also adds a site-wide Forum Status setting with Open, Closed, and Frozen modes. Existing sites remain Open unless that setting is changed.
The maintenance work improves BuddyPress profile actions, group topic routes, activity visibility, and group-forum access. It also restores compatibility for subscription links in third-party theme packages, preserves moderation forms after validation errors, and includes fixes for notifications, converters, widgets, profiles, topic and reply administration, and restricted-content visibility.
bbPress 2.6.20 still requires WordPress 6.0 or newer and PHP 7.2 or newer, and is tested through WordPress 7.1. The database version remains 264, so no database upgrade is required. The 2.6.20 upgrade notes cover compatibility details.
These changes are also in the 2.7 development branch, which remains 2.7.0-alpha-4. Thank you to ahillmortons, alejandroescobar89, bor0, bradleyt, chefranov, dd32, deborah86, Dermes, diegootgs, dilip2615, fraph24, hardel, imath, immeet94, iworks, jgasba, josephscott, konnektiv, lmstearn, mehrazmorshed, michael8888, mike80222, obenland, Palagrin, peopleinside, r-a-y, robin-w, SirLouen, tobifjellner, wpturk, and zaerl for reports, patches, testing, and review.
Download bbPress 2.6.20 from WordPress.org, or update from your WordPress dashboard.
bbPress 2.6.19 is a security and maintenance release. Everyone running bbPress should update. 🔒
This release applies inherited forum passwords to REST API responses and BuddyPress activity, and strengthens access checks for restricted forum content across feeds, group forums, and other indirect views. It also tightens moderation and forum-role permissions, protects importer credentials and account handling, and improves escaping in profile and administration output.
There are maintenance fixes for BuddyPress group-forum associations and notifications, converter cleanup, imported database passwords, subscription emails, and reply positioning. The 2.6.19 upgrade notes cover integration details. bbPress still requires WordPress 6.0 or newer and PHP 7.2 or newer. The automatic database version 264 upgrade clears saved converter query SQL from older password upgrades.
These changes are also in the 2.7 development branch, which is now 2.7.0-alpha-4. Thank you to thewindghost, ngonhuy, and moltenbit for responsibly reporting issues fixed in this release, and to everyone who helped review and test the changes.
Download bbPress 2.6.19 from WordPress.org, or update from your WordPress dashboard.
bbPress 2.6.18 is a maintenance release focused on forum imports and first-login password upgrades.
Imported users can now upgrade their passwords on first login for more legacy forum formats, including cases where the original forum database is no longer available. This release also corrects PHPWind topic statuses, reply counts, and forum dates during import, and restores Super Moderator edit links on front-end bbPress user screens.
bbPress 2.6.18 requires PHP 7.2 or newer and WordPress 6.0 or newer. Sites running an older PHP version should update PHP before upgrading bbPress. Read the 2.6.18 upgrade notes for importer compatibility details.
These changes are also in the 2.7 development branch. The Plugin Directory’s development trunk remains at 2.7.0-alpha-3.
Download bbPress 2.6.18 from WordPress.org, or update from your WordPress dashboard.
bbPress 2.6.17 is a security and maintenance release with broad improvements to permissions, private content, subscriptions, moderation workflows, and forum counts. Everyone running bbPress should update as soon as possible. 🔒
(You may notice 2.6.17 release follows 2.6.15. Well, I found a SQL bug right after 2.6.16 was tagged and I didn’t want to wait to get that fix out, sooooo… here we are!)
This release strengthens inherited private and hidden forum visibility, BuddyPress Group Forum boundaries, subscriber access checks, profile editing, REST API and XML-RPC requests, search results, canonical redirects, topic tags, reply moves, topic splits, and output escaping.
It also includes a substantial o