wpDiscuz (Activated)

Versión 7.6.73 — 24 octubre 2026

• Corregido The Facebook login button signed a visitor in through a client-side flow that trusted a Facebook user ID sent with the request, which was not tied to the access token it arrived with. Because an account's Facebook ID doubles as its user name and the account's email address was derived from that ID when Facebook returned none, this could sign a request in as another visitor's account. Facebook login now always uses the server-side OAuth2 flow, which reads the account from the token's own owner, and social accounts are matched by their verified provider user ID rather than by an email address built from it. The legacy flow and the "Use Facebook OAuth2" setting have been removed. Sites that used the legacy flow must add their site's OAuth redirect URI, wp-admin/admin-ajax.php?action=wpd_login_callback&provider=facebook, to the Valid OAuth Redirect URIs of their Facebook app for the button to keep working.
• Mejorado On the settings page, the preview of an addon that isn't installed described its rating structured data and one shortcode attribute as they used to work. It now matches the current addon.

Versiones anteriores

• 7.6.72 (6 octubre 2026): 2 corregido
• 7.6.71 (15 septiembre 2026): 12 corregido
• 7.6.70 (10 septiembre 2026): 2 nuevo, 7 corregido