Today we’re publishing new updates for both the free and PRO versions of WP Custom Login. This release closes a stored-CSS security issue on the login page, adds margin controls for the login-page logo, renders your logo at full size, and makes the settings-page tabs bookmarkable.
Shared Updates (Free 3.2.0 & PRO 1.2.0)
Both editions share the same set of changes in this release. PRO incorporates everything introduced in the free 3.2.0 update and applies the same security fix within its own code.
- Stored-CSS security fix: Custom color and box-shadow values are now sanitized on save, preventing CSS from being injected into the login page. We recommend updating promptly.
- Logo margin controls: Set independent top, right, bottom, and left margins for the login-page logo to position it exactly where you want.
- Full-size logo rendering: The custom logo is no longer cropped to a 150px thumbnail. The full-size image is now rendered.
- Bookmarkable settings tabs: The active settings-page tab is now reflected in the URL, so you can bookmark or share a link that opens straight to a specific tab.
- Clearer server-requirement notice: An admin notice now spells out any unmet server requirements, including the minimum PHP and WordPress versions and required extensions.
- Updated dependencies and code improvements: Internal libraries have been refreshed, alongside general cleanups for stability and maintainability.
You can download the latest versions of the WP Custom Login plugin directly from WordPress.org (Free version) or the Customer Portal (PRO version). If you’re already using WP Custom Login, updating will preserve your existing settings.
For questions and help about this release, please get in touch with our support team.