Fixed:

• BuddyBoss – A user creates a topic in a forum – Fixed recipe builder errors when the Forums component is disabled. #9382
• Core – Fixed recipe runs stopping unexpectedly when some triggers return user IDs as text instead of numbers. #9399
• Core – Fixed the Trigger title token displaying field labels, extra braces or “Unknown token” instead of the correct trigger sentence. #9384
• Recipe Builder – Added a Resolve dependencies dialog for triggers and actions with missing requirements. #9401
• Recipe Builder – Fixed the missing remove button icon for selected files in file fields. #9402
• Recipe Logs – Nested tokens now display their resolved values instead of raw tokens or “Unknown token”. #9386

Fixes and improvements:

• Recipe Builder – The Filter block is now indigo instead of pink, so it is no longer mistaken for a failed block. #9371
• Connect your AI – Loops accept every valid loopable token, and the user selector and trigger schema guidance no longer mislead AI. #9347
• Connect your AI – Error responses are now accurate, and run logs show the full actions flow. #9346 #9348
• Connect your AI – Abilities from LifterLMS, WooCommerce and other plugins now run through run_ability instead of failing with an MCP OAuth token error. #9377
• Connect Apps – Sites without an active license or connected account now go to the Dashboard instead of the License screen. #9351
• Database – Sites whose options tables use different collations no longer get a database error on every page load. #9343
• Licensing – Pro triggers and actions no longer show as Locked when the license check fails after the cache expires. #9332
• Migrations – Actions that shared a position now keep their original run order when a condition group migrates to a filter. #9342
• Recipe Builder – A Loop’s token list is no longer saved to the trigger log multiple times when a recipe is loaded and run in the same request. #9356
• Recipe Builder – Actions placed where they are not allowed now return a clear rule error. #9349
• Recipe Builder – One invalid email “To” address no longer blocks later emails. #9349
• Recipe Builder – The token button is back on “Use a token/custom value” fields for dropdowns such as MailPoet’s Subscriber Status. #9352
• Recipe Logs – Failed actions now show their error under Notes in Logs > Action again. #9359
• Recipe Logs – A Loop block shows its configuration, and a Queue block after a background action shows Delayed. #9350 #9354
• Recipe Logs – Reading the next run ID no longer changes database settings for the rest of the request. #9348
• Recipe Logs – Searching the run log now finds failed actions’ errors and token loop iterations. #9359 #9339
• Recipe Logs – The run log screen no longer crashes when a Filter block has no conditions. #9331
• Recipe Runs – Recipes set to run on all triggers no longer wait forever for a Pro trigger while Pro is inactive. #9344
• Uncanny Agent – A valid token without the required capability now gets a permission error instead of an invalid credentials error. #9284
• Uncanny Page Builder – Published full pages now load other plugins’ scripts and styles, so forms such as WP Simple Pay work again. #9379
• Webhooks – Send data to a webhook – A new Authorization header is no longer left in clear text when saving the action fails. #9353
• Webhooks – Send data to a webhook – Failed responses no longer offer response tokens, and webhooks saved by Pro 1.x to 2.1 no longer write PHP warnings. #9357
• Webhooks – Send data to a webhook – Form-data, GET, GraphQL and Raw webhooks now send correct requests. #9355
• Webhooks – Send data to a webhook – The Send webhook test now passes any successful response, fails error responses and keeps the saved tokens. #9358
• Webhooks – Send data to a webhook – XML webhooks now send application/xml, and a broken XML wrapper fails the action. #9357 #9358
• WordPress – Post triggers no longer list the “Post categories (loop)” and “Post tags (loop)” tokens that returned empty values. #9345

Fixed:

• Action Logs – Searching for error messages now correctly finds matching action runs #4969
• BuddyBoss – Set the user’s Xprofile data – Added a label to the Profile fields repeater to prevent field validation errors #5012
• Core – Prevented PHP errors in specific cases when Uncanny Automator Pro loads without Uncanny Automator #5009
• CSV, JSON, XML and RSS Triggers – Field tokens now return their saved values correctly #5021
• LearnDash – Group leader email actions now correctly report failed sends, even when no error reason is provided #4991
• Miscellaneous bug fixes and improvements #5015 #4997 #4972 #5001 #5019

Major release: Uncanny Automator 8.0 is a major release. Test the update on a staging site first, and if you have Uncanny Automator Pro, update it to 8.0 at the same time.

New Feature:

• Connect your AI – Connect ChatGPT, Claude, Gemini, Perplexity and more to manage and automate your WordPress site via a built-in MCP server
• Connect your AI – New MCP settings page to manage and monitor AI connections
• Connect your AI – Individual MCP access controls for every tool, plugin ability and Automator action
• Recipe Builder – Introduced new Flow UI with improved flexibility and readability, and nestable Filter, Queue and Loop elements that expand workflow capabilities
• Recipe Builder – Redesigned the layout, navigation, token selector and template library
• Recipe Builder – Simplified publishing controls
• Recipe Builder – Added autosave indicators, unsaved change warnings and saved view preferences
• Recipe Logs – Improved block controls, run details and added visual workflow display

New Integration:

• Dropbox #6481

New Triggers:

• Dropbox – A file is updated in a folder #8790
• Dropbox – A file or folder is created in a folder #8785
• Dropbox – A file or folder is deleted in a folder #8784
• Dropbox – A file or folder is moved to a folder #8788
• Dropbox – A file or folder is renamed in a folder #8789

New Actions:

• Dropbox – Add a member to a file #8776
• Dropbox – Add a member to a folder #8786
• Dropbox – Copy a file or folder to a new location #8778
• Dropbox – Create a folder in a parent folder #8782
• Dropbox – Delete an item #8781
• Dropbox – Get a shareable link to a file #8780
• Dropbox – Move a file or folder to a new location #8779
• Dropbox – Share a folder #8777
• Dropbox – Upload a file to a folder #8783

Fixed:

• Contact Form 7 – All triggers – Form field tokens now return submitted values instead of the form title when using the specific field value trigger. #9259
• Contact Form 7 – All triggers – Form submissions no longer run recipes for rejected submissions, including spam, missing consent, and failed payments. #9261
• Core – Prevented fatal errors when Action Scheduler is unavailable or a scheduled job is missing. #9030
• Emails – Send an email – Send errors are now reported instead of being marked as successfully sent. #9279
• Emails – Send an email – Emails blocked by User Lists now retain the reason for failure. #9281
• Multisite – Prevented cached Automator options from being shared between sites when switching between them. #9267
• One-off Actions – Custom dropdown values saved in recipes now work correctly when running actions individually. #9275
• Recipe – Previously enabled triggers and actions now retain their active status when restoring recipes from the trash. #9271
• Recipe Builder – Chained fields no longer remain stuck loading after a failed request and can be retried without reopening the editor. #9292
• Recipe Caches – Prevented unnecessary cache rebuilding when unrelated posts are updated. #9265
• Recipe Deletion – Permanently deleting a recipe now also removes its associated triggers and actions. #9269
• Recipe Import – Invalid bulk import files no longer leave partially imported recipes. #9268
• Recipe Post Type – Recipes are no longer accessible on the frontend. #9270
• Recipe Runs – Trigger errors no longer leave recipe runs open. #9281
• Redirect – Redirect to a URL – Other recipes now complete before the redirect occurs. #9256
• Redirect – Redirect to a URL – Redirects now work after Contact Form 7 submissions. #9248
• Tokens – Post tag tokens now return tags from the correct post. #9280
• Tokens – Resolved errors when parsing child, nested, and list tokens. #9280
• Webhooks – Send data to a webhook – Authentication credentials are now hidden in REST and MCP log responses. #9291

Under the hood:

• Admin – Updated Action Scheduler to 3.9.3.
• Admin – Centralized notices and added recipe notices to the builder.
• Agent Readers – Excluded posts, users, and terms no longer appear in results when include lists are also specified. #9282
• API Logs – Sensitive credentials are now redacted before requests are logged. #8802
• App Connections – Added secure connections through the Automator App Platform, with staging support and reliable event delivery. #7821 #8849
• Background App Actions – Added asynchronous processing for supported Dropbox and Instagram actions. #7295
• Core – Prevented unnecessary recipe loading from specially crafted URLs. #8801
• Fields – Improved compatibility with custom fields added through the automator_options_callback_response filter. #9283
• Integration Loader – Prevented cached file paths from another installation from being used after site migrations or plugin copies. #9293
• Logs – Failed actions now record the correct error type regardless of message language. #8806
• MCP – Catalog lists now return usable item identifiers and include all available triggers instead of limiting results to three. #9273
• MCP Search – Valid actions with “Delete…from…” in their descriptions now appear in search results. #9274
• Recipe Builder – Added block deletion options and loopable token filtering. #9146
• Recipe Builder – Added testing for individual triggers and actions.
• Recipe Logs – Trigger and action sentences now reflect the settings used during the run. #9243
• Recipe Runs – Added automatic recovery for interrupted runs and editing locks for active recipes. #7049
• Redirect – Added a Redirect integration to replace closures, with automatic migration.

Major release: Uncanny Automator Pro 8.0 is a major release. Test the update on a staging site first. Update Uncanny Automator before you update Uncanny Automator Pro.

New Features:

• Connect your AI – Connect your AI to WordPress with Uncanny Automator Pro to manage and automate your site.
• Recipe Builder – Added support for nestable Filter, Queue and Loop elements #4927

Updated:

• Filter – A filter that is not met now records why each condition failed in the run log #4960 #4950
• Loops – Loop Filters – A loop filter whose plugin is not active now matches nothing, and the run log says why #4974
• Queue – Waiting runs are now cancelled when their Queue block is deleted #4765
• Schedule – “Every” must now be a whole number of months #4975

Fixed:

• Action Conditions – A malformed condition is now skipped and reported instead of throwing an error #4849
• Amelia – Booking customers are now looked up by email only when Amelia has one #4938
• Automator – Deactivate or activate a recipe – Fixed a collision with the recipe ID field #4914
• Automator – Run As – Now resolves the user selector through Automator’s helpers #4922
• BuddyBoss – A user joins a private or hidden group – Now runs when users are added by an admin or recipe action #4932
• Contact Form 7 – A user submits a form with a specific value in a specific field – Trigger now runs correctly for logged-in users #4979
• Contact Form 7 – A user submits a form with a specific value in a specific field / A form is submitted with a specific value in a specific field – Triggers no longer run for rejected submissions #4981
• CSV – Import a CSV file – The trigger now respects the Limit rows setting #4989
• CSV – Import a CSV file – Limit rows and Skip initial rows settings are now respected when recipes run #4990
• Licensing – The Plugins screen now stays available when the license store is unreachable #4916
• Loops – Empty or locked background jobs no longer prevent other scheduled tasks from running #4995
• Loops – Loop Filters – A dropdown set to a token or custom value now runs with that value #4951
• Loops – Recipe runs now retain their error status when loops complete #4984
• Loops – Waiting loops now recover when background processing is interrupted or overdue #4995
• Recipe Runs – Cancelled loops now close properly so recipes can complete #4995
• Schedule – A Schedule trigger is now scheduled when its recipe goes live #4886
• Schedule – Deleting a Schedule trigger now cancels its scheduled job #4915
• Schedule – Fractional intervals now schedule the first run at the correct time #4988
• Schedule – Monthly repeats now start at the next occurrence in the site’s timezone #4992
• Webhooks – Receive data from a webhook – A deleted webhook recipe or trigger now stops answering immediately #4937
• Webhooks – Receive data from a webhook – Auto and URL-encoded formats now correctly process mapped form values #4987
• Webhooks – Receive data from a webhook – Processed parameters now appear in webhook logs #4985
• Webhooks – Receive data from a webhook – XML format now prevents PHP 8 errors when processing repeated or malformed XML elements #4986

Under the hood:

• Admin – Pro now says it is off, and which Automator version it needs, when Automator is missing or inactive #4912 #4913
• Admin – Pro notices now appear in Automator’s notice center #4920
• Core – A site where Action Scheduler hasn’t loaded no longer causes a fatal error #4918
• Core – Plain, translatable note when a Filter’s conditions can’t be checked #4957
• Core – Prevented PHP errors in scheduled recipes, queue blocks and background cleanup when Action Scheduler is unavailable or jobs are missing #4940
• Core – Queue blocks that cannot be scheduled, or have a zero, negative or empty amount, now skip their actions and report the reason instead of running immediately #4955 #4953
• Core – The integration map is rebuilt when the cache holds another plugin folder #4963
• Gemini – Loops – Stored API keys are now removed from loop item error messages #4947
• Gravity Forms – List field rows – List values are now decoded safely and no longer raise PHP warnings #4925
• Integration Caches – Unrelated post changes no longer invalidate Pro integration caches #4983
• Licensing – License overlay – Hardened the AJAX handler by updating the EDD SL SDK to 1.0.4 #4882
• Loops – Loop Filters – The item is not empty – Now supports lists of plain values #4942
• Loops – Token Loops – Invalid list values now produce a clear error instead of a PHP error #4942
• Loops – User Loops – Fixed token errors when user values match PHP function names #4944
• Loops – User Loops – Resolving user tokens no longer invalidates password reset links or triggers unintended profile updates #4944

Fixed:

• Easy Digital Downloads – Resolved an issue where purchase and subscription triggers failed to run during checkout or webhook processing. #8864
• MailPoet – Add a subscriber to a list – Resolved an issue where the action could remain stuck on Waiting and fail to add subscribers to lists. #8846
• Mailchimp – Add the user to an audience – Selected groups are not applied to a new contact. #8844
• MemberPress – Resolved an issue where triggers failed to run when initiated by payment gateway webhooks or signup forms. #8854

Under the hood:

• Core – Triggers can now declare their dispatcher to start before init, so events from plugins that finish and exit early are no longer missed. #8863

New Integration:

• CartFlows #7542
• Eventin #8446
• Loginizer #7548
• Post SMTP #7552
• Smush #7559
• Sucuri Security #7561
• WPCafe #8449

New Triggers:

• CartFlows – A checkout is completed in a flow #7582
• CartFlows – A product is purchased in a flow #7583
• Eventin – A user purchases a ticket for an event #8445
• Eventin – An attendee is checked in to an event #8443
• Eventin – An attendee is registered for an event #8444
• Eventin – An event is created #8441
• Eventin – An event is updated #8442
• Loginizer – A login attempt fails #7630
• Loginizer – A user logs in #7629
• Loginizer – A user registers via social login #7628
• Loginizer – A login is blocked #7631
• Post SMTP – An email fails to send via a transport #7648
• Post SMTP – An email is sent via a transport #7649
• Smush – An image is optimized #7676
• Smush – An image optimization is skipped #7675
• WPCafe – A reservation is cancelled #8452
• WPCafe – A reservation is made #8454
• WPCafe – A reservation’s status is changed to a status #8453

New Actions:

• CartFlows – Create a flow #7584
• CartFlows – Create a step in a flow #7585
• Eventin – Add the user as an attendee to an event #8440
• Eventin – Check in an attendee #8448
• Eventin – Update the status of an order #8447
• Loginizer – Add an IP range to the blacklist #7627
• Loginizer – Add an IP range to the whitelist #7626
• Loginizer – Clear the failed login logs for an IP #7623
• Loginizer – Remove an IP address from the blacklist #7625
• Loginizer – Remove an IP from the whitelist #7624
• Smush – Optimize an image #7674
• Smush – Restore an image #7673
• Sucuri Security – Apply hardening to a directory #7666
• Sucuri Security – Log a security event #7664
• Sucuri Security – Remove hardening from a directory #7665
• Sucuri Security – Reset the user’s password #7663
• Sucuri Security – Run a malware scan #7667
• WPCafe – Create a reservation #8451
• WPCafe – Update the status of a reservation #8450

Updated:

• Zoom Meetings & Webinar – Allow tokens in the meeting creation actions – date & time fields. #8548

Fixed:

• Google Sheets – Improved error messages to provide more details when requests fail. #8550
• Mailchimp – Create and send a campaign – Preserved HTML formatting in campaign email content. #8534
• Uncanny Codes – Fixed code redemption triggers recording an incorrect user ID for logged-out redemptions. #8558
• Uncanny Groups – Group key triggers now record the correct user ID for logged-out redemptions. #8560
• Uncanny Tin Can – Module triggers now record the correct user when the learner is not the current user. #8562
• Uncanny Tin Can – Prevented unnecessary reporting queries when a module is not selected. #8552
• Uncanny Toolkit – User import triggers now attribute runs to the imported user instead of the importing administrator. #8564

Under the hood:

• Core – Improved plugin installation checks on Windows. #8623
• Trigger Object – Added support for safely processing supported WordPress and WooCommerce objects in trigger loopbacks without object deserialization. #8667
• ARMember & Formidable Forms – Updated to the latest framework. #8578 #8556

New Plugin Integrations:

• CartFlows #4279
• Eventin #4565
• Loginizer #4284
• Smush #4295
• Sucuri Security #4297
• WPCafe #4579

New Triggers:

• CartFlows – An offer is accepted in a flow #4310
• CartFlows – An offer is rejected in a flow #4311
• Eventin – A user joins the waiting list for an event #4569
• Eventin – An order for an event is placed #4568
• Eventin – An order for an event is refunded #4567
• Formidable Forms – A user submits a row on a form in a repeater #4627
• LearnDash – A user is enrolled in a course via group enrollment #3575
• Smush – A PNG is converted to JPG #4383
• Smush – A bulk optimization completes #4379
• Smush – An image is resized #4380
• WPCafe – A food order is placed for a specific order mode #4586
• WPCafe – A reservation is deleted #4589
• WPCafe – A reservation is updated #4584

New Actions:

• CartFlows – Add a product to a checkout step #4312
• CartFlows – Clone a step #4313
• Eventin – Create a coupon #4571
• Eventin – Create an event #4570
• Eventin – Send the user their ticket for an event #4572
• WPCafe – Cancel a reservation #4587

New Conditions:

• CartFlows – A step is/is not a specific type #4315
• CartFlows – An order was/was not placed through a flow #4314
• Eventin – An event has/does not have tickets available #4575
• Eventin – An event is/is not a status #4574
• Eventin – The user has/does not have a ticket for an event #4573
• Eventin – The user’s order for an event has/does not have a status #4576
• Loginizer – An IP address is blacklisted #4344
• Loginizer – An IP address is whitelisted #4343
• Smush – An image’s compression level is/is not a level #4382
• Smush – An image’s compression savings meets a condition #4381
• Sucuri Security – A directory is hardened #4392
• Sucuri Security – The Sucuri API key is registered #4394
• Sucuri Security – The user has 2FA activated #4393
• WPCafe – An order is/is not an order mode #4588
• WPCafe – The user has/does not have a reservation at any time #4582
• WPCafe – The user has/does not have a reservation with a status #4585

New Loop Filters:

• CartFlows – Orders placed through a flow #4316
• Eventin – A user has a ticket for an event #4577
• Eventin – A user is/is not checked in to an event #4578
• Smush – Optimized images #4384
• WPCafe – A user has a reservation with a status #4583

Fixed:

• Schedule – Recurring triggers now maintain their configured run time across cycles and daylight saving time changes #4641
• Uncanny Automator – Change recipe status – Recipe dropdown now displays available recipes correctly #4538
• WishList Member – Membership level triggers now run against the correct user #4634
• WordPress / JetEngine – User triggers now attribute runs to the correct user #4631
• ARMember & Formidable Forms – Updated to the latest framework #4638 #4625

Update:

• LearnDash – Mark a quiz complete for the user – Added an “All quizzes” option to mark all quizzes in a course, lesson, or topic #4616

Fixed:

• Core – Prevented PHP deprecation notices when reading an empty license key #4590
• Formidable – A form is submitted with a specific value in a specific field – Prevented the trigger from firing on incomplete or abandoned entries #4601
• Hardened token processing across multiple integrations against unsafe serialized data #4598
• LearnDash – Multiple actions – Restored “All” option handling #4607
• MemberPress – Prevented an undefined array key warning when parsing Corporate Account tokens #4609
• Memberium for Keap, GravityKit, RafflePress, Code Snippets – Fixed demand-driven loading of helpers and AJAX handlers #4613
• Paid Memberships Pro – Fixed the admin membership level assignment trigger not firing due to an invalid capability check #4605
• Webhooks – Prevented PHP deprecation notices when incoming webhook payloads contain null values #4580

Under the hood:

• Core – Removed deprecated WP Bitly integration #4604

Fixed:

• LearnDash – Restored “Any” option handling across multiple triggers and dropdowns. #8514
• Memberium for Keap and SureCart – Fixed triggers and actions failing to run on frontend requests. #8523
• Uncanny Agent and Page Builder – Improved feature availability during temporary connection issues. #8501

Updated:

• Fluent Forms – Added value and label tokens for choice fields, making selections more flexible. #8455

Fixed:

• Formidable Forms – Restored the shared helpers instance to keep things running smoothly. #8518
• Formidable Forms – Submission triggers now ignore incomplete and abandoned entries. #8509
• Hardened PeepSo and related token processing against unsafe serialized data. #8505
• LearnDash – A user has completed X% of a course – Fixed “0f” to correctly display “% of”. #8516
• Page Builder – Removed the unnecessary “Reload editor” option from the Uncanny Agent notice. #8506
• Uncanny Agent – Strengthened security for legacy admin-AJAX requests. #8499
• WordPress – Create a post – Parent posts now appear in the dropdown instead of playing hide-and-seek. #8491

Under the hood:

• Core – Removed unnecessary license API response logging for cleaner logs. #8495

New Plugin Integrations:

• All-in-One WP Migration #4276
• FluentBoards #4227
• FluentCart #4239
• Really Simple Security #4291

New Triggers:

• All-in-One WP Migration – A site restore fails #4304
• All-in-One WP Migration – A site restore is completed #4305
• FluentBoards – A board’s title or description is updated #4228
• FluentBoards – A subtask is added to a task on a board #4229
• FluentCart – A user’s license for a product expires #4240
• FluentCart – A user’s license for a product is disabled #4242
• FluentCart – A user’s license for a product is renewed #4241
• FluentCart – A user’s license for a product is upgraded #4243

New Actions:

• All-in-One WP Migration – Remove the label from a backup file #4303
• FluentBoards – Delete a task #4230
• FluentBoards – Remove a user from a task #4231

New Conditions:

• FluentBoards – A task has a label #4237
• FluentBoards – A task has a priority #4232
• FluentBoards – A task has a status #4233
• FluentBoards – A task is assigned to a user #4236
• FluentBoards – A task is in a stage #4235
• FluentBoards – A task is on a board #4234
• FluentCart – A customer’s lifetime value meets a condition #4247
• FluentCart – A customer’s purchase count meets a condition #4246
• FluentCart – An order contains a product #4245
• FluentCart – An order’s total meets a condition #4244
• Really Simple Security – The user has/does not have two-factor authentication enabled #4350

Update:

• Webhooks – Receive data from a webhook – Updated to the latest framework. #4529

Fixed:

• Gravity Forms – Multiple triggers – Form title/ID tokens resolve incorrectly or empty. #4557
• Gravity Forms – Multiple triggers – List row and Entry deleted triggers were not firing after the switch to on-demand loading. #4563

New Plugin Integrations:

• All-in-One WP Migration #7539
• FluentBoards #7479
• FluentCart #7494
• Really Simple Security #7555

New Triggers:

• All-in-One WP Migration – A backup file is deleted #7580
• All-in-One WP Migration – A site backup fails #7581
• All-in-One WP Migration – A site backup is created #7563
• FluentBoards – A board is created #7486
• FluentBoards – A comment is added to a task on a board #7483
• FluentBoards – A label is added to or removed from a task on a board #7485
• FluentBoards – A task is created on a board #7480
• FluentBoards – A task on a board is completed or reopened #7481
• FluentBoards – A task on a board’s due date is set or changed #7484
• FluentBoards – A user is assigned to a task on a board #7482
• FluentBoards – A user is unassigned from a task on a board #7487
• FluentCart – A user’s order changes to a status #7497
• FluentCart – A user’s order for a product is paid #7495
• FluentCart – A user’s subscription changes to a status #7501
• FluentCart – A user’s subscription to a product is activated #7496
• FluentCart – A user’s subscription to a product is cancelled #7498
• FluentCart – A user’s subscription to a product is renewed #7499
• Really Simple Security – A vulnerability scan is completed #7639

New Actions:

• All-in-One WP Migration – Delete a backup file #7579
• All-in-One WP Migration – Set a backup file’s label to a specific value #7578
• FluentBoards – Add a comment to a task #7493
• FluentBoards – Add a user to a board #7490
• FluentBoards – Assign a user to a task #7491
• FluentBoards – Create a board #7489
• FluentBoards – Create a task on a board #7488
• FluentBoards – Update a task’s properties #7492
• FluentCart – Add a note to an order #7505
• FluentCart – Cancel a subscription #7504
• FluentCart – Set an order to a status #7503

Fixed:

• App Integrations – Fixed webhook keys being reset when integration settings were saved. #8438
• Core – Custom trigger and action label fields not loading. #8416
• Core – Log action resend drops per-request credential scope. #8413
• Discord – Settings – Server disconnect leaves stale connected status. #8422
• Facebook – Settings – Connected account avatar 403s after the stored CDN URL expires. #8424
• Gravity Forms – Added consolidated checkbox field tokens and fixed Form title and ID tokens in submission triggers. #8397
• HubSpot – Create/Update a contact – Enumeration fields drop token values matching option labels. #8418
• Page Builder – Fixed styling issues with reusable sections added by users or Agents. #8434
• Page Builder – Improved Save Draft reliability and canvas consistency. #8433
• Page Builder – Improved reusable section previews, copying, and style persistence. #8432
• Recipe Builder – Fixed sentence pills displaying outdated values after fields were updated. #8435
• Recipe Builder – Fixed the editor failing to load or save recipes with actions using custom values. #8391

Under the hood:

• Improved in-plugin notifications. #8177

7.5.1.1 [2026-08-15]

Fixed:

• Page Builder – Preserved the last published page content when Automator is deactivated or deleted, and improved file system safety checks. #8385
• Recipe UI – Condition field values lost on save, reverting to the first dropdown option. #8366
• Setup wizard – Fixed an issue with the “Build my first page” button failing to create a page. #8379

New Feature:

• Uncanny Agent – Lite users now get free starter usage of Uncanny Agent

Updated:

• Setup wizard – Improved the setup flow, navigation, security, and interface for a smoother onboarding experience. #8332

Fixed:

• Uncanny Agent – Page Builder – Improved editor reliability, including saving, Undo and Redo, canvas refreshes, and working across multiple browser tabs. #8370
• Uncanny Agent – Page Builder – Fixed issues with publishing, downloads, reusable sections, dynamic content, and design style changes. #8370
• Uncanny Agent – Page Builder – Improved compatibility with different database configurations, screen sizes, and third-party extensions. #8370
• Uncanny Agent – Page Builder – Improved error handling and recovery to prevent unexpected failures from interrupting Page Builder operations. #8370

Fixed:

• Uncanny Agent – Page Builder – Fixed a fatal error on some sites when themes did not provide a current post ID for singular page requests. #8348
• Uncanny Agent – Fixed a Sodium compatibility fatal error on hosts without the native Sodium extension. #8348

Fixed:

• Uncanny Agent – Page Builder – Improved validation of page, section, canvas, reusable-part, and other request identifiers to prevent malformed data from causing errors or targeting unintended content.
• Uncanny Agent – Page Builder – Hardened WordPress hooks, administration callbacks, meta boxes, editor requests, and cleanup operations against missing or unexpected data.
• Uncanny Agent – Page Builder – Improved rendering safeguards to prevent invalid dynamic or conditional content, unintended published content, and stale page data from affecting output.
• Uncanny Agent – Page Builder – Improved validation and reliability of import, export, shell analysis, and static export operations.
• Uncanny Agent – Page Builder – Added permission checks for canvas deletion and improved handling of sensitive error information.
• Uncanny Agent – Page Builder – Improved compatibility and error handling on sites with missing server extensions or unexpected request data.

Fixed:

• Uncanny Agent – Fixed an issue where the Agent could disappear from the WordPress admin until the Automator settings page was visited. #8341
• Uncanny Agent – Improved recovery when WordPress security keys change to prevent the Agent from becoming unavailable. #8341

Under the hood:

• Core – Improved transient cleanup to prevent stale cached data after plugin deactivation. #8287
• Uncanny Agent – Added Site Health diagnostics to help administrators identify Agent configuration issues. #8341
• Uncanny Agent – Improved site identity, verification, and protection for information exchanged with the Agent. #8341

New Plugin Integration:

• Site Kit by Google #4266

New Conditions:

• Site Kit by Google – A module is active #4265
• Site Kit by Google – Site Kit setup is complete #4264
• Site Kit by Google – The user is connected to Site Kit #4263

Fixed:

• BuddyBoss & BuddyPress – Notification actions – Fixed an issue where actions remained stuck at “Not completed” and notifications were not displayed. #4523
• Forminator – Fixed an issue where Time field tokens rendered as “10:30 am” instead of “10 – 30 am”. #4515
• LearnDash – Send a certificate – Fixed an issue where custom CSS was printed as text in generated PDFs instead of being applied. #4513

New Feature:

• Uncanny Page Builder – Create and refine beautiful pages through conversation with Uncanny Agent (requires an Uncanny Automator Pro AI + Automation plan) #8330

New Integration:

• Site Kit by Google #7528

New Triggers:

• Site Kit by Google – A module is activated #7526
• Site Kit by Google – A module is deactivated #7525

New Actions:

• Site Kit by Google – Activate a module #7524
• Site Kit by Google – Deactivate a module #7523

Fixed:

• Closures – Restored the “Redirect when all triggers are completed” checkbox for all recipes. #8285
• Forminator – Fixed an issue where Time field tokens rendered as “10:30 am” instead of “10 – 30 am”. #8284

Under the hood:

• Core – Fixed an issue where the “Immediately delete log entries when recipes are completed” setting never purged logs. #8294

Updated:

• Kadence – Modernized the integration to use the latest framework. #8228
• PrettyLinks – Modernized the integration with unified support for Pretty Links v3 and v4. #8219

Fixed:

• AI settings – Closed an arbitrary code execution path by ensuring the provider settings save handler no longer executes request-supplied callbacks. #8273
• Discord and Asana credentials – Replaced XOR encryption with authenticated AES-256-GCM to provide stronger protection for stored credentials. #8274
• Facebook Groups – Repaired the nonce check on the app install verification handler to help prevent cross-site request forgery. #8272
• Kadence – All triggers – Fixed an issue where forms would not fire recipes when gated loading was enabled. #8228
• Recipe logs – Long-running multi-trigger recipes that became stuck are now correctly terminated by the recovery process. #8227
• Setup wizard – Added a capability check to prevent lower-privileged users from changing the wizard’s connection status. #8271
• Translations – Fixed an issue where Recipe Builder strings were not loading correctly in Spanish. #7392

Under the hood:

• Core – Added automatic retries for app actions that fail before reaching the server, improving reliability without risking duplicate actions. #8225
• Core – Missing classmap files no longer result in PHP errors when the fallback autoloader is used. #8175
• Core – Internal OAuth tokens are now encrypted for improved security. #8230
• Core – Trigger hooks fired during raw shutdown callbacks are now properly captured and delivered. #8221

Fixed:

• Automatic login link – Hardened validation of automatic login links. #4507
• BuddyBoss – Trigger – A user registers with a specific value in a specific field – Fixed an issue where the trigger did not fire correctly in some cases. #4484
• Incoming webhooks – Hardened the processing of data received from webhooks. #4506
• Kadence – A user submits a form with a specific value in a specific field – Fixed an issue where the trigger would not fire when gated loading was enabled. #4489
• LearnDash – Group triggers – Fixed an issue where the ID, URL, image, and leader tokens returned 1 or were empty when “Any” was selected. #4482
• Loop filters – Added a permission check to the loop token dropdown. #4509
• Tutor LMS – Enroll a user in a course – Fixed an issue where the action stopped working after the latest Tutor LMS update. #4481
• WordPress – Set post meta – Hardened token value handling in the action. #4508
• WP Job Manager – Trigger – Fixed an issue where the Job owner ID and Candidate ID tokens always returned empty values. #4487

New Plugin Integrations:

• Beaver Builder #4224
• Redirection #4274
• WP Activity Log #4261
• Wordfence Security #4250

New Triggers:

• Beaver Builder – A form is submitted #4225
• Beaver Builder – A subscribe form is submitted #4226
• Wordfence Security – A password reset is requested #4252
• Wordfence Security – An attack rate increase is detected #4251

New Actions:

• Advanced Coupons – Reset a user’s store credit to zero #3777
• Redirection – Create a redirect #4273
• Redirection – Delete a redirect #4272
• Redirection – Disable a redirect #4270
• Redirection – Enable a redirect #4271

New Conditions:

• Redirection – A redirect exists for a URL #4269
• WP Activity Log – An event’s severity meets a condition #4259
• Wordfence Security – An IP address is blocked #4253
• Wordfence Security – An IP address is whitelisted #4254
• Wordfence Security – The user has two-factor authentication enabled #4256

Update:

• WordPress, ACF, Meta Box & JetEngine – Improved meta trigger performance by skipping unnecessary checks when no recipe needs them. #4442

Fixed:

• BuddyPress – Activity stream actions no longer cause a PHP error on sites without BuddyBoss. #4466
• LearnDash – A user completes a group’s courses – Restored the “Number of times” option. #4471
• LearnDash – A user submits an essay for a quiz – Fixed legacy options that prevented the trigger configuration from opening. #4473

Under the hood:

• Core – Added a safeguard for licenses missing the “expires” property. #4469
• Divi – Updated to the latest framework. #4222
• Software licensing updater – Updated the package to keep licensing checks running smoothly. #4475

New App Integration:

• GoTo Meeting #7993

New Plugin Integrations:

• Beaver Builder #7476
• Redirection #7533
• WP Activity Log #7522
• WP Fastest Cache #7534
• Wordfence Security #7506

New Triggers:

• Beaver Builder – A user submits a contact form #7477
• Beaver Builder – A user submits a subscribe form #7478
• Redirection – A 404 error is logged #7532
• Redirection – A redirect in a group is matched #7529
• Redirection – A redirect is created by the URL monitor #7530
• Redirection – A redirect is deleted #7531
• WP Activity Log – A failed login is logged #7520
• WP Activity Log – An event for an object type is logged #7518
• WP Activity Log – An event is logged #7521
• WP Activity Log – An event of a type is logged #7517
• WP Activity Log – An event with a severity is logged #7519
• WP Fastest Cache – All cache is cleared #7535
• Wordfence Security – A blocking rule is deleted #7513
• Wordfence Security – A login with a breached password is blocked #7509
• Wordfence Security – A user activates two-factor authentication #7510
• Wordfence Security – A user deactivates two-factor authentication #7511
• Wordfence Security – An IP is blocked/throttled #7508
• Wordfence Security – An IP is locked out #7507
• Wordfence Security – An admin/non-admin user logs in #7512

New Actions:

• GoTo Meeting – Create a meeting #7994
• GoTo Meeting – Delete a meeting #7995
• GoTo Training – Add an attendee #7996
• GoTo Training – Remove an attendee #7997
• WP Fastest Cache – Purge all caches #7537
• WP Fastest Cache – Purge the cache for a post #7538
• Wordfence Security – Block an IP address #7514
• Wordfence Security – Remove an IP block #7515
• Wordfence Security – Remove an IP lockout #7516

Fixed:

• Automator review – Added capability and nonce checks to the review settings handler, keeping unauthorized option changes firmly off the guest list. #8159
• Bluesky – Protected post embed URL requests against SSRF, including redirects that tried to take the scenic route somewhere unsafe. #8157
• Credits notifications – Added a capability check so lower-privileged users can no longer dismiss site-wide credit notices. #8161
• Facebook Lead Ads – Added payload validation and optional authorization controls to webhooks, giving unexpected requests a proper ID check. #8155
• Gravity Forms – Blank List fields no longer stop recipes during form submission. Empty lists can now pass quietly without causing a scene. #8019
• HubSpot, Brevo, Constant Contact – Deprecated actions – Prevented deprecated actions from loading when demand-driven loading is enabled. Retired means retired. #8035
• LearnDash – Create a group / Make the user the leader of a group – Fixed legacy option data that prevented the action configuration from opening. #8170
• LearnDash – Restored the missing loopable tokens to the Token Loop, where they belong. #8021
• LearnDash – Triggers – Restored the “Number of times” option for affected triggers. The counter is back on duty. #8168
• Modern Events Calendar – Added authorization and nonce checks to event and ticket AJAX handlers for safer request handling. #8163
• Recipe log – Secured the “View preview” popup against stored XSS by rendering its HTML inside a sandboxed iframe. The preview now stays in its lane. #8165
• WordPress – Restored the missing loopable tokens to the Token Loop. #8028

Security Fixes:

• Google Contacts & Mautic – Added capability and nonce checks to option fetchers, ensuring only authorized requests get through. CVE-2026-15025 #8152
• Forminator and related token reads – Hardened token handling against PHP Object Injection. CVE-2026-15008 #8150
• Loopable integrations (CSV/XML/JSON) – Blocked private-network requests in loopable URL fetchers and hardened token-alias migrations against object injection. #8151

Under the hood:

• Core – Corrected app-credit limits for legacy Pro and Lifetime licenses. The numbers now behave as their licenses intended. #8138
• Divi – Modernized the integrations using the new framework, giving the foundations a well-earned refresh. #7458
• Uncanny Agent – Database select tool – Secured WHERE and JOIN handling with validated predicates and prepared values. Database queries now follow a stricter dress code. #8014
• Uncanny Agent – Secured component requests with encrypted license credentials, request binding, and fail-closed handling. When verification fails, the door stays closed. #8174

New Feature:

• Status > Tools – “Resend App Actions” tool to find and bulk resend failed app actions from one place. #8012

Updated:

• App Actions – Increased the default outgoing request timeout to better support longer-running app responses. #8009
• Kit – Removed the unsupported OAuth connection flow and now support V4 connections by API key only. #8006
• Stripe – Improved product and price dropdown performance in the recipe builder with cached remote loading and refresh support. #7999
• Stripe – Product refunded trigger now correctly respects the selected price instead of firing for every refunded product. #7999

Fixed:

• ActiveCampaign – Fixed an issue where custom fields could be omitted from the Add a contact action when field definitions needed to be refreshed. #7949
• App Actions – Fixed an issue where resending a logged app action could trigger a PHP error on some sites. #8011
• App Actions – Fixed an issue where successful app action responses could be incorrectly reported as “Failed with status code: 200”. #8010
• Google Contacts – Fixed an issue where the Create a contact action could include internal Automator action metadata in outgoing API requests. #8004
• Recipe UI – Fixed an issue where select fields in the recipe builder could stop rendering when another plugin loaded a conflicting Select2 library. #8001

Under the Hood:

• Recipe Templates – Fixed an issue where the requirements sidebar could stretch past the window edge and cut off text. #7941
• Trigger Engine – Improved handling of high-frequency WordPress meta hooks to reduce unnecessary trigger checks and loopback requests. #7929