VentraConnect Changelog
Track how VentraConnect is evolving — from social login to a native authentication stack for WordPress with Social Login, Passkeys, Magic Link and Email OTP.
Free provides the native authentication foundation for standard WordPress login, registration, profile and shortcode flows. Pro adds advanced placements and controls for WooCommerce, LMS, membership and community platforms.
Recent Highlights
The most impactful improvements in v1.4.0 and later maintenance releases.
Native Passkeys — now in VentraConnect Free
VentraConnect Free now ships a native WebAuthn Passkey implementation for standard WordPress login, registration, profile and shortcode flows — completing a full authentication stack without a separate hosted identity platform.
Advanced Passkey placements in Pro
Pro extends native Passkeys into supported WooCommerce, LMS and membership flows, covering the login and account surfaces where your customers actually sign in.
Tutor LMS & Paid Membership Subscriptions
Pro v1.4.0 adds supported integration coverage for Tutor LMS and Paid Membership Subscriptions, expanding the range of third-party platforms where VentraConnect authentication methods apply.
Passwordless login in Free — no Pro needed
Magic Link & Email OTP remain available on every free install, on standard WordPress login and registration screens.
Security and privacy hardening after 1.4.0
Recent Free maintenance releases strengthened Email OTP verification and reduced account-status disclosure during public Passkey registration, while preserving the supported login experience.
Product Evolution Timeline
Follow how VentraConnect has grown from a social login plugin into a native authentication stack for WordPress.
VentraConnect Free
Provides the native authentication foundation for supported standard WordPress login, registration, profile and shortcode flows — Social Login, Passkeys, Magic Link and Email OTP at no cost.
VentraConnect Pro
Adds advanced placements and controls for supported WooCommerce, LMS, membership and community flows — extending every authentication method into the platforms where your users sign in.
- Restored Passkey support for custom login pages using the supported Paid Membership Subscriptions login context.
- Explicit PMS-context login shortcodes can now show Passkey alongside supported Social Login, Magic Link, and Email OTP methods.
- Added editable helper messages for Recommended and Strict Password Phaseout modes.
- Site owners can tailor the password-phaseout guidance shown on supported Pro login surfaces.
- Improved Password Phaseout settings layout so helper-message customization sits near mode selection and emergency-access controls.
- Hardened public Passkey registration responses to reduce account-status disclosure.
- Public registration requests now provide consistent non-enumerating feedback for valid email submissions.
- Improved rate-limit handling for public Passkey registration requests.
- Existing users continue to manage Passkeys through their authenticated profile or account experience.
- Improved shortcode compatibility in supported login page configurations.
- Kept existing Free integration-surface rules intact while improving a narrow login-page compatibility path.
- No changes to Email OTP, Passkey security controls, or standard shortcode behavior.
- Hardened Email OTP verification with stronger failed-attempt handling and verification-side throttling.
- New Email OTP codes are protected with keyed hashing rather than stored as plaintext.
- Reissuing an Email OTP now invalidates earlier active codes for the same sign-in flow.
- Legacy active Email OTP records were revoked during the security upgrade path.
- Improved Email OTP safeguards while preserving normal login and registration flows.
Props to Pedro Pinho for responsibly reporting this issue through WPScan.
VentraConnect Free now provides a native WordPress authentication foundation with Social Login, Passkeys, Magic Link and Email OTP — without requiring a separate hosted identity platform.
- Added native WebAuthn Passkeys for supported standard WordPress login and registration flows.
- Added Passkey management in supported WordPress profile experiences.
- Added Passkey support to standard VentraConnect shortcode login forms.
- Unified Social Login, Passkeys, Magic Link and Email OTP in one authentication system for standard WordPress flows.
- Improved registration safeguards around interrupted Passkey setup and duplicate-email account handling.
- Free now owns the native Passkey foundation for supported WordPress core flows.
VentraConnect Pro brings modern authentication methods into supported third-party experiences where customers, members and students sign in.
- Added advanced Passkey placements across supported third-party login and account flows.
- Added Passkey experiences for supported WooCommerce login, checkout and account flows.
- Expanded supported integration placements for Social Login, Passkeys, Magic Link and Email OTP.
- Added Paid Membership Subscriptions integration support.
- Added Tutor LMS integration support.
- Clarified the product split: Free provides native core Passkeys, while VentraConnect Pro adds advanced Passkey placements and deeper third-party integration controls.
- Improved platform-aware handling so supported login methods follow the relevant integration flow more consistently.
Pro now supports inline passwordless login anywhere on your site — embed Email OTP and Magic Link directly into Elementor popups, WooCommerce account pages, and custom login layouts without a secondary modal step.
- Added a Pro inline Magic Link form shortcode:
[ventraconnect_magic_link_form]. - Added a Pro inline Email OTP form shortcode:
[ventraconnect_email_otp_form]. - Inline passwordless forms can now be embedded directly inside Elementor popups, WooCommerce account popups, custom login pages, and page builder layouts.
- Email OTP and Magic Link can now run directly inside inline forms without forcing users through a second modal step.
- Inline forms preserve pending OTP/link state when Elementor popups are closed and reopened.
- Added Passwordless Email Branding controls for Magic Link and Email OTP emails, including logo, accent color, and footer text.
- Inline passwordless forms use your existing VentraConnect redirect settings instead of shortcode-level redirect attributes.
- Learn how to use inline passwordless forms.
Improves email clarity and increases successful login completion for Magic Link and OTP users.
- Redesigned email templates deliver a polished, trustworthy login experience for both Magic Link and Email OTP — reducing confusion and abandoned logins.
- Magic Link emails now display a prominent sign-in button alongside a visible raw-link fallback, so users always have a way to complete login.
- OTP emails use a focused code layout that minimises misreads and failed verification attempts.
- Pro users can apply their logo, brand accent color, and custom footer text to all transactional login emails.
- Fixed an incorrect version number shown on the Support & Resources tab — so you always know exactly what's installed.
- Improved translation coverage for provider labels in the admin sidebar, benefiting non-English site owners.
- General internal cleanup with no changes to plugin behaviour.
Users can now log in without passwords, reducing friction and improving conversion rates — at no cost.
- Magic Link and Email OTP passwordless login are now fully available in the free plugin — on WordPress core login screens, registration pages, and shortcode-based forms.
- Each passwordless method supports its own redirect destination: same page, referring page, homepage, or a custom URL — keeping your post-login flow intact.
- Redirect validation has been significantly tightened, preventing open redirect vulnerabilities and silent failures on complex hosting setups.
- Plugin UI and documentation updated to clearly communicate what's available for free and what's exclusive to Pro.
Free now owns the core passwordless engine, while Pro focuses on advanced integrations and control.
- Core Magic Link and Email OTP engines moved into the free VentraConnect plugin — making passwordless login accessible to all users without Pro.
- Pro now extends passwordless login with advanced redirect modes, integrations, and platform-specific controls beyond what's available for free.
- Magic Link and OTP now use the same secure redirect resolver across Free and Pro, ensuring consistent, predictable login behaviour.
- Plugin headers and documentation updated to clearly reflect the new Free vs Pro capability split.
- Account creation rules now run through a single, consistent check — eliminating edge cases where social login bypassed your registration restrictions.
- The ventraconnect_sl_can_create_user filter is now evaluated once, at the right point, making developer customisations more predictable.
- Guardrail logic refactored to cleanly support Pro-only passwordless login methods without requiring separate configuration.
Pro login flows now follow the same account-creation rules across WooCommerce, LMS, and membership integrations.
- Magic Link and Email OTP now fully respect account guardrails across all supported Pro login screens — no more bypass edge cases.
- Existing-user-only rules now behave consistently across Social Login, Magic Link, and OTP — what you configure applies everywhere.
- Magic Link and OTP no longer send login emails to new addresses when account creation is blocked by your guardrail settings.
- Duplicated guardrail checks reduced while keeping WooCommerce checkout behaviour intact.
VentraConnect Pro brings advanced platform integrations and extended controls for teams who need more than the free plugin.
- VentraConnect Pro is live — built on top of the free plugin's social login foundation.
- Establishes the Pro foundation for advanced integrations, platform-specific redirects, and extended passwordless login capabilities.
View older Free releases (v1.0.0 – v1.0.5)
- Tightened input validation, output escaping, and capability checks across all social login flows and settings screens.
- Debug output significantly reduced to prevent accidental information exposure in server logs.
- Sensitive data is no longer logged by default, protecting user information across all hosting environments.
- Code quality improvements aligned with WordPress.org plugin review standards.
- Plugin listing and readme rewritten to clearly explain what's included in Free vs Pro, making it easier to evaluate before installing.
- No changes to plugin functionality.
- New guardrail setting to allow or block account creation on core WordPress login and registration screens when using social login.
- Automatic email notifications for both admin and new users when an account is created via social login.
- Admin settings layout refreshed for clarity and easier configuration.
- Confirmed full compatibility with WordPress 6.9.
- Fixed a rare fatal error on certain hosting environments where the Facebook provider class failed to load, preventing social login from breaking silently.
- The shortcode redirect_to parameter now works correctly after social login.
- Login and registration redirect URLs are now applied in the correct order after a successful social login.
- Redirects are now reliable across sites where HOME and SITEURL differ, or where www and non-www hosts are mixed.
- OAuth callback and state handling hardened to prevent CSRF and replay vulnerabilities.
- VentraConnect is live — social login for WordPress in one unified, lightweight plugin.
Add modern login to WordPress in minutes
Enable Social Login, native Passkeys, Magic Link and Email OTP without complex setup or plugin stacking.
Used by WordPress site owners to simplify login and reduce spam registrations.