v5.1.0 Latest
July 16, 2026
Improve 1 Fix 4 Security 2 Note 1
Improve
- Removed a development cache-buster that made the admin stylesheet uncacheable on every request.
Fix
- The bundled French translation now applies. It shipped as fr_FR.mo, but the plugin loads reign-learndash-addon-fr_FR.mo, so WordPress never found it and every string stayed English on French sites.
- Instructor, review, and leader avatars now honor the WordPress Show Avatars setting (Settings - Discussion): with avatars off, the addon no longer emits Gravatar image URLs and makes no external avatar request. get_avatar_url(), which core does not gate on that setting, is now routed through a helper that returns empty when avatars are disabled.
- Deleting a LearnDash group no longer deletes the linked BuddyPress group, its members, and its activity when the auto-delete setting is off; the three group-sync settings are now read strictly so off means off.
- The auto-delete-group checkbox no longer shares an HTML id with the enable-group checkbox, so its label and state work correctly.
Security
- The review-migration handler now reads its nonce isset-safe and unslashed/sanitized before verifying.
- Added direct-access guards to the template, widget, and helper files that lacked one.
Note
- Course review analytics are computed once per request instead of re-running the review query at each of the many call sites (course lists, rows, dashboards) that request the same course's stats.