Release notes / BuddyLists
BuddyPress Add-on Plugin

BuddyLists

Your BuddyPress members follow hundreds of people but have no way to organize them into focused groups like Twitter lists. BuddyLists lets members create curated lists with names, descriptions, and cover images, then view a dedicated activity feed for each list. Lists can be public or private, and a single click sends a message to everyone in a list at once.

3 releases
v1.2.0 latest
January 16, 2026 shipped

v1.2.0 Latest

January 16, 2026
New 6 Improve 3 Fix 5 Security 9

New

  • BuddyPress Moderation Pro compatibility - activity action buttons support
  • BuddyPress Polls compatibility - activity list spacing improvements
  • BuddyPress Maps & Check-ins compatibility (free and pro versions)
  • BuddyPress Reactions compatibility
  • BuddyPress Status compatibility
  • BuddyPress Activity Share Pro compatibility with share popup support

Improve

  • Frontend security, accessibility, and performance improvements
  • WordPress Coding Standards (WPCS) compliance
  • Plugin Check compliance for code quality

Fix

  • Backend enforcement of list and member limits
  • Prevention of self-add to own lists
  • Duplicate follow and member insertion prevention
  • Typo 'members_cout' corrected to 'members_count' throughout
  • Private list access now correctly allows followers to view

Security

  • Direct file access protection added to all files
  • Added UNIQUE constraints on database tables to prevent duplicate entries
  • Fixed slug collision vulnerability with unique slug generation
  • Added permission checks on delete list and manage members AJAX handlers
  • Added member ID validation to prevent adding non-existent users
  • Added notification ownership validation before marking as read
  • Added message recipient validation against list membership
  • Fixed potential SQL injection in get_members_for_lists function
  • Added cover image URL validation with esc_url_raw

v1.1.0

Fix 4

Fix

  • Data sanitization in list insert and update functions.
  • AJAX handler input sanitization for better security.
  • Added sanitization callbacks to all register_setting calls.
  • CSS compatibility issues on single lists page.

v1.0.0

March 27, 2025
Note 5

Note

  • Initial release.
  • List creation, editing, and deletion.
  • Public and private visibility settings.
  • Member activity stream filtering.
  • List following and unique public URLs.