Download Monitor

Changelog

5.1.13 – 14.04.2026

Fixed: Admin styles compatibility with WordPress 7.0.

5.1.12 – 25.03.2026

Removed: Settings page sidebar upsells.
Added: Blacklist protection upsell in settings page.

5.1.11 – 20.03.2026

Fixed: Security update.
Fixed: WPML double language prefix in download URL.

5.1.10 – 05.03.2026

Fixed: Security update.

5.1.9 – 04.03.2026

Fixed: Security update

5.1.8 – 26.02.2026

Fixed: Security – PayPal payment gateway IDOR and financial logic vulnerability. Validates order hash (timing-safe), binds PayPal token to the order, and only completes the order when the transaction matches. Handles capture failures safely.

5.1.7 – 27.01.2026

Update: Removed unused images.
Fixed: Textdomain for some translations.
Fixed: Removed upsells from REST API settings tab.
Fixed: Safari compatibility with XHR redirect.
Fixed: XHR compatibility with plugins that remove domains from links.

5.1.6 – 05.11.2025

Added: Black Friday upsells & notifications updates.
Fixed: Logging no access page redrection

5.1.5 – 27.10.2025

Fixed: Redirect filter not triggered for deleted/non-existing downloads.
Fixed: Admin upsells modal buttons not working properly.

5.1.4 – 07.10.2025

Changed: Removed DLM Pro upsell.
Added: Upsell for DLM Document Library Manager.
Fixed: Log meta values not saving when creating a download log.
Update: Optimized database cleanup for expired cookies.

5.1.3 – 18.09.2025

Update: Improved Reports widget and Reports page UI/UX.
Update: Reports upsells now display with the correct filters design.
Fix: Download meta values were sometimes not saved correctly when using WPML.

5.1.2 – 05.09.2025

Fixed: Start session only on download-related requests.

5.1.1 – 01.09.2025

Fixed: Removed stray debugger statements.

5.1.0 – 27.08.2025

• Changed: Reworked the reports interface improving speed, design and accuracy.

5.0.33 – 08.08.2025

Fixed: Compatibility with Safari browser & redirect to file.

5.0.32 – 30.07.2025

Changed: Removed the “download version” post type from the list of translatable content in wpml-config.xml.

5.0.31 – 28.07.2025

Fixed: Set the default language for download taxonomies when using the Polylang plugin.
Changed: Removed ‘dlm_enable_api_keys’ filter and always render the REST API table in Settings -> Advanced -> REST API.

5.0.30 – 25.07.2025

Fixed: Downloads without a default WPML language were not showing in the admin table.

5.0.29 – 23.07.2025

Fixed: Compatibility with Admin Columns plugin.

5.0.28 – 22.07.2025

Added: Made the plugin fully translatable with WPML.

5.0.27 – 08.07.2025

Fixed: Expired cookies were not cleared from cookie data tables.

5.0.26 – 20.06.2025

Changed: Updated label of Page Addon to Document Library Manager

5.0.25 – 05.06.2025

Fixed: Set the Secure attribute on the PHPSESSID cookie for the session started by DLM.

= 5.0.24 – 26.05.2025 –
Added: New filters to allow preventing session initialization when necessary.
Fixed: Issue causing license deactivation during scheduled weekly checks.

= 5.0.23 – 22.04.2025 –
Fixed: License was being deactivated for single product licenses.
Fixed: Security update

= 5.0.22 – 17.03.2025 –
Added: Integrated WPChill Notification System.

5.0.12 – 25.09.2024

Fixed: Error on simple site approved download path deletion

5.0.11 – 25.09.2024

Fixed: Critical error when no paths ( #1558 )
Fixed: REST API Version creation order ( #1557 )
Fixed: Allow network admin to quick add paths from Download edit screen ( #1559 )

5.0.10 – 24.09.2024

Fixed: Check user capability when enabling Shop ( thanks to @truonghuuphuc for reporting ) ( #1551 )
Fixed: Double slash for home url ( #1533 )
Changed: Downloadable file URLs format on save ( #1536 )
Fixed: PHP Error ( #1534 )
Changed: Downloads Paths for multisite, now on each site ( only network admin can add them ) ( #1538 )
Fixed: Database error when installing tables on multisite ( #1540 )
Added: Terms & Conditions quick edit action in admin list ( #1510 )
Fixed: New untitled Download fatal error ( #1541 )
Fixed: Plugin conflict with Event Espresso ( #1548 )
Fixed: Main site in multisite incorrect route ( #1549 )
Fixed: Printing emoji in Insert in Editor action ( #1504 )
Fixed: Creating API Keys on Firefox & Firefox like browsers ( #1553 )

5.0.9 – 29.08.2024

Fixed: Security update when exporting single Download CPT

5.0.8 – 28.08.2024

Fixed: Logging bug in some conditions ( #1527 )
Fixed: Legacy importer null content bug ( #1528 )

5.0.7 – 27.08.2024

Fixed: Versions order not following menu order ( #1511 )
Fixed: Undefined variable ( #1523 )
Fixed: Not logging downloads in some conditions ( #1522 )

5.0.5 – 23.08.2024

Fixed: Dev fixes

5.0.4 – 23.08.2024

Fixed: Dev files included

5.0.0 – 21.08.2024

Fixed: File Browser not working on installations that return ‘//’ ( double slashed ) paths. ( #1412 )
Fixed: File Browser no longer displays cross-site folders in multisite environments. ( #1402 )
Fixed: Performance issues that were affecting websites with a large number of downloads or a large postmeta table. ( #1421 )( #1425 )
Fixed: Error when trying to delete files on Download deletion ( #1468 )
Fixed: When using XHR to download files, some browsers would block redirecting a Download file in a new tab ( #1467 )
Fixed: Incompatibility with the WPML plugin ( #1453 )
Fixed: Certain UI bugs in the admin area
Fixed: Filetype was not showing the icon ( #1426 )
Fixed: Multiple downloads bug when on the same page using the “Button” template ( #1449 )
Fixed: PayPal payment gateway PHP 8.x compatibility
Fixed: UUID column from download_log can not be null ( #1506 )
Fixed: External file Downloads might not register downloads ( #1508 )
Changed: Admin download edit view ( #1398 )
Changed: Enhanced display of settings descriptions. ( #1444 )
Changed: Major change, multiple allowed uploads paths and setting redesign ( #1447 )
Changed: Major change, switched to DLM-globaly used cookie for Download Monitor and its extensions ( #1384 )
Changed: File restriction, search and placement now based on allowed paths, and now is absolute
Chaged: Removed Twitter Lock upsells, extension meets the end of life ( #1497 )
Added: File type & location column to the admin list table ( #1450 )
Added: REST API endpoints for creating, updating, and deleting downloads and versions ( #1215 )
Added: REST API Keys, to allow access to the REST API endpoint functionality
Added: Included the Terms and Conditions premium plugin in the LITE version ( #1445 )
Added: Download debug export metabox ( #1387 )
Added: Possibility in Multisite to specify the uploads folder for each site ( #1403 )
Added: Directories access restriction ( #1401 )

4.9.14 – 27.05.2024

Fixed: Security issue, thanks to Arkadiusz Hydzik for reporting it.

4.9.13 – 15.04.2024

Fixed: Enforce on what pages should the ID pe appended in the title ( #1443 )
Fixed: WP 6.5 compatibility for fresh installs ( #1442 )

4.9.12 – 11.04.2024

Fixed: Lite vs Premium page not showing when a license is not added.( #1441 )

4.9.11 – 16.02.2024

Changed: Removed Freemius
Fixed: Slight UI fixes

4.9.10 – 05.02.2024

Fixed: Versions download link for the “Version list” template ( #1422 )

4.9.9 – 30.01.2024

Fixed: Performance issue fix

4.9.8 – 25.01.2024

Fixed: Products update problem ( #1415 )
Fixed: PHP Warnings on non-defined Download templates ( #1413 )

4.9.7 – 23.01.2024

Fixed: [] operator not supported for strings error. ( #1409 )
Fixed: User reports not showing user name & role. ( #1410 )

4.9.6 – 22.01.2024

Changed: Moved, removed and updated admin settings for “General” section ( #1346 )
Changed: Moved, renamed and updated admin settings for “Shop” section ( #1347 )
Changed: Moved, removed and updated admin settings for “Advanced” section ( #1348 )
Changed: Prevent Duplicate Downloads ON by default on production(live) websites. ( #1350 )
Changed: Reports – don’t get users without downloads. ( #1313 )
Fixed: Removed nonce check on reports for WordPress’ own requests ( #1383 )
Added: Templates section where the user can see overridden templates. Also, moved the Misc section in the General tab ( #1389 )
Added: Dynamic data to plugin’s templates, now offering way to add attributes to the link without needing to override the template ( #1385 )
Added: Open in new tab option when selecting “Redirect to file” option ( #1386 )
Added: Alert if some PHP functions/modules are disabled ( #1392 )
Changed: Do not take into consideration the 60s window for unique downloads on localhost or staging ( #1350 )
Fixed: Disabling file browser from wp-config.php ( #1259 )
Changed: Moved external hosting upsell to its own metabox ( #1405 )

You can read the complete changelog here