MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites

Changelog

6.1.2 – 6-16-2026

• Updated: Hardened MainWP Child connection verification and settings behavior for passwordless setups. If Password Authentication is disabled, adding or reconnecting a site now requires the Unique Security ID, including when using the MainWP REST API or other automations. Thanks to Khaled Alenazi (Nxploited).

6.1.1 – 6-2-2026

• Updated: Improved session cleanup when authentication failures occur to ensure proper logout behavior. (Pull Request by Sixela)
• Updated: Improved premium theme and plugin update detection to prevent system hangs caused by slow or unreachable servers. (Pull Request by Contributolo)

6.1 – 5-26-2026

• Fixed: Typos and inconsistencies in user login event log descriptions and action identifiers for improved clarity and consistency across Network Activity logs.
• Updated: Spammed comments are now properly excluded from being counted in reports and token metrics.
• Updated: Updated the PHPSecLib library to the latest version.
• Updated: Enhanced plugin and theme health check monitoring with improved background task scheduling and automatic recovery from missed scheduled events.

6.0.11 – 5-5-2026

• Fixed: Global customize_register hook exposes legacy Customizer UI issues.

6.0.10 – 4-28-2026

• Fixed: Improved namespace prefix handling to ensure more accurate module loading.
• Updated: Enhanced background synchronization for detecting and reporting outdated plugins and themes.

6.0.9 – 4-21-2026

• Updated: Improved Network Activity entries for WordPress auto-updates to avoid showing “Unknown User” and better reflect automated update actions.

6.0.8 – 4-14-2026

• Fixed: Added the normalize_theme_slug() method to better handle theme references and prevent PHP warnings when installing themes by uploading a ZIP file.
• Updated: Expanded Network Activity tracking to monitor core, plugin, and theme updates handled by WordPress auto-updates.

6.0.7 – 4-7-2026

• Fixed: Resolved an issue where the Network Activity feature continued logging events even when the feature was disabled.
• Fixed: Conflict with the SureFeedback plugin.
• Added: Added detailed sync monitoring with per-call timing and execution data to the Custom Event Monitor.
• Added: Added an option to set a custom Network Activity data retention period in child site databases.

6.0.6 – 3-31-2026

• Fixed: Improved timestamp strict typing compatibility on newer PHP versions.
• Fixed: Corrected an issue where the UpdraftPlus add-on option “Do not overwrite Remote Storage settings” was not respected in individual site settings.

6.0.5 – 3-24-2026

• Fixed: Corrected the timing of theme update data collection to ensure the latest information is used during updates.
• Fixed: Skipped logging meta creation events for auto-draft posts to prevent conflicts with the SureFeedback plugin.

6.0.4 – 3-20-2026

• Security: Updated the phpseclib library to address a recently disclosed vulnerability. The issue does not affect MainWP in normal usage.
• Fixed: Fatal error in when saving posts in Gutenberg if the sticky_posts option contains invalid data.

6.0.3 – 3-17-2026

• Fixed: Autoload settings for legacy data to optimize database performance.
• Fixed: UpdraftPlus remote storage settings management to properly clear backed-up remote settings when explicitly disabled
• Updated: Database upgrade tracking with automatic version detection and improved compatibility handling.
• Updated: Automatically migrate legacy BackWPup scheduled backup arguments during startup so existing scheduled backups continue running after upgrade.
• Updated: Adjusted the timing of cache purge verification to better coordinate with WordPress plugin initialization.
• Updated: Improved the UpdraftPlus backup schedule deletion functionality for enhanced reliability.

6.0.2 – 3-10-2026

• Fixed: Resolved a conflict with a third-party plugin caused by a legacy feature that hid script version numbers.
• Updated: Enhanced user role retrieval logic for Pro Reports related data.

6.0.1 – 3-3-2026

• Fixed: Updated internal asset handling to improve consistency across registration and enqueuing processes.
• Fixed: Replaced multibyte-aware string functions (mb_strpos, mb_split) with standard equivalents (strops, explode) in WordPress database table prefix detection logic.
• Fixed: Fixed a conflict with the SureFeedback plugin to improve compatibility.
• Fixed: Prevented conflicting output handling during certain database operations to improve stability in environments where multiple components manage output streams.
• Fixed: Improved escaping and translation-safe string handling to avoid edge-case issues in localized environments.
• Updated: Normalized plugin internationalization by standardizing the mainwp-child text domain and adding translator context for clearer, more accurate translations.
• Updated: Loaded the plugin text domain earlier by calling localization() from init_frontend_only() and init_full() to ensure translations are available sooner.
• Dev: Added PHPCS ignores for bundled translations, converted a heredoc SQL statement to a concatenated string, and made minor logic/formatting tweaks.
• Removed: Removed the White Label add-on feature that allowed hiding plugin and theme updates.
• Removed: Removed a stray .htaccess file.

6.0 – 2-24-2026

• Added: New maintenance options to selectively clean expired transients or remove all transients from the site.
• Added: Password policy management to set and enforce password expiration rules.
• Added: Extended post retrieval to support ID-based filtering for more targeted synchronization.
• Added: Caching for recently updated custom posts with automatic invalidation on post changes, and included cached data in sync payloads to improve performance.
• Added: Support for the upcoming Patchstack Integration for MainWP.
• Added: Support for the feature update that allows users to delete plugins that are active while respecting sequence of deactivating first and deleting after in background.
• Added: Helper method to detect MainWP-specific admin pages.
• Added: Created a dedicated MainWP_Child_Assets class to handle asset loading.
• Updated: Enhanced plugin update processing to include WordPress and PHP compatibility details for both standard and premium plugin updates when compatibility checks are available.
• Updated: Improved error message handling for better compatibility with the PostHog (MainWP Dashboard Telemetry) integration.
• Updated: Disabled cron event tracking as the default value for Sites Changes logging to reduce unnecessary log entries.
• Updated: Stopped parsing the readme.txt file for version requirements and switched to reading from the main plugin file for improved reliability.
• Updated: Restructuring the plugin initialization to only load necessary code based on the current request context.
• Updated: Delaying the loading of admin-specific code until it’s actually needed.
• Updated: Implementing conditional loading of CSS and JavaScript files only on MainWP-specific pages.
• Updated: Separated asset registration from enqueuing for better performance.
• Updated: Optimized jQuery UI loading to only load when needed.
• Fixed: Fixed saving of Solid Security plugin settings.
• Fixed: Multiple PHP warnings and notices to ensure cleaner operation.
• Fixed: Missing user information for certain objects and events in the Sites Changes feature.
• Fixed: An issue with syncing Sites Changes that occurred on some server configurations.
• Fixed: Corrected Child plugin’s inability to load jQuery libraries on the “Clone/Restore” page due to incorrect conditional logic.
• Fixed: Resolved Child plugin error when attempting to load non-existent assets.
• Dev: Updated PHPSecLib package to their latest versions to maintain security and compatibility standards.

See Video Changelog

See changelog for all versions.