WordPress News

MC4WP 4.13.1 Released

high confidence based on 1 community posts

What’s new in MC4WP 4.13.1

Released: 2026-06-22

Active installations: 1,000,000

Tested up to WordPress 7.0.2

Requires PHP 7.4

Forms: Improve handling of pasted wrapper tags in form content.
Forms: Remove mc4wp_default_form_id option. We now default to first available form.
Forms: Improve the {email} dynamic content tag by detecting common lowercase email field names.
Misc: Adhere to DB, Security, I18n sniffs from WordPress Coding Standards.
Misc: Prevent direct access to plugin configuration files.
Misc: Remove the plugin review request from the footer of plugin admin pages.
Security: Add Patchstack vulnerability disclosure instructions to the plugin FAQ and security policy.

4.13.0

Improve performance by preloading core plugin classes and skipping dynamic content tag parsing when no tags are present.
Improve security for admin AJAX requests by adding a nonce check and stricter audience ID handling.
Improve dynamic content tag replacement by removing broken regular expressions.
Improve form preview output by disabling PHP error display during preview rendering.
Update JavaScript dependencies and pass admin script data using wp_add_inline_script().

4.12.6

Fix integrations losing runtime options like double opt-in when sign-up attempts are processed asynchronously. Thanks Jon Parker!
Fix Site Tracking Pixel setting not being saved when disabling it.
Improve accessibility of generated form fields by wrapping inputs in labels and using fieldsets for checkbox and radio fields.
Improve validation and sanitization of submitted form data.
Improve debug log safety by truncating overly long messages and improving email address obfuscation. Thanks Jack Feldcher!