bbPress 2.6.17 is a security and maintenance release with broad improvements to permissions, private content, subscriptions, moderation workflows, and forum counts. Everyone running bbPress should update as soon as possible. 🔒
(You may notice 2.6.17 release follows 2.6.15. Well, I found a SQL bug right after 2.6.16 was tagged and I didn’t want to wait to get that fix out, sooooo… here we are!)
This release strengthens inherited private and hidden forum visibility, BuddyPress Group Forum boundaries, subscriber access checks, profile editing, REST API and XML-RPC requests, search results, canonical redirects, topic tags, reply moves, topic splits, and output escaping.
It also includes a substantial overhaul of count maintenance and repair tools, improving topic, reply, forum, subforum, engagement, voice, and user contribution counts across moderation, moves, merges, splits, deletion, restoration, reassignment, and simultaneous requests. Block Themes now receive first-class support while continuing to use bbPress’s PHP templates, and the Plugin Directory gains a populated WordPress Playground preview.
Developers should review the 2.6.17 upgrade notes, especially if an integration hooks bbPress creation or moderation actions for counts, filters custom statuses or count values, customizes subforum queries, or overrides form-user-roles.php.
All of these changes have also been merged into the 2.7 development branch, which is now at 2.7.0-alpha-3.
Thank you to obenland, hoangkien1020, rafiem, faran66, im_rootkid, winty, winstoncrooker, vvh1te3zz, mickey_cyberkid, phanphanhailong, hieunx91, jassbugbounty, nextdoorsec, akemi20, amedit, djsplatt, antonade, foobar7, paulos__, and nomadsyndiode for contributing reports, patches, testing, and review. Thank you for helping keep bbPress communities safe and reliable! 🙏
Download bbPress 2.6.17 from WordPress.org, or update directly from your WordPress dashboard.
bbPress 2.6.15 is a security and maintenance release that fixes five security issues and includes a few compatibility improvements. Everyone running bbPress should update as soon as possible. 🔒
This release strengthens authorization around topic and reply editing, topic splitting and merging, user profile updates, and private or hidden forum visibility. It also hardens imported password verification, avoids PHP warnings on some forum requests, and improves compatibility with modern WordPress UTF-8 handling.
All of these fixes have already been merged into the 2.7 development branch.
Thank you to mickey_cyberkid, itznullbyte, eldoniis, and tristaninsec for reporting issues through HackerOne, and to Ananda Dhakal at Patchstack for reporting CVE-2026-74010. Thank you for helping keep bbPress communities safe! 🙏
Download bbPress 2.6.15 from WordPress.org, or update directly from your WordPress dashboard.
bbPress 2.6.14 is a minor release that fixes 20 issues. For everyone running bbPress 2.6, feel free to update at your earliest convenience. 🍯
This release improves Akismet, BuddyPress, and PHP 8.2 support, moderation terms, search, and more!
(All of these fixes have already been merged into trunk/2.7.)
Thank you to everyone who contributed to this bbPress release! 🙏
bbPress 2.6.13 is a minor release that fixes 1 small incompatibility with WordPress 6.8.
(This fix is already merged into the 2.7 development branch.)
Thank you to vortfu, peterwilsoncc, spacedmonkey, joemcgill, swissspidy, and jorbin for helping communicate this to the bbPress team 🐝
bbPress 2.6.12 is a minor release that fixes 1 security issue and 1 small bug.
The security issue was responsibly disclosed via the WordPress HackerOne bounty program. It does not appear to be actively exploited, and specifically targets: single-site WordPress installations, newer than 5.3.0, with the “Membership” setting set to “Anyone can register”, and with bbPress active.
(Even if that isn’t you, you should still update bbPress to 2.6.12 anyways!)
The minor bug was a regression to the search component introduced in 2.6.11, causing search results to not be as accurate as everyone deserves for them to be. 🕵
Both of these fixes are already merged into the 2.7 development branch.
Thank you to GDragoN and mungah (via HackerOne) for your help fixing bugs, and Robin W for keeping the bbPress.org Forums squeaky clean and well-supported! I really appreciate all of y’all! 🐝
bbPress 2.6.11 is a minor release that fixes 13 relatively small bugs reported over the past few years.
Most notably, it improves HTML output escaping in the topic & reply forms (nothing serious, just some entities showing up where they should not), prevents a bunch of different debug notices from filling up error logs, and also updates some code to avoid deprecated notices from testing with the latest version(s) of WordPress itself.
All of these fixes have already been merged up into the 2.7 development branch.
If you’re paying really close attention, you may be wondering “hey John, what happened to 2.6.10?”
Well… I botched it. It’s been a while, ok? 🤦♂️ And 2.6.11 is good to go.
Huge thanks to Eusebiu, Kevin, and (as always) Robin W for being super fast with their feedback and just generally awesome!
bbPress 2.6.9 is a minor release that improves the Akismet clean-up routines introduced in the 2.6.7 release. If you are using Akismet with bbPress and saw some debug notices in your logs, this release is for you!
Thank you to our friends over at Automattic’s Akismet team for helping! 💚
bbPress 2.6.8 is a minor release that fixes 1 regression in the 2.6.7 release. 😬
Thank you to everyone who provided prompt feedback in the support forums. Because of you, we were able to react quickly and repackage this release right away. 🎉
bbPress 2.6.7 is a minor release that fixes 19 issues. For everyone running bbPress 2.6, feel free to update at your earliest convenience. 🍯
This release improves Akismet and BuddyPress support, allows Moderators to reply to unapproved Topics, and fixes a user-interface issue with the hierarchical replies feature, just to highlight a few notable changes.
Thank you to everyone who contributed to this bbPress release! 🙏
bbPress 2.6.6 is a minor release that fixes 22 issues. For all y’all running bbPress 2.6, you are welcome to update at your earliest convenience. 🐝
This release fixes a few PHP warnings & notices, some output formatting bugs, and improves a few different moderator experiences, just to name a few of my favorite changes.
As always, thank you for choosing bbPress. It means a lot to our team that you and over 300,000 others entrust us with powering your community. 💚
