1.4.0 Latest
- New: refreshed Change Username screen in the SmartUsername brand style, with clearer cards and buttons.
- New: loading feedback on every button while a rename or setting is saved.
- New: Docs link in the Plugins list, and an optional, dismissible card about the SmartUsername Pro add-on on this plugin’s own screen only.
- No features were moved or limited.
1.3.0
- New: Exposure check card with a Hidden or Exposed verdict and a fix for each item.
- New: Login name protection switch (REST users list,
?author=Nlookups, users sitemap, oEmbed author, one login error message). - New: optional switch to turn off author archives.
- New: trap usernames and a “Login attacks caught” Dashboard widget, plus a rename form option to keep the old username as a trap.
- New: “Fix author slugs” button for authors whose public URL shows the login.
- New: link to the free Username Exposure Checker (opens only when clicked).
- New:
wp smartusername exposurecommand. - Changed: a new author slug now comes from the display name, never from the login.
1.2.0
- New: security check warns about usernames that login attacks guess first (admin, administrator, root, site name and more), with one-click Rename and a dismiss button.
- New: “Change username” button next to the Username field on Profile and Edit User screens.
- New: optional email to the renamed user with their new username and login link.
- New: optional self-service renames for chosen roles, with a waiting period. Off by default.
- New: WP-CLI commands
wp smartusername rename,checkandlog. - New: the log shows whether a change was made by an administrator, the user or WP-CLI, and whether the email was sent.
- New: filters
smartusername_notification_emailandsmartusername_risky_usernames. - Uninstall also removes the settings and per-user markers.
1.1.0
- New: rename any user, not only your own account, from a list or the “Change username” link on the Users screen.
- New: live availability and validation check while typing (nonce protected).
- New: optional author slug update, with a 301 redirect from the old author URL.
- New: confirmation step before you rename your own account and get signed out.
- New: log of the latest 50 renames, with a Clear log button.
- New: redesigned, accessible admin screen. Assets load on this screen only and the form works without JavaScript.
- New:
smartusername_username_changedaction andsmartusername_log_limitfilter. - Fix: usernames longer than 60 characters are rejected with a clear error instead of failing silently.
- Fix: input that is empty after sanitizing is rejected instead of saving an empty username.
- Fix: characters WordPress core does not allow (such as ! and #) are rejected.
- Fix: success message and sign out only happen when the database row was actually updated.
- Security: capability checks in every handler; multisite requires
manage_network_users.
1.0.0
- Initial release.