Starfish Reviews (Premium) changelog

2026 11 versions

3.1.31 Latest 22 Oct 2026 1 fixed1 security

Fixed

• Fixes: *(Premium) The daily review-profile jobs (scrape, expire and Agency auto-renew) now process every profile. Previously only the first 5 profiles were handled. *(Premium) A timeout or connection error from the reviews service no longer stops the import with a fatal error, and a failed manual refresh no longer clears the stored review count and rating. *Fixed a fatal error when logging a fa...

Security

• Security: *Fixed a stored cross-site scripting issue: the Refresh and Purge buttons in the Settings log viewer displayed log contents as HTML, so script in a public testimonial submission could run in an administrator's browser. Logs are now shown as plain text. *Testimonial and feedback submissions no longer write names, email addresses, phone numbers or messages to the debug log, and feedback...

3.1.30 15 Oct 2026 1 fixed

Fixed

• Fixes: *Restored Font Awesome on public pages that display a funnel, testimonials or a collection. Since 3.1.26 it was only loaded in wp-admin, so funnels showed the question with no Yes/No (thumbs, faces or circles) answer icons to click, and destination, testimonial and collection icons were blank. It is now loaded only on pages that render Starfish content. *Fixed the WordPress 6.7+ notice "...

3.1.29 9 Oct 2026 1 improved1 security

Improved

• Updates: *Updated the Freemius WordPress SDK from 2.11.0 to 2.13.4.

Security

• Security: *Updated the bundled Twig template library from 3.3.10 to 3.11.3, fixing a sandbox-bypass vulnerability (CVE-2024-45411). 3.11.3 is the newest Twig release that still supports PHP 7.4, so the plugin's PHP 7.4 minimum is unchanged.

3.1.28 21 Sep 2026 1 fixed

Fixed

• Fixes: *Fixed a faulty success check in profile creation that could treat a failed database insert as successful and return a stale, unrelated ID instead of reporting failure. This previously surfaced much later, and misleadingly, as "Failed to update review summary" when adding a profile with "Scrape for Reviews Now?" enabled. *Fixed profile creation reading its new database ID too late. Code....

3.1.27 19 Sep 2026 1 fixed

Fixed

• Fixes: *Fixed review profile URL validation ("Validate" button) incorrectly reporting a 403 error for valid Yelp profile URLs. The validation request sent the bare hostname as the User-Agent header instead of a browser User-Agent. *Yelp and Tripadvisor profile URLs now skip the server-side HTTP validation request entirely once the domain is confirmed authorized. Both sites sit behind bot-protec...

3.1.26 17 Sep 2026 1 improved1 fixed

Improved

• Performance: *The debug log now rotates at 5MB instead of growing unbounded, and routine logging is skipped entirely when logging is disabled in settings.

Fixed

• Fixes: *Testimonials and Collections carousels no longer fail silently under Bootstrap 5; they now initialize via the Bootstrap 5 Carousel API instead of a jQuery plugin call that Bootstrap 5 no longer provides. *Front-end pages no longer load Bootstrap and jQuery UI dialog/datepicker/sortable assets unconditionally; those now load only in wp-admin or when a Starfish shortcode is actually prese...

3.1.25 20 Aug 2026 2 improved1 fixed1 security

Improved

• Compatibility: *jQuery UI is now loaded from WordPress core rather than a bundled copy, for WordPress 7.1 compatibility. *Tested against WordPress 7.0.4.
• Performance: *Rewrite rules are no longer regenerated on every admin request. *Shortcode detection no longer re-renders page content multiple times per request. *Template rendering now uses a compiled cache instead of recompiling on every view. *Dashboard counts no longer load every matching post to count them.

Fixed

• Fixes: *Deactivating the plugin no longer removes funnels, feedback, collections or database tables. Data removal now happens only on uninstall, and only when enabled in settings. *Scheduled jobs are now cleared on deactivation regardless of licence state. *Fixed shortcode detection missing the element id when a page contained other markup first.

Security

• Security: *Fixed unauthenticated exposure of reviewer names, email addresses and phone numbers through the WordPress REST API. *Feedback records are no longer published to the REST API, and reviewer contact fields now require administrator access. *Feedback CSV exports are written to a protected location with an unguessable filename instead of the plugin folder. *Review avatars fetched from thi...

3.1.24 29 Jul 2026 1 improved1 fixed1 security

Improved

• Compatibility: *Tested against WordPress 7.0.2; declared Requires at least 6.0 and Requires PHP 7.4 in the plugin header. *Removed all uses of FILTER_SANITIZE_STRING, deprecated as of PHP 8.1. *Fixed PHP 8 warnings in the logging and migration routines. *Fixed plugin translations not loading due to an incorrect textdomain path.

Fixed

• Fixes: *Fixed profile lookup by job id, which previously never matched a record. *Fixed collection filter cleanup not running when a review profile was deleted. *Fixed random sort order in collections. *Removed a registered AJAX action whose handler did not exist.

Security

• Security: *Fixed a SQL injection in the collection reviews query. *Fixed SQL injection via the sort order on the Reviews and Review Profiles admin screens. *Added missing capability checks to eight admin AJAX actions. *Added missing capability and nonce checks to the review and profile bulk delete actions. *Fixed stored cross-site scripting in the review details and review profile admin dialogs...

3.1.23 9 Jul 2026 1 fixed

Fixed

• Fixes: *Fixed an issue Unauthenticated Arbitrary Feedback Modification via 'feedback_id'.

3.1.22 19 Jun 2026 1 fixed

Fixed

• Fixes: *Fixed an issue with the cron-based auto-scrape feature.

3.1.21 26 May 2026 1 fixed

Fixed

• Fixes: *Security (AJAX caps + nonces, path traversal, SQL injections), removed FILTER_SANITIZE_STRING, tested WP 7.0

2025 6 versions

3.1.20 19 Feb 2025 1 fixed

Fixed

• Fixes: *Implemented Capcha field optional / plan limit issue fix

3.1.19 26 Jan 2025 2 fixed

Fixed

• Fixes:
• Fixed funnel multi destinations layout and icons js conflicts

3.1.18 22 Dec 2025 1 new1 fixed

New

• Added captcha on negative form + allows the request only from datashake

Fixed

• Fixes:

3.1.17 11 Nov 2025 2 fixed

Fixed

• Fixes:
• Bug fixed for adding profile

3.1.16 13 Oct 2025 1 improved1 fixed

Improved

• CODE QUALITY IMPROVED AS PER LATEST STANDARDS

Fixed

• Fixes:

3.1.15 26 Sep 2025 2 fixed

Fixed

• Fixes:
• RENEW PROFILE BUG FIX

2024 3 versions

3.1.14 15 Feb 2024 1 fixed1 security

Fixed

• Fixes:

Security

• Security Improvements

3.1.13 23 May 2024 2 fixed

Fixed

• Fixes:
• Jconfirm issue: Fixed jconfirm issue added jconfirm library out of condition. Also fixed issue testimonial componentes

3.1.12 27 Feb 2024 2 fixed

Fixed

• Fixes:
• Testimonials: Fixed testimonial form error for non loggedin users.

2023 12 versions

3.1.11 25 Jan 2023 1 fixed1 changed

Fixed

• Fixes:

Changed

• Funnel: Feedback failing to be captured correctly, all feedback reported as negative.

3.1.10 16 Dec 2023 1 fixed1 changed

Fixed

• Fixes:

Changed

• Collections: Failing to display reviews, due to max_reviews unlimited setting error.

3.1.9 5 Nov 2023 1 fixed2 changed

Fixed

• Fixes:

Changed

• Collections: Failing to return review source details.
• Funnels: Shortcode failing to load jquery

3.1.8 5 Nov 2023 1 improved1 fixed2 changed

Improved

• Enhancements:

Fixed

• Fixes:

Changed

• Collections: Reviews failing to return if Testimonials were not also selected under Filters.
• Profiles: Auto-renew profiles that will be expiring in 7 days or less (Agency Plan only).

3.1.7 4 Nov 2023 1 fixed3 changed

Fixed

• Fixes:

Changed

• Collections: Date range sorting failing to consider both testimonials and reviews.
• Testimonials: Shortcode "category" attribute failing to return expected results.
• Funnels: Destination URL field was not supporting custom URLs with builtin redirects (e.g. Facebook URL builder)

3.1.6 2 Sep 2023 1 fixed1 changed

Fixed

• Fixes:

Changed

• Collections: Date range filter not returning results.

3.1.5 3 Aug 2023 1 fixed1 changed

Fixed

• Fixes:

Changed

• Admin: Shortcodes not working in Free Version.

3.1.4 29 Jul 2023 1 fixed1 changed

Fixed

• Fixes:

Changed

• Admin: License limits were failing to be captured causing incorrect limitation being put on valid license holders.

3.1.3 28 Jul 2023 1 improved1 fixed1 changed

Improved

• Admin: Updated Help Doc link to correct URL within the Rich Reviews Migration admin notice.

Fixed

• Fixes:

Changed

• Admin: Rich Reviews Migration status not reporting properly.

3.1.2 6 Jul 2023 1 improved1 fixed4 changed

Improved

• Enhancements:

Fixed

• Fixes:

Changed

• Admin: Using Beaver Builder, error thrown rendering page inaccessible
• Collections: forcing rating values to be integers for average calculations.
• Funnels: Icons not centered as CSS not being applied
• Admin: Auto-activate plugin through wp-config.php constant definition.

3.1.1 6 Jul 2023 1 fixed2 changed

Fixed

• Fixes:

Changed

• Freemius SDK path was incorrect
• Collections: Shortcode crashing when a review has no associated originating URL from the profile it was imported from

3.1.0 5 Jul 2023 4 new8 improved6 fixed1 removed11 changed

New

• Testimonials: New feature! Capture a new post type called "testimonials" and display testimonials on your site via shortcode. Integrated into the Premium feature "Collections" to display both external Reviews and internal Testimonials together (or separate).
• Admin: New to Starfish message not able to be dismissed.
• Testimonials: Added ability to display testimonials via shortcode outside Collections (for Free users)
• Testimonials: Added new Testimonial post type.

Improved

• Enhancements:
• Enhancements:
• Enhancements:
• Enhancements:
• Feedback: Improved feedback presentation in admin tables
• Enhancements:
• Enhancements:
• Funnels: Changed embed code to use iframe with dynamic sizing

Fixed

• Fixes:
• Fixes:
• Fixes:
• Fixes:
• Fixes:
• Fixes:

Removed

• Settings: Removed Save button from information only settings pages (i.e. Site Info under Support)

Changed

• Collections: Average element failing on division by zero on new installations of plugin with no reviews imported yet.
• Collections: Sort Order configuration not being honored
• Collections: Star ratings only showing 2-stars for all reviews
• Admin: Migrate Rich Reviews to Testimonials through Admin Notice (initial migration) or Settings Toolbox options.
• Collections: Average rating banner option with supporting shortcode parameter. Include outside the Collection using the new shortcode parameter.
• Collections: Missing Visibility and Shortcode columns.
• Profiles: Missing Visibility and Shortcode columns.
• Funnels: Shortcode use through WordPress codex do_shortcode() function failing to render complete funnel.
• Settings: Current plan limits defaulting to free plan before checking for premium plan availability
• Settings: Plan limit transient timeout validation
• General: isolated (custom starfish scope) the use of Bootstrap CSS due to numerous conflicts with themes and plugins

2022 8 versions

3.0.36 29 Dec 2022 3 improved1 fixed

Improved

• Enhancements:
• Updated Freemius SDK; PHP version validation enhancement
• Free Version: updated bootstrap80 references in some vendor dependencies

Fixed

• Fixes:

3.0.35 10 Oct 2022 1 improved1 fixed3 changed

Improved

• Enhancements:

Fixed

• Fixes:

Changed

• None.
• Profiles: Renew expired profile failing due to diff job ID being provided in the request of an expired profile.
• Admin: License limits reached admin notice incorrectly showing for Business Plan.

3.0.34 25 Aug 2022 1 improved1 fixed2 changed

Improved

• Enhancements:

Fixed

• Fixes:

Changed

• Collections: Turned the "read more" link into an expansion instead of a link to the original. The link to original review is now on the Source Icon.
• Funnels: Editing funnels is broken when setting a custom funnel slug

3.0.33 24 Aug 2022 1 fixed2 changed

Fixed

• Fixes:

Changed

• Admin: Starfish API Canary Check returning false positive. Showing warning notice that APIs are not accessible when they truly are.
• Funnels: Thumb selection not functioning due to jQuery conflict.

3.0.32 13 Aug 2022 4 new4 improved5 fixed1 removed12 changed

New

• General: New Admin Notice for new installs up to 7 days ago showing reference to how starfish works documentation: https://docs.starfish.reviews/category/185-how-starfish-works
• Settings: Added "last run" timestamp for the profile scrape cron job.
• Collections: Added support for displaying reviews randomly with newest or oldest first as options.
• Admin: New Warning Notice if WordPress APIs are found to be inaccessible; required for Review Importing to function.

Improved

• Enhancements:
• Enhancements:
• Enhancements:
• Enhancements:

Fixed

• Fixes:
• Fixes:
• Fixes:
• Fixes:
• Fixes:

Removed

• Collections: Removed the Profile selection limit.

Changed

• General: Released Beta version to Production.
• Funnels: Shortcode causing Elementor Builder editor to not display anything.
• Funnels: Shortcode when used by do_shortcode function is showing DOMDocument Warnings for invalid HTML5 tags.
• General: Assigned custom jQuery variable in No Conflict mode for all Starfish JavaScript files to help reduce any potential JS conflicts with other themes/plugins
• Premium: Clearing plan limits when license activation occurs (e.g. upgrading/downgrading licenses)
• General: JavaScript conflicts with a theme called "Woodmart" and potentially others with regards to a commonnly named prototype function.
• Settings: Site information references, starting with current license/plan's limits
• Premium: Clearing plan limits when license activation occurs (e.g. upgrading/downgrading licenses)
• Funnels: jQuery conflicts with Elementor. Put Starfish JavaScript into jQuery.noConflict mode.
• Funnels: Returning license limit message for unlimited licenses.
• Profiles: Logging for when scrap cron job is executed.
• Profiles: Cron jobs not executing for profile scraping.

3.0.31 2 May 2022 1 new1 improved1 fixed1 changed

New

• Settings: New Community Bar with tiles to leave feedback, ideas, and view the Starfish Roadmap!

Improved

• Enhancements:

Fixed

• Fixes:

Changed

• General: Data migration version 2 failing to account for length of index keys

3.0.30 29 Apr 2022 1 fixed3 changed

Fixed

• Fixes:

Changed

• General: Bootstrap80 file missing error breaking the FREE plugin version from installing/updating in a non-php8 environment.
• General: Data migration version 3 failing due to duplicate primary key.
• General: ClipboardJS version update.

3.0.29 16 Apr 2022 1 improved1 fixed1 changed

Improved

• General: Database migration version 3 updated to specify index prefix length

Fixed

• Fixes:

Changed

• Funnel: Disable Review Gating turned on by default to protect against violation of Review Site terms and conditions