• v0.3.3 418514bf5a

    UltimateByte released this 2026-05-26 19:21:54 +02:00 | 63 commits to main since this release

    This release sharpens how SMTP cooperates with other plugins, extends the captcha to more parts of WordPress, and polishes the admin.

    What's new

    Captcha now protects more than contact forms. WordPress comments, the lost-password screen, and the user-registration form can each be guarded by any of the captcha challenges (built-in math / picture, hCaptcha — more soon). Each context is opt-in — comments / lost-password / registration are off by default; contact forms and newsletter signups keep their existing protection. Configure it under Email Toolkit → Captcha → Captcha assignments.

    Pick how aggressively SMTP overrides other plugins' senders. The old "Force From" toggle becomes a three-option dropdown:

    • Always override — your identity wins, even against plugins that set their own sender.
    • Only when no sender is set (the new default for fresh identities) — respect WooCommerce, contact forms, etc. when they pick a sender themselves, but fill in for emails that didn't.
    • Never override — let any caller's choice pass through.

    Existing identities keep doing what they did before (they migrate to Always override).

    Captcha admin redesigned. The assignments section now uses the same dropdown style as the rest of the plugin. Each per-context row shows what Inherit default actually resolves to, so you always know what's going to be used. Every built-in challenge and every hCaptcha identity has a Set as default button — clicking it makes that one the site-wide default and updates everywhere else instantly.

    Newsletter cards now show click stats. Below the open rate, you'll see the click-through rate too. A display bug that kept all tracking counters at 0 on the cards is also fixed — opens and clicks were being recorded all along, they just weren't shown.

    Polish + reliability

    • The Active toggle on an SMTP identity now actually deactivates the identity when you untick it (it was silently re-saving as active).
    • Auto-save on SMTP identity cards is more reliable: shows an Unsaved changes indicator while you're typing, handles edits made during an in-flight save without losing them, and no longer fires a spurious second save when you leave a field after the save already succeeded.
    • Schema migration for existing installs applies cleanly on upgrade — previously some identity edits appeared saved but weren't actually persisted.
    • Destructive admin actions (delete identity, set default, save routing) get a stronger per-action security check on top of the existing protections.

    Notes

    The Newsletter module is still alpha — field testing welcome. Issues + feature requests: https://github.com/LRob-FR/wp-lrob-email-toolkit/issues

    Downloads