bbPress 2.6.19
bbPress 2.6.19 is a security and maintenance release, released on September 29, 2026. It requires WordPress 6.0 or newer and PHP 7.2 or newer, and is tested through WordPress 7.1.
What changed
This release applies inherited forum passwords to REST API responses and BuddyPress activity, and strengthens access checks across forums, topics, replies, feeds, group forums, moderation actions, and role assignment. It also protects importer credentials and account handling, keeps credential-named server fields out of Akismet requests, and improves escaping in profile and administration output.
Forum imports preserve source database passwords accurately while avoiding their display in converter forms. Account creation during import is opt-in, with forum content imported anonymously when that option is unavailable or disabled. Converter cleanup targets imported forum posts only. BuddyPress group-forum associations and notifications receive additional corrections.
Upgrade notes
The WordPress requirement remains 6.0 or newer, and the PHP requirement remains 7.2 or newer. The bbPress database version advances from 263 to 264. Its automatic upgrade clears saved converter query SQL from older password upgrades. Review any custom integration that grants forum moderation, edits topics through REST API or XML-RPC, imports users, or extends converter forms. Source database credentials are no longer rendered into converter settings forms; existing saved credentials can still be kept or cleared explicitly.
Developer notes
Automatic bbPress upgrades now run for capable users viewing administration screens. Front-end and AJAX requests do not trigger the updater. Akismet continues to receive extension-provided form and server signals, except credential-named server fields. The new server-key filter allows integrations to adjust that decision.
The complete changelog records the individual security and maintenance fixes. Thanks to thewindghost, ngonhuy, and moltenbit for responsibly reporting issues addressed in this release.
