Skip to content

Changelog

All notable changes to WPsigner are documented here.

March 4, 2026

We ran a full security review and tightened up a bunch of things:

  • Fixed a permission issue in the API that could let unauthorized requests through.
  • Webhooks weren’t firing properly. Found the bug and squashed it.
  • Signing order is now enforced on the server, so signers can’t skip ahead.
  • Improved how the plugin detects real visitor IPs when your site is behind Cloudflare.
  • API connections now require HTTPS. No more insecure requests.
  • Stronger encryption for certificates, and sensitive files are stored more securely.
  • Timestamp server requests are now fully encrypted.
  • Fixed a couple of security issues on the signing page related to form fields.
  • API endpoints are no longer publicly listed in the WordPress REST index.
  • A handful of smaller security improvements across the board.

February 24, 2026

  • Identity verification with Didit.me. Signers can now verify their identity with a government ID, selfie, and liveness check before signing. You set it up once and get real-time status updates.
  • SMS verification via Twilio. Signers can verify by text message, email, or both.
  • New option in settings to choose how verification codes are delivered.
  • The signing page now adapts based on the verification method you’ve picked.

February 12, 2026

  • Encryption is now set up automatically when you install the plugin. One less thing to configure.
  • Fixed Google Drive disconnecting when the token expired. Reconnection is handled automatically now.
  • Admin notices now link directly to the relevant setup guide instead of a generic settings page.

January 30, 2026

  • Redesigned the timestamp verification email. Much clearer now.
  • Blockchain verification links open a clean branded page instead of a raw URL.
  • Fixed an edge case where some timestamp providers were incorrectly filtered out.

January 20, 2026

  • IP detection now works correctly when your site is behind Cloudflare, load balancers, or reverse proxies.
  • All parts of the plugin now use the same IP source, so rate limiting and audit logs stay consistent.
  • Added support for custom proxy headers if your hosting setup needs it.

January 8, 2026

Big encryption upgrade. Your stored credentials are now much more secure.

  • Encryption keys come from your site’s unique WordPress configuration instead of the database.
  • Certificate passwords use stronger encryption with unique keys for each operation.
  • Tighter file validation across uploads, downloads, and templates.
  • Location lookups are encrypted in transit.
  • You’ll see a warning if encryption keys change after a site migration.

December 18, 2025

  • Fixed a crash on mobile with large PDFs (100+ pages).
  • Pages now load as you scroll, so your device doesn’t run out of memory.
  • Automatic cleanup for pages you’ve scrolled past.
  • Better performance on lower-end phones and tablets.

December 2, 2025

  • Rate limiting on all API and integration endpoints.
  • Security review of every admin form and input field.
  • Third-party credentials (API keys, tokens) are now stored encrypted.
  • Plugin uses ~12% less memory.

November 15, 2025

  • Reorganized the integrations page by category: Forms, Messaging, Automation, CRM, Cloud Storage.
  • Added “coming soon” labels for Make, n8n, Telegram, Gravity Forms, Dropbox, and Teams.
  • New card designs with official brand icons for each integration.

October 28, 2025

  • Fixed PDF viewer not loading on some shared hosting setups.
  • Fixed WhatsApp templates breaking when document titles have special characters.
  • Better loading indicators for documents over 20 pages.

October 6, 2025

Biggest release since launch.

  • WhatsApp Business. Send signing requests, reminders, and completion notifications via WhatsApp.
  • Integrations Hub. New admin page showing all integrations and their connection status.
  • Google Drive. One-click setup. Signed PDFs are saved to your Drive automatically.
  • License System. Manage plugin licenses through WooCommerce.
  • Smoother mobile signing with larger buttons and better scrolling.

September 8, 2025

  • Signers now see the full document first instead of being auto-scrolled to the first field.
  • Better keyboard navigation and accessibility across the signing page.
  • Fixed a validation issue with the consent checkbox on Safari and iOS.

August 11, 2025

  • OTP Verification. Signers confirm their identity via email before signing.
  • Location capture. Optionally log where signers are located for richer audit trails.
  • Browser, platform, and timezone are now included in the audit trail.
  • Consent checkbox gets its own timestamp for compliance records.

June 23, 2025

  • REST API. Full API with key management, permissions, and rate limits.
  • Zapier integration. Connect WPsigner to 6,000+ apps with real-time triggers and actions.
  • API documentation with examples in PHP, JavaScript, Python, and cURL.
  • Cleaner email templates.

May 5, 2025

  • Roles. 4 roles: Sender, Viewer, Manager, Admin. Each with specific permissions.
  • Download links for signed documents now expire after 48 hours.
  • You can add custom messages to signing request emails.
  • More reliable auto-reminders, even on sites with inconsistent WordPress cron.

March 17, 2025

  • Translations. English, Spanish, Italian, French, German, and Portuguese (Brazil).
  • All fonts and scripts are self-hosted. No external requests, fully GDPR compliant.
  • Pages load ~300ms faster.

February 3, 2025

  • Digital ID. Generate a self-signed certificate directly from the settings page.
  • Elementor Forms and Fluent Forms integrations. Turn form submissions into signing documents.
  • New system status page with a health score, auto-fix tools, and debug export.
  • Dashboard widget showing health score and pending reminders.

December 16, 2024

  • Security Center. New settings page with a real-time compliance score.
  • Upload your own certificates for Adobe-verified digital signatures.
  • Timestamp Authority integration for legally provable signing times.
  • 6-digit access codes for sensitive documents.
  • Compliance badges for ESIGN Act, eIDAS, and UETA.

October 28, 2024

  • Webhooks. Get real-time notifications when documents are signed, viewed, or completed.
  • Compatibility fixes for WP Rocket, LiteSpeed Cache, and Autoptimize.
  • Added Portuguese (Brazil), French, and German translations.

September 2, 2024

  • Document Wizard. 4-step guided flow: Upload, Signers, Fields, Review.
  • Sequential signing: set a strict order or let everyone sign at the same time.
  • One-click copy for signing links after sending a document.
  • White-label: use your own logo, colors, and footer text.

August 4, 2024

  • Multi-signer support. Up to 6 signers per document.
  • Color-coded fields so each signer’s fields are easy to identify.
  • Quick-share modal for signing links.

July 15, 2024

Initial release.

  • PDF upload with drag-and-drop.
  • Electronic signatures: draw, type, or upload an image.
  • Form fields: signature, initials, date, text, checkbox.
  • Automatic email notifications for signing requests and completions.
  • Audit trail with timestamps, IP addresses, and action logging.
  • PDF certificate of completion with QR code verification.
  • Works on desktop, tablet, and mobile.