Webmention

Changelog

Project and support maintained on github at pfefferle/wordpress-webmention.

5.7.0

  • Fix blind SSRF vulnerability by using wp_safe_remote_get for author page and tools requests
  • Fix undefined constant error in WP handler
  • Fix double slash in avatar upload directory path
  • Fix “Show avatars on Webmentions” setting having no effect
  • Fix comment query to respect explicit type parameter

5.6.2

  • Fix incorrect asset URL in admin enqueue
  • Revert minimum WordPress version back to 6.2 for ClassicPress compatibility
  • Bump @wordpress/components from 30.9.0 to 31.0.0

5.6.1

  • Remove explicit require_once for Handler classes, rely on autoloader instead
  • Add autoloader tests to verify Handler classes load correctly

5.6.0

  • Fix undefined property warning in Item::__call magic method when accessing non-existent properties like category.
  • Search Avatar Store if enabled for match before trying meta field. Disable updating meta field when side loading allowing for more flexibility.
  • Fix editor plugin error on custom post types without custom-fields support.
  • Add video/audio URL extraction as content fallback for webmentions without text content.
  • Use registered comment type excerpt templates as fallback for reactions (likes, reposts, etc.).
  • Fix array_merge() error when _embedded key is missing in WordPress API response.
  • Fix fatal error when parsing invalid date strings in webmentions.
  • Fix span tags inside anchor tags confusing WordPress auto-linking.
  • Fix PHP warning for undefined array key comment_content when webmention has no content.
  • Add uninstall method to clean up plugin options on deletion.
  • Add webmention_form_submit_text filter to customize the “Ping me!” button text.
  • Fix distorted emoji display when avatars are disabled in Discussion settings.
  • Add basic styling for webmention form input and button elements.
  • Fix PHP 8 TypeError in parse_post_json when JSON is invalid.

5.5.0

  • Fix webmentions_disabled meta value not being deleted.
  • Add webmention_show_facepile setting.

5.4.1

  • Fix autoloader

5.4.0

  • Update yoast/phpunit-polyfills requirement from ^2.0 to ^3.0
  • Allow “Approve & Always Allow” only for Webmentions
  • Check for missing format property
  • Add single ClassicPress Unit Test
  • Use readme.md as main readme
  • Allow readme.md
  • Add setting for avatar store
  • Remove Webmention Dependence on Pings
  • Bump @wordpress/components from 28.13.0 to 29.4.0
  • Improve and simplify the plugin loader
  • Finally implement async processing

5.3.3

  • Load CSS also if comments are closed, because Webmentions ignore that setting
  • Improve version() method

5.3.2

  • Several small fixes

5.3.1

  • Fix fatal error

5.3.0

  • Fix facepiles for FSE themes
  • Fix remote Delete
  • Updated Readme and Assets

5.2.6

  • Fix null reference to comment_parent

5.2.5

  • Comment Walker was calling regular not html5 version of comment function when falling back.

5.2.4

  • Fix fatal PHP error

5.2.3

  • Fix pingback fallback (and happy birthday Matt https://ma.tt/2024/01/birthday-gift/)

5.2.2

  • Improve fallback handling to avoid “Anonymous” as post author

5.2.1

  • Fix issue where built in comment types were rejected

5.2.0

  • Do not bypass the spam filters
  • Support Source Update Notifications
  • Add in experimental Avatar Store

5.1.9

  • Replace comment_link only for Webmentions and only in the frontend

5.1.8

  • Replace comment_link only for Webmentions that have a source

5.1.7

  • Fix fatal error in WP parser

5.1.6

  • Allow variable to be null.

5.1.5

  • Bring back overflow option for facepile this time using the details tag
  • Add html link discovery for finding WordPress REST API
  • Load author page to find name/photo when only the URL is provided
  • Fix timezone issue where times were not properly converted into website time
  • Introduce webmentions_open function which determines if webmentions are open for a post. Currently a wrapper around pings_open
  • Misc minor fixes

5.1.4

  • Fixed: avoid enqueuing Webmention’s CSS stylesheet when it is not needed.
  • Fixed: threaded comments support.
  • Added: client URL validation.

5.1.3

  • Fix timezone issue causes exception

5.1.2

  • Remove built-in WordPress filtering in favor of plugin filtering of incoming webmentions.
  • If content is long and type is a mention, try to use the summary or name insteasd of full content as the display.
  • Fix issue where meta was overriding mf2
  • Improve JSON-LD handler

5.1.1

  • Several Parser/Handler fixes
  • Remove unnecessary loading of comments.php
  • Some Tool updates

5.1.0

  • Add mf2 author migration
  • Include spam and trash statuses for dupe check
  • Update tests and make u-url attrib optional for post-type discovery
  • Update dupe check
  • Set created at time only for new comments
  • Allow refreshing webmentions from the Bulk Actions menu
  • Remove Gravatar Cache
  • A lot of small improvements and fixes

5.0.0

  • Complete rewrite of the codebase
  • Introduce PHP namespaces
  • New parser which will fallback on the WordPress REST API, JSON-LD, or HTML meta tags if Microformats are not sufficient to render a comment.
  • New debugger/test tool for Webmention Parsing under Tools
  • Webmentions are no longer stored as comment type mention, but as custom comment types
  • New simplified presentation code, providing for optional custom templating in future

4.0.9

  • Fix XSS issue

4.0.8

  • Add onerror handling also for srcset ( props @florianbrinkmann for testing )

4.0.7

  • Re-add onerror handling for broken images ( props @snarfed )

4.0.6

  • Updated requirements

4.0.5

  • Remov Webmention_Notification class until proper tested/used

4.0.4

  • Update dependencies
  • Fix WordPress warnings

4.0.3

  • Move comment approve list and auto approve to the wp_allow_comment function called by the wp_new_comment function.
  • Minor fix to avatar function to account for the fact comments have an empty comment type

4.0.2

  • Cache in cases where stored avatar is a gravatar

4.0.1

  • Show Webmention form only if pings_open
  • Show Webmention form also if comments are disabled

4.0.0

  • Add settings for enabling Webmention support by public post type
  • Add setting for disabling sending media links…URLs attached to image, video, or audio tags
  • Switch from sending Webmentions to all URLs in post content to only ones with proper HTML markup
  • Support handling avatars if stored in meta
  • Support serving a local anonymous avatar if no email and cache whether there is a gravatar for a definable period of time
  • Store a Webmention protocol property in comment meta
  • Do not show Webmention headers if URL does not support Webmentions
  • Update Webmention meta template to use separate file which is shown on the edit comment screen
  • Minimum PHP version bumped to 5.4. WordPress currently has a minimum of 5.6 but we support back to version 4.9
  • For compatibility reasons, load a version of is_avatar_comment_type (introduced 5.1) and get_self_link (introduced 5.3) for use in this plugin
  • Improve all settings and template forms ( props @tw2113 )

3.8.11

  • Minor bug fix

3.8.10

  • Always enable Webmentions on basis that using plugin means you want Webmentions instead of using default pingback setting
  • Fix auto approve based on domain

3.8.9

  • Small HTML template changes

3.8.8

  • Added NodeInfo(2) support

3.8.7

  • Fixed default value of webmention_avatars on the settings page

3.8.6

  • Fixed default value of webmention_avatars

3.8.5

  • Set correct default value for the “Show comment form” setting

3.8.4

  • Store vouch property
  • Preliminary vouch support disabled by default. As Vouch is experimental can only be enabled by adding define( ‘WEBMENTION_VOUCH’, true )

3.8.3

  • Changed setting for avatar to consider null to be the same as yes

3.8.2

  • Fixed PHP issue

3.8.1

  • Updated GDPR text suggestion
  • Fixed old settings links
  • Made Webmention comment-form text customizable (#175)
  • Better handling of wp_add_privacy_policy_content call

Thanks Sebastian Greger

3.8.0

  • Added GDPR recommendation text
  • Implemented help tab
  • Form Improvements
  • Domain allowlist
  • Add avatar settings control
  • Text improvements

Thanks Sebastian Greger, David Shanske and Chris Aldrich

3.7.0

  • Added “threaded comments” support

3.6.0

  • Send delete Webmentions
  • Receive delete Webmentions

3.5.0

  • Added nicer HTML views for non API calls
  • Added german translations (thanks to @deponeWD)
  • Be sure to disable the old webmention-for-comments plugin

3.4.1

  • Add filter to allow setting of Webmention form text
  • Move register settings to init due new default options not being set if admin only
  • Add edit_webmention hook due comment array filtering
  • Display Webmention Meta on Edit Comment page

3.4.0

  • Added settings link
  • Added link to Homepage Webmention page
  • Enable pings for Homepage Webmentions

3.3.0

  • Add setting for homepage mentions (thanks @dshanske)
  • Remove deprecated functions due 4.8 release

3.2.1

  • moved endpoint discovery to functions.php
  • added missing i18n strings
  • removed polyfill

3.2.0

  • Enable option for page support
  • Allow custom post types to declare support for Webmentions as a feature which will enable pings.
  • Remove new meta properties from being added during preprocessing as these are added after Semantic Linkbacks Enhancement.
  • Move new meta properties to being built into Webmention code
  • Store Webmention source in comment meta but fall back to checking comment_author_url if not set.
  • Store Webmention creation time in comment meta as comment time is overridden by Semantic Linkbacks allowing to determine if a comment has been modified.

3.1.1

  • URLEncode/Decode source and target
  • Webmention Comment Type now declares support for avatars
  • Meta keys are now registered for webmention_target_url and webmention_target_fragment
  • Target URL is stored instead of derived from the permalink to ensure permanance
  • Target fragment is stored to support fragmentions. Can also suport comments when reply is to a comment.

3.1.0

  • added page support (server and client)
  • moved webmention_post_id filter to a global function (thanks @dshanske)
  • fixed https://wordpress.org/support/topic/form-for-entering-manual-pings-stays-on/
  • fixed some typos

3.0.1

  • Show endpoint discovery on every page again, to prevent several problems.

3.0.0

  • Plugin refactored to use API infrastructure.
  • Visiting the endpoint in a web browser now returns a Webmention form.
  • Plugin now compliant with draft specification although remains synchronous.
  • Deprecation of webmention_title and webmention_content filters in favor of a single targeted Webmention comment data filter.
  • webmention_post_send action now fires on all attempts to send a Webmention instead of only successful ones. Allows for logging functions to be added.
  • Supports adding additional parameters when sending Webmentions
  • Fix incompatibility with Ultimate Category Excluder plugin.

2.6.0

  • removed duplicate request for HTML via get_meta_tags
  • refactoring
  • limits to same domain

2.5.0

  • add salmon/crossposting-extension support (props @singpolyma)
  • disable self-pings via settings
  • do not unapprove already-approved Webmention (props @singpolyma)
  • some code improvements

2.4.0

  • switched to WordPress Coding Standard

2.3.4

  • some fixes and improvements

2.3.3

2.3.2

  • added more params to webmention_post_send (props to @snarfed)
  • removed rescedule of Webmentions (props to @snarfed)

2.3.1

  • use error-code 403 instead of 500 if Pingbacks/Webmentions are disabled for a post (thanks @snarfed)
  • added webmention_comment_parent filter

2.3.0

  • nicer title and content discovery
  • added post-id to webmention_links filter
  • improved publish_post_hook function
  • disabled flood control
  • nicer response value
  • some more filters/actions
  • added a default request “action” to be more flexible and to handle more than mentions on posts and pages
  • a lot of small fixes

2.2.0

  • prevent selfpings
  • added support for https and http
  • optimized some methods

2.1.4

  • fixed pseudo hook

2.1.3

  • fixed some warnings

2.1.2

  • now ready to use in a bundle

2.1.1

  • nicer feedback for the Webmention endpoint

2.1.0

  • nicer title and content discovery
  • added post-id to webmention_links filter
  • improved publish_post_hook function

2.0.1

  • small fixes
  • nicer excerpt extractor

2.0.0

initial release

Plugin Website
Visit website

Version:
5.7.0
Last Updated
March 30, 2026
Active Installs
900
Requires
WordPress 6.2
Tested Up To
WordPress 7.0
Requires PHP
7.2

Share Post

Join our newsletter.

Get insights into what’s happening at ChangelogWP right in your inbox. We don’t believe in spam.