Leaky Paywall Updates: July 2026

20 releases went out in July, across the core plugin and 12 add-ons.

Security and reliability were the theme. Here’s what changed and why it matters for your site.

The highlights

Authorize.net transactions now carry fraud protection. Every transaction sent to Authorize.net now includes the customer’s IP address, so their fraud filters have more to work with. We also added webhook verification and clearer error messages (LP – Authorize.net 1.3.1 and 1.3.2).

A subscriber-facing bug in Article Countdown Nag is fixed. If your site uses tiered post limits (say, 10 posts a month on one tier, unlimited on another), subscribers on those limited tiers were seeing the countdown nag silently disappear, or worse, a negative number like “-3 Remaining.” Both are fixed. The nag now reflects each subscriber’s actual tier limit (LP – Article Countdown Nag 3.9.0).

Group Accounts gets a Tools tab and CSV export. Multi-group sites got a fix too: seat counts, owner lookups, and group status were pulling from any group instead of the specific one you were checking. That’s corrected (LP – Group Accounts 1.7.4).

Conditional Display Notice picked up six fixes, three of them security. Plugin cookies now carry Secure, HttpOnly, and SameSite attributes. Color values are validated as hex on save instead of accepting free-form text. Direct browser access to plugin PHP files is blocked. We also fixed an unbounded cookie that could grow indefinitely on high-traffic sites (now capped at 100 entries) and a PHP 8 fatal error triggered by malformed cookie data (LP – Conditional Display Notice 1.3.0).

Stripe Checkout no longer creates duplicate subscriptions on a level switch. When an existing subscriber changed levels, they were getting a second Stripe customer and a second subscription, while the old one kept billing in the background. Switching levels now updates the existing subscription in place with immediate prorated billing (Leaky Paywall 5.1.6).

Everything else, by plugin

Leaky Paywall (core), 5.1.4 – 5.1.6

• Content Viewed and Paywall Displayed events now record correctly for logged-in subscribers.
• We now check that a pending-cancel subscriber’s expiration date hasn’t actually passed before treating them as expired.
• Subscriber search performs better.
• The free registration flow now verifies a level is genuinely free before creating an account.
• Subscribers with a future-dated Stripe subscription schedule no longer flip to expired by mistake.
• We redesigned the admin new-subscriber email with clear sections: subscriber details, payment, attribution (IP and UTM), and quick links to the subscriber and transaction records.
• We now capture customer IP at transaction time, pass it to Stripe as metadata, and include it in Subscription Started events sent to Insights.

LP – Attribution Survey, 1.3.0

• Added a “No thanks” button with a 30-day dismiss, so it stops re-appearing on subscribers who decline.
• Added a “Thanks!” confirmation after submission.
• You can now set a delay before the survey shows: immediate, 5 seconds, 15 seconds, 30 seconds, or 1 minute.
• The modal now shows once per browser session instead of on every page load, and no longer appears over wp-admin for subscribers with editor or author roles.
• Form submissions redirect instead of risking a resubmission on refresh, and the “Other” text field is capped at 500 characters.

LP – Group Accounts, 1.7.4

• New “Group Accounts” tab under Leaky Paywall > Tools, with CSV export of every group and member.
• Group Created events now go to Leaky Paywall Insights.
• Member activation and removal are now timestamped, and a removed member’s former group ID is preserved so they can be tied back to their group in reports.

LP – Authorize.net, 1.3.1 – 1.3.2

• Added webhook verification for security.
• Payment status now updates correctly during successful renewals.
• Moved accept.js to proper WordPress script enqueueing.

LP – SimpleCirc, 2.0.3 – 2.0.4

• Fixed duplicate transactions with Authorize.net.
• The actual amount paid now syncs to SimpleCirc, not the static level price.
• Mid-term plan changes no longer add an extra term in SimpleCirc.
• New filter (leaky_paywall_simplecirc_matching_publication_ids) for sites with SimpleCirc accounts spanning more than one publication.

LP – Trials, 1.9.6

• Added a trial card to the Dashboard.
• Cleaner formatting for trial data on the transaction screen.

LP – Corporate Subscriptions, 1.9.1

• Better error messages on the registration form.
• Cleaner transaction data display.

LP – Double Opt In, 1.4.1

• Fixed pending status for PayPal subscribers.

LP – Content Auto Archiver (Timewall), 3.5.4

• Fixed settings row handling, plus security fixes.

LP – Kit, 1.2.0

• Fixed a bug where a subscriber upgrading from free to paid wasn’t added correctly.

Catch up on everything we’ve shipped

That’s July. As always, if you’re not sure whether an update affects your setup, reach out and we’ll walk through it with you.

Thanks for being a Leaky Paywall publisher.