Added

⚡WaaS Plan Change: WaaS site owners can now change their site plan directly from the dashboard, with downgrade restrictions based on disk usage and clear upgrade/downgrade warnings. (Works with both - Native & WooCommerce plugin).

⚡Plugin Management: Activate and deactivate WordPress plugins directly from the Manage Sites dashboard without logging into wp-admin.

⚡Uptime & WP Version Monitoring : The manage dashboard now shows a live uptime status column and a WordPress version update indicator when a newer version is available.

⚡Server Locations API: New GET /api/v2/server-locations endpoint for programmatic access to available server regions.

⚡Enhanced Bulk Update for Plugins/Themes: Parallel plugins & theme updates when bulk updating for 100s of websites. Email updates for success/failed updates.

Improved

⚡Invoice Warnings: A banner on the subscription page now alerts you when you have pending or unpaid Stripe invoices, with a link to the billing portal.

⚡Legacy WaaS Payment CSV: Download payment history as CSV for legacy WaaS (Wizards).

⚡Site Deletion: Enhanced deletion modal with CNAME tooltip. If a pre-deletion backup fails, deletion now retries without the backup instead of blocking.

⚡Redis Cache Flush: Object cache is now automatically flushed after a WordPress domain change to prevent stale cached data.

Fixed

⚡CDN Statistics: Fixed 500 error on the CDN stats page caused by Bunny API timeouts.

⚡Bunny SSL Retry: SSL certificates now automatically retry for mapped domains when the initial provisioning fails, instead of silently leaving the domain without SSL.

⚡Bot Detection Settings: Fixed sensitivity settings reverting to defaults when only some detectors were updated.

⚡Bulk Update Race Condition: Fixed a race condition that could leave bulk operations stuck in "in-progress" status.

⚡Subscription Sync: Subscription status now properly syncs to "canceled" after a Stripe cancellation.

⚡Payment Escalation: Fixed exact-day match in payment failure escalation that was missing some users.

⚡Hosting Settings Page: Fixed page crash when navigating to hosting settings without site detail data.

⚡WordPress Version Cache: Fixed caching of null WordPress version when the API check fails temporarily.

⚡Cancellation Email: Cancellation emails are no longer sent to users who don't have a subscription.

⚡Payment History: Fixed site filter not applying when navigating to payment history, and blank domain column in payment history rows.

⚡Template Deletion Backups: Deletion backups are now correctly created for template and demo sites in queue jobs.

⚡Migration Fixes: Fixed push migration User-Agent header, E2E-to-pull conversion status tracking, sidebar closing before finalization completes, and finalization race conditions.

⚡Support Ticket Drafts: Draft and internal note threads no longer appear in support ticket API responses.

⚡WaaS Ownership: Fixed legacy WaaS (Wizard) missing team ownership checks, allowing unauthorized access.

⚡Account Deletion Tip: Updated tooltip to reflect that self-service account deletion is not available.

⚡Migration Security : Improved database transfer reliability, wp-config sanitization after migration, and connect-helpers response consistency (v0.1.2.8–v0.1.3.0).

⚡SQL Migration Safety: Fixed truncated SQL responses from corrupting db.sql during site migrations on the server.

🔌Plugin Reconnection: Fixed site reconnection failure when API key exists but connect ID is missing (v0.1.2.9).

⚡ - InstaWP App | 🔌 - Connect Plugin

Added

⚡Support Tickets: Native in-app support ticket portal replacing the Crisp chat widget. Create tickets, attach files, and track status directly from your dashboard.

⚡InstaWP CLI: New CLI token type and V2 run-cmd endpoint for programmatic site management from the command line. https://github.com/InstaWP/cli

⚡Domain Mapping Diagnostics: When domain mapping fails, you now see clear, actionable error messages (DNS misconfiguration, hostname conflicts) instead of a silent failure.

⚡Guest OTP Verification: Shared snapshot and template launch pages now require email OTP verification, with a one-site-per-guest limit for abuse prevention.

⚡CDN Static Asset Caching for Logged-In Users: CSS, JS, images, and fonts now stay cached via Bunny CDN even when users are logged into WordPress. Only dynamic PHP pages bypass cache.

⚡MCP & Local Mount Mount Bypass: /insta-mcp and /insta-mount endpoints now bypass Bunny Shield edge rules so Claude Code MCP connections and WebDAV mounts work through Shield.

⚡WaaS Payment History Filter: Filter payment history by individual WaaS site/order.

🔌Hide Account Info — New CONNECT_HIDE_ACCOUNT_INFO constant hides the connected account email and team name from the plugin UI — useful for agencies who don't want clients to see account details.

⚡PHP 8.5 & WordPress 6.9.x Support: Added across the platform.

Improved

⚡Site Upgrade Modal — Unified design between site create and site upgrade modals for a consistent experience.

⚡Free Sites Without Credit Card : New users can now create free-tier sites without adding a payment method first. Credit card is only required on upgrade.

⚡Onboarding Sidebar: Updated layout with dismiss button for the onboarding checklist.

⚡Max Execution Time: PHP max execution time cap raised from 120s to 300s.

Fixed

⚡"View Usage" 404: Fixed payment history "View Usage" returning 404 for specific accounts and PPU users on historical billing periods.

⚡Billing History: Fixed status sync bugs causing empty status values, missing first billing cycle, and incorrect subscription invoice display.

⚡WaaS Orders in Billing: WaaS v3 orders and orders with soft-deleted products now correctly appear in the hosting sales tab.

⚡Payment Failure Handling: Payment failure escalation no longer skips users who have an active subscription. Legacy team flag is now correctly restored when a new Stripe subscription is created.

⚡WaaS Team Visibility: WaaS entries are now visible to all team members and admins, not just the creator.

⚡Webhook CSV Export: Webhook History CSV no longer downloads an empty file.

⚡Bunny CDN SSL: SSL certificates are now always provisioned when adding a custom domain, even when the hostname already exists on the pull zone.

⚡Shield Downgrade: DDoS protection type, WAF settings, and image optimizer are now correctly reset when downgrading Shield plans. Fixed 403 errors on the Shield page after plan downgrade.

⚡Preview Link: Site preview link now updates immediately after successful domain mapping.

⚡Email Fixes: Fixed broken unsubscribe links, onboarding email button rendering, and improved copy for welcome/site-expired/user-deleted templates.

⚡SQLite Heartbeat: Resolved "database locked" errors in connect heartbeat writes.

⚡Logout Error: Fixed 500 error on logout when notifications are enabled.

🔌Curl Error: Fixed "Class Curl not found" error in the InstaWP Connect plugin.

🔌Select2 403: Fixed 403 errors on Select2 remote AJAX fields by auto-embedding security nonce.

⚡Local Mount on Windows: Fixed directory listing not showing contents for Windows WebDAV clients.

⚡SFTP Long User Lists: Raised SFTP Match User line limit from 8,192 to 16,384 characters for servers with many users.

🔌Plugin Access Control (CWE-862) — Fixed broken access control in 4 AJAX handlers where any authenticated WordPress user (Subscriber/Author/Editor) could perform admin-only actions. Centralized all AJAX security checks into a single verify_ajax_request() method replacing 22 scattered nonce/capability blocks.

Hardening of server level security and monitoring across the fleet.

⚡ - InstaWP App | 🔌 - Connect Plugin

Added

⚡New post-signup survey to personalize the onboarding experience.

⚡Users can enable login and logout activity notifications from Profile > Notifications

⚡Set granular bot detection rules and response behavior directly from the Shield settings panel.

⚡Add Cloudflare Turnstile for faster, more privacy-friendly bot protection on snapshot and template launch pages.

Improved

⚡Optimized database queries and reduced API calls for faster dashboard loading.

⚡WaaS landing pages are now fully responsive on mobile devices.

⚡WaaS list view cleaned up: Removed unused bulk action checkboxes.

⚡Reset password page now correctly displays the brand logo.

⚡Template site lifetime display fixed to show accurate expiry times.

⚡Disk usage now initializes correctly for sites created from templates or snapshots.

Fixed

⚡Activity log alert rules dropdown now shows all 34 activity types.

⚡"Join Agency Program" button throwing "Attempt to read property on null" error.

⚡User role not applying correctly on demo sites created from templates.

⚡Pool site creation occasionally producing duplicate subdomain errors due to race condition.

⚡WaaS slug not staying unique when renaming a WaaS project.

⚡Clone and template operations incorrectly blocked by manual backup limits.

⚡2-way sync error fixes: Resolved sync failures affecting bidirectional content synchronization.

⚡429 rate limiting improvements: Better handling of too-many-requests errors during high-volume migration operations.

⚡Plugin file path double-slash fix: Resolved double-slash in file paths causing issues on certain hosting environments.

⚡Migration progress tracking via API: InstaCP migrations now report real-time progress updates to the dashboard.

⚡Migration file protection: Plugin now protects migration options file and adds source URL to status checks, fixing "Migration file does not exist" errors.

⚡Migration plugin install/configure failures now surface clear error messages instead of being silently hidden.

Added

⚡Revamped backup system - New backup architecture using snapshots eliminating production server load during backups.

⚡Real-time site monitoring - View live CPU, RAM, and PHP process stats for individual sites from the dashboard.

⚡Purge CDN Cache when content is updated in WP website via InstaWP Connect plugin → InstaCDN wiring.

⚡On-demand Backup - Take upto 3 backups per site on demand.

⚡Migration retry - Failed end-to-end migrations can now be retried with a single click, with clear error indicators showing what went wrong and whether retry is available.

Improved

⚡Allow WordPress REST API requests to pass through Shield protection without being blocked.

⚡Backups page redesigned with summary stats (total backups, storage used, type breakdown), status/date/server filters, and size and runtime columns.

⚡Graceful service reloads during PHP version updates, SSL updates and domain changes - no more brief 502 outages.

Fixed

⚡Demo site API query returning incorrect matches due to missing token validation and case-sensitive email comparison.

⚡Domains migration failing on legacy databases due to non-nullable foreign key constraints on existing rows.

⚡PHP warnings in migration scripts when files are deleted mid-transfer (fopen) or directories are invalid (ZipArchive).

⚡InstaMount server spikes caused by Windows client recursive directory scanning of wp-content/plugins.

⚡ManageWP Shield bypass toggle not persisting after page refresh (wrong JSON key for status check).

Added

⚡ CDN & Shield Management - Take full control of your site's performance with new CDN Settings API, cache configuration, and detailed statistics. Plus, Shield Management now includes WAF, DDoS protection, and Bot Detection to keep the bad guys out.

⚡ ManageWP & ShortPixel Bypass - These trusted services can now connect through Shield protection without breaking a sweat.

⚡ WaaS Demo Sites - Showcase your WaaS capabilities with dedicated demo sites that let your customers see the magic before they commit.

Improved

⚡ Credit Card Updates for WaaS - WaaS users on legacy plans can now update their payment method without jumping through hoops.

⚡ Billing Usage Pagination - Navigate through your billing history without endless scrolling.

⚡ Plan Features Display - Site Creation Modal now shows plan features more clearly so you know exactly what you're getting.

⚡ Scheduled Updates Restored - Back in the manage dashboard where it belongs.

⚡ PPU Backup Progress - Now you can actually see installation progress when creating sites from PPU backups.

⚡ Template & Snapshot Labels - Subpages now clearly show what type of content you're looking at.

🔌 Smarter Search-Replace - JSON-escaped URL handling means Breakdance and Elementor data survives migrations intact.

🔌 Dynamic Curl Timeouts - Large files now get the time they need without holding up smaller transfers.

🔌 Connect Plugin Slow Mode - Back and working for those who need a gentler approach.

Fixed

🔌 Migration Stuck at 90% - Infinite loops in fetch operations are now a thing of the past.

⚡ Expired Site Restoration - Sites that expired can now be restored properly again.

⚡ Billing & Subscription Fixes - Several improvements to keep your payments running smoothly.

⚡ Global SSH Keys - Keys added to Account Dashboard now actually show up where they should.

🔌 2-Way Sync Widget Changes - Pending events on staging now properly track widget modifications.

⚡ Suspended Sites Not Allowed Page - Sites created with Suspended AI no longer land on cryptic error pages.

⚡ Sandbox Site Expiration - Shared sites marked as reserved no longer expire incorrectly.

🔌 Elementor/Extendify CSS - Hardcoded asset paths now resolve correctly after migration.

⚡ WordPress Restore Admin Handling - Admin user management improved during restore operations.

🔌 Fixed blank progress bar and plugin install issues with application passwords.

⚡ WP Version Detection - Commands now return responses in the expected format.

🔌 CloudFlare Compatibility - Updated deprecated namespace in instawp-connect plugin.

🔌 Connect Plugin Cleanup - Fixed database queries and autoload handling for cleaner uninstalls.

⚡ - InstaWP App | 🔌 - Connect Plugin

Added

⚡ Smart Image Optimization - Image Optimizer slashes image size at warp speed so your site loads fast enough to impress even impatient squirrels. (Available on Pro plan and above)

⚡ System Cron - Migrate WordPress's built-in WP-Cron to system crontab for more reliable scheduled task execution

⚡ Private Servers – Dedicated server options now available for customers who need enhanced performance and isolation.

⚡ API Tokens – Bulk delete functionality with improved table selection for easier management.

⚡ Automatic CDN Cache Clear – InstaCDN cache now automatically clears when you clear your site cache from within the plugin.

Improved

⚡ Vulnerability scanner now powered by Wordfence feed for broader and more accurate threat detection.

⚡ InstaWP requests now recognize InstaShield for reliable health checks and monitoring.

⚡ Manage Page has been redesigned to match our global design for a consistent experience.

⚡ Clone Screen has a refreshed interface for smoother site cloning.

⚡ Site Versions panel has been completely redesigned with an improved UI.

⚡ Migration Menu has been moved up in the sidebar for easier access.

⚡ MCP Features – Enhanced patch_content tool reliability and added line-based content fetching.

Fixed

⚡ Legacy Plan Upgrades – Failed upgrades now properly revert to the previous plan instead of cancelling.

⚡ Proration Credits – Invalid credits from unpaid invoices are now prevented.

⚡ Cancelled Subscription Protection – Pending invoices are now voided when a subscription is cancelled to prevent unwanted charges.

⚡ WaaS UI – Various UI issues fixed and plan card height consistency improved.

⚡ Various UI/UX fixes and improvements across the platform.

⚡ Snapshot demo sites no longer show "Installation Complete" before restoration actually finishes.

⚡ Config manager no longer incorrectly redirects to the dashboard.

⚡ Automatic AI-based translations now working correctly for all languages.

⚡ MCP Connection – Fixed "Unauthorized" errors when connecting to ChatGPT and other AI tools for improved compatibility.

Added

⚡ WaaS V3 is now live and works seamlessly with v3 site plans. Watch Video

⚡ Importing a site backup now automatically inherits your default team's configuration.

⚡ You can now create sites using the snapshot_slug API.

Improved

⚡ Credit notes field added to credit history for easier tracking.

⚡ 3D Secure (3DS) payment support now available for credit purchases.

⚡ Redesigned clone site experience for a smoother workflow.

⚡ Usage page now features dynamic headings for better clarity.

⚡ Empty state added to the templates page during WaaS creation.

⚡ Enhanced background image on the Template/Snapshot launch page.

⚡ Bunny CDN bot detection now uses challenge mode by default for better protection.

Fixed

⚡ Payout callback has been fixed.

⚡ Credits can now be purchased without requiring a coupon code.

⚡ $0 invoice issue for fixed plan customers has been fixed.

⚡ Invoice titles now display correctly.

⚡ Demo site creation from templates now works correctly.

⚡ Snapshot site creation issues have been resolved.

⚡ Site imports no longer create temporary sites incorrectly.

⚡ PHP configuration now applies correctly on snapshot demo sites.

⚡ Sites created with instawp.xyz from snapshots now respect default configuration.

⚡ Site cloning option is now turned off by default on shared snapshots.

⚡ Email now displays correctly on shared snapshots when creating a demo site.

⚡ Template purchase flow has been fixed.

⚡ Remove addon and team member flows are now smoother.

⚡ Customer site restoration from backup now works correctly.

🔌 WooCommerce changes now sync correctly with 2-way sync.

Added

⚡ New Site Tools with 10 powerful tools to manage your WordPress sites directly.

⚡ Object Cache is now available for InstaWP sites on Plus plans and above.

⚡ Any InstaWP site can now act as a MCP Server and added to AI Chatbots like Claude or ChatGPT.

Watch Video

⚡ You can now select a plan when creating a site from a template or snapshot.

Improved

⚡ Site imports now accept separate file and database uploads (.zip or .sql files).

⚡ Enterprise and Fix plan users can now customize their template slug.

⚡ Pay-as-you-go customers (v3 billing) can now cancel subscriptions directly.

⚡ Clone button is now available for sites created from snapshots.

Fixed

⚡ Users with a blocked dashboard can now still access Account and Billing details.

⚡ PHP configuration not applying to Snapshot/Template sites has been fixed.

⚡ Pushing from LocalWP to InstaWP using WP CLI now works correctly.

⚡ Decimal display for total usage on the Billing details page has been corrected.

⚡ Configuration changes now apply without requiring a page refresh.

⚡ Various modal design improvements across the platform.

⚡ Coupon issues for legacy users have been resolved.

⚡ - InstaWP App | 🔌 - Connect Plugin

Added

⚡ InstaWP import site now contains DB and file zip separately.

⚡ Buyers can now directly download a Template site.

⚡ Template sellers can now allow guests to create sites in their account.

Improved

⚡ Template site creation flow has been changed.

⚡ Loading state has been added to the Payment History Page.

⚡ We have started sending monthly bandwidth-related emails to existing users.

⚡ Subscription Settings has been renamed to Invoice Settings.

Fixed

🔌 An issue related to Advanced Managed Sites > Uptime has been fixed.

⚡ Design breaking for the Usage dropdown in Swedish has been fixed.

⚡ An issue related to the Vulnerability scanner has been fixed.

⚡ An issue related to the Vulnerability scanner has been fixed.

⚡ The issue Template/Snapshot sync status not updating has been fixed.

⚡ Coupon code will now always be capitalized.

⚡ - InstaWP App | 🔌 - Connect Plugin

Added

⚡ Extra Credits can now be directly purchased from Billing details.

⚡ Discount offers or coupons can now be availed on Credit purchases.

⚡ Smart Cache has been added.

⚡ A new Date field has been added to the View Usage section.

⚡ An option to add a Site Language (130 options) is added to Configurations.

Improved

⚡ UI of the Configurations settings page is updated.

Fixed

⚡ An issue related to Site creation for new users has been fixed.

⚡ The Atarim integration sign not showing issue has been fixed.

⚡ - InstaWP App | 🔌 - Connect Plugin