InstaWP v3.25.0: Smarter Infrastructure, Easier Domains, and a Faster First Week
Added
⚡ Object Caching On by Default: New sites on entitled plans now launch with high-performance object caching already active. No manual setup needed.
⚡ CDN Cache Exclusions: Define URL patterns (cart, checkout, account pages, etc.) that are never cached at the edge. Dynamic pages stay dynamic.
⚡ PPU Invoice Reminder Email: Pay-per-use teams now receive an estimated invoice 2 days before their billing date, projected through the end of the cycle.
⚡ Domain Renewal Reminder Emails: Get notified before a registered domain auto-renews, using the registrant's contact details.
⚡ Post-Onboarding Product Tour: A guided dashboard tour launches after onboarding is complete, helping new users find their way around faster.
⚡ InstaWP Academy: Inline video tutorial links now appear on the site creation, snapshots, and billing pages.
Improved
⚡ Sites Page Empty State: Redesigned with clear Create / Import / AI Builder entry points for teams with no sites yet.
⚡ PHP Settings That Stick: The PHP config form now prefills with actual server values, and settings are re-applied automatically if your site moves to a new server.
⚡ New Site Defaults: New sites now default to PHP 8.2 and the latest WordPress (7.0).
⚡ Easier Domain Purchases: Removed PPU eligibility checks and upfront payment requirements when buying domains.
⚡ Smoother Credit Purchases: Clearer errors for missing payment methods, integrated add-card modal, instant balance updates, better duplicate-purchase protection, and paginated credit history.
⚡ Site Search in the URL: Search terms on the sites list are now reflected in the browser URL, so filtered views survive a refresh and can be shared.
⚡ Forgot-Password Page: Redesigned to match the new login card layout.
⚡ API Tokens Page: Simplified, cleaner token management table.
⚡ UI Polish: Updated domain-mapping modal styling and removed stale "new" badges from site edit navigation.
Fixed
⚡ SFTP Logins Failing for New Accounts: Accounts created after early May were missing a server group membership, breaking SFTP immediately after auth. Affected users fixed fleet-wide; new accounts are auto-corrected.
⚡ SSH Toggle Having No Effect: Enabling SSH from the SFTP/SSH page now correctly un-jails users on dedicated servers.
⚡ SFTP Broken After Server Reboots: SFTP jail mounts are now restored immediately at boot, not lost in a race condition.
⚡ "Auto Login to wp-admin" 404: Magic-login redirects with query strings now decode correctly and land on the right page.
⚡ Custom SMTP Connection Failures: A firewall bug blocking outbound ports 465/587 is fixed. Only port 25 remains blocked.
⚡ Redis Error Flashes: Brief object-cache hiccups no longer show visitors a fatal error page. The site gracefully falls back to the database.
⚡ PHP Timeout Settings Silently Ignored: max_execution_time / max_input_time values set from the dashboard were capped at 120s regardless of input. Per-site overrides now take full effect.
⚡ Legitimate Visitors Blocked on Membership Sites: The security scanner no longer rate-limits real users on Woffice, BuddyBoss, and similar sites that use login-redirect traffic patterns.
⚡ Restores of Sites with Huge User Bases: A reconciliation step that previously took 3.7 hours now completes in under a second.
⚡ Sites Page Blank for Live-Only Teams: Teams with only InstaWP Live sites now see their sites correctly instead of the onboarding empty state.
⚡ Custom-Named Sites Created as Temporary: Sites created with a custom name are now permanent when "permanent" is selected.
⚡ Site Creation Status Reverting: Out-of-order status updates can no longer flip a completed site back to "in progress."
⚡ Wrong Suffix Domain on Template/Snapshot Sites: Sites created from templates or snapshots now use the correct suffix domain consistently.
⚡ CDN Not Restored After Upgrade: CDN suspended for bandwidth overage is now automatically restored on plan upgrade.
⚡ CDN Statistics Accuracy: Fixed a date-range bug so bandwidth/request stats reflect the selected period.
⚡ Sites Keep Their Setup After Server Moves: Plan features, CDN origin, DNS, and suspension state are all correctly preserved when a site is migrated to a new server.
⚡ SSL Certificate Issuance: Fixed an edge case where Let's Encrypt orders failed due to a missing contact email.
⚡ Domain Purchase Reliability: Re-purchasing a deleted domain now works. Free credits apply correctly to domain purchases and renewals. Failed registrations are auto-refunded. Currency exchange-rate issue in domain pricing fixed.
⚡ Plugin Install from Signed URLs: Installing plugins/themes from signed S3/R2 zip URLs is no longer rejected.
⚡ PPU Trial Billing: Ended unintended trial periods so billing summaries reflect the correct period.
⚡ Site Transfers Across Billing Types: Transfers between legacy and PPU billing teams now handled correctly, with a clear message and visible transfer actions for legacy-plan users.
⚡ Password-Protect Site Modal: Fixed the Protect Site modal not working correctly.
⚡ Sites List Glitches: Fixed broken action buttons in the sites table and a stale team name showing after switching teams in another tab.
⚡ Reserved-Site Consistency: Sites with an expiry set can no longer be marked as reserved.
Security
⚡ Block User Enumeration (Site Tools): New toggle that blocks /wp-json/wp/v2/users (and its rest_route variant), preventing username harvesting without disabling the whole REST API.
⚡ Stronger Brute-Force Protection: Rate limiting for wp-login.php and XML-RPC is now keyed per site instead of per IP, so distributed credential-stuffing attacks are actually throttled.
Enterprise
⚡ WaaS: Archived Plans: Archived plans now move to a dedicated section with settings inputs disabled.
⚡ Portal: Custom Domain Reliability: De-duplicated edge domain registrations to prevent reload failures blocking custom-domain attachment on portal sites.
⚡ Operator: Server Tiers & Migration Picker: Server tier is now visible and editable on admin Servers/Sites lists. The migration destination picker is searchable by ID, IP, or size.