Here’s a roundup of the fixes we’ve shipped since Hotfix roundup: August 24–29, 2026.
Newspack
- On sites using WooCommerce Memberships, category, author, date and custom post type feeds served members-only articles in full. Those feeds now carry the restriction message instead. The main site feed and archive pages are unchanged, and publishers who use the option to skip restriction in RSS feeds keep their full-text feeds. (newspack@6.49.2)
- In the editor, clicking an author name or avatar in a Content Loop or Content Carousel block moved the editing area to that author’s archive page. Author names and avatars are now inert in the editor preview. On the front end they still link to author archives as before. (newspack-blocks@4.30.5)
- On sites with an app property connected in Google Analytics, the App tab in Insights rendered empty whenever that property was missing one of the custom dimensions Newspack registers. Reach and engagement figures now load, and only the cards that need a missing dimension stay empty. (newspack@6.49.1)
Sponsors
- On sites that list sponsors through a Content Loop or Content Carousel block, load more and infinite scroll returned nothing past the first page. Sponsors now keep loading beyond the first page. (newspack-sponsors@2.2.3)
Newsletters
- Bulk actions on the newsletters list could give a newsletter a public page for a user who is not allowed to publish it. That setting now takes the same permission as publishing, and bulk actions skip newsletters the user cannot change rather than counting them as done. (newspack-newsletters@3.40.1)
- On sites connected to Mailchimp, Newspack refreshed its cached copy of every audience in the account every ten minutes. It now does that only for audiences the site offers for subscription, including any with an enabled group or tag. The rest refresh once a day, and on demand when you open one. (newspack-newsletters@3.40.2)
Newspack Network
- Newspack Network downloads two kinds of image from other sites in the network: the featured image on a distributed post, and user avatars. Those addresses are now checked against private and reserved network ranges before the download, including after a redirect. Networks on private addressing can opt back in with a filter. (newspack-network@2.22.6)