=== Nmedia Wordpress Member Conversation ===
Contributors: nmedia
Donate link: http://www.najeebmedia.com/donate/
Tags: private messaging, member conversation, internal messages, user messaging, direct messages
Requires at least: 3.5
Tested up to: 7.0
Stable tag: 2.2
License: GPLv2 and above
License URI: http://www.gnu.org/licenses/gpl-2.0.html

Simple Member Messaging System for WordPress Site.


== Description ==
NMedia Wordpress Member Conversation Plugin allow members to send and receive messages on any WordPress site. 
Lightning fast fronend UI. Setup in 5 seconds.

== Setup ==
* Create a page
* paste this shortocde: [nmconvo]
* Admin Settings: Dashboard -> WP Convo


== Features ==
* Ajax based conversation
* Users List Modal
* New conversation notification
* All conversations list in admin
* Multi Language supported
* Sanitization applied
* Responsive Design

[Demo & Detail](https://najeebmedia.com/wordpress-plugin/wordpress-front-end-member-private-message-with-file-attachment/)

== Pro Features ==
* Control communication by roles
* File Attachment
* File Type, Size Control
* User list sorting, searching, pagination by DataTabe API
* Lifetime updates
* Pro Support Access
* Email Notification Extended Control
* Email Message Customization


== Installation ==

1. Upload plugin directory to the `/wp-content/plugins/` directory
2. Activate the plugin through the 'Plugins' menu in WordPress
3. After activation, you can set options from `WP Convo` menu

== Frequently Asked Questions ==

= How to use this plugin for my page/post =
Just place this shortcode [nmconvo]

= Can I see Demo? =
[Yes Sure, Click here](http://filemanager.nmediahosting.com/wp-convo/)

= How can admin see conversations =
Yes

= Any Recommendation about design? =
You should have at least 500px wide space on page/post to render this.



== Screenshots ==

1. Option settings
2. Inbox
3. Create new message
4. Reply a message
5. All messages list in admin

== Changelog ==

= 2.2 July 28, 2026 =
* SECURITY FIX: Fixed broken access control allowing any logged-in user to read, reply to, or delete other members' private conversations by guessing/enumerating the conversation ID
* SECURITY FIX: Fixed SQL injection in conversation lookup, reply, and delete queries (unparameterized IDs)
* Compatibility: Tested with WordPress 7.0

= 2.1 May 25, 2019 =
* Tweaks: Remove variable form user role base function.

= 2.0 July 9, 2018 =
* Deprecated functions removed
* All new scripting
* Bootsrap with DataTables
* Fast UI

= 1.7 =
There was issue if Admin reply and then delete it, other user reply again to this then Admin only get notification all the time but can't see it. So it is fixed

= 1.6 =
now you can place new message alert anywhere in site using shortcode `[nm-convo-alertbox pageurl="http://domain.com/convopage_url"]`

= 1.5 =
multi language support is updated

= 1.4 =
douplaod.php and uploadify files have been removed and use wp core security

= 1.3 =
javascript bug is removed

= 1.2 =
Email notifcation feature is activated
unread message bug is removed

= 1.0 =
It is just born, will grow with time


== Upgrade Notice ==

1. It is very light plugin
2. We are working on more plugins to get our users more excited.
3. More options/controls will be given soon.