bbPress 2.6.21 is a security and maintenance release. Everyone running bbPress should update. 
This release strengthens access control across forum feeds, search results, BuddyPress activity, group forums, attachment requests, topic moves, and old topic and reply redirects. Inherited forum passwords now apply consistently when WordPress renders topic and reply content, and Akismet moderation requests now require HTTPS.
Maintenance fixes improve forum freshness and child-count queries, preserve metadata when database lookups fail, tighten route and user-profile handling, retain original dates and revision content during moderation and editing, and correct the administration reply destination controls. This release also repairs straightforward orphaned list items on WordPress 6.9 and newer, keeps generated bbPress excerpts available without duplicating content, adds the ugc relationship to topic and reply links, and refreshes administration icons for WordPress 7.2 and newer.
bbPress 2.6.21 still requires WordPress 6.0 or newer and PHP 7.2 or newer, and is tested through WordPress 7.1. The database version remains 264, so no database upgrade is required. The 2.6.21 upgrade notes cover compatibility details.
These changes are also in the 2.7 development branch, which remains 2.7.0-alpha-4. Thank you to antaloaalonso, arielmeadow, bor0, Clorith, dd32, deborah86, diddledani, lmstearn, netweb, noruzzaman, Otto42, Pebbleontheshore, r-a-y, rollybueno, sbask, shadow043, SirLouen, softglaze, terresquall, tharsheblows, and ton-ha for reports, patches, testing, and review.
Download bbPress 2.6.21 from WordPress.org, or update from your WordPress dashboard.
