From 19b3ea25ae8a477751e2c3528b3fd0b0463d2bb2 Mon Sep 17 00:00:00 2001
From: Tim Carr <tim@n7studios.co.uk>
Date: Mon, 20 Jul 2026 13:25:38 +0800
Subject: [PATCH] 3.3.6

---
 ACTIONS-FILTERS.md       | 30 ++++++------
 CHANGELOG.md             |  4 ++
 languages/convertkit.pot | 98 ++++++++++++++++++----------------------
 readme.txt               |  6 ++-
 wp-convertkit.php        |  4 +-
 5 files changed, 69 insertions(+), 73 deletions(-)

diff --git a/ACTIONS-FILTERS.md b/ACTIONS-FILTERS.md
index eb3fed9fb..1ff3aadd1 100644
--- a/ACTIONS-FILTERS.md
+++ b/ACTIONS-FILTERS.md
@@ -1106,7 +1106,7 @@ add_filter( 'convertkit_settings_broadcasts_get_defaults', function( $defaults )
 </pre>
 <h3 id="convertkit_settings_restrict_content_get_defaults">
 						convertkit_settings_restrict_content_get_defaults
-						<code>includes/class-convertkit-settings-restrict-content.php::164</code>
+						<code>includes/class-convertkit-settings-restrict-content.php::150</code>
 					</h3><h4>Overview</h4>
 						<p>The default settings, used when the ConvertKit Restrict Content Settings haven't been saved e.g. on a new installation.</p><h4>Parameters</h4>
 					<table>
@@ -1299,7 +1299,7 @@ add_filter( 'convertkit_wishlist_settings_get_defaults', function( $defaults ) {
 </pre>
 <h3 id="convertkit_output_restrict_content_get_resource_type">
 						convertkit_output_restrict_content_get_resource_type
-						<code>includes/class-convertkit-output-restrict-content.php::966</code>
+						<code>includes/class-convertkit-output-restrict-content.php::948</code>
 					</h3><h4>Overview</h4>
 						<p>Define the ConvertKit Resource Type that the visitor must be subscribed against to access this content, overriding the Post setting. Return false or an empty string to not restrict content.</p><h4>Parameters</h4>
 					<table>
@@ -1330,7 +1330,7 @@ add_filter( 'convertkit_output_restrict_content_get_resource_type', function( $r
 </pre>
 <h3 id="convertkit_output_restrict_content_get_resource_id">
 						convertkit_output_restrict_content_get_resource_id
-						<code>includes/class-convertkit-output-restrict-content.php::1004</code>
+						<code>includes/class-convertkit-output-restrict-content.php::986</code>
 					</h3><h4>Overview</h4>
 						<p>Define the ConvertKit Resource ID that the visitor must be subscribed against to access this content, overriding the Post setting. Return 0 to not restrict content.</p><h4>Parameters</h4>
 					<table>
@@ -1361,7 +1361,7 @@ add_filter( 'convertkit_output_restrict_content_get_resource_id', function( $res
 </pre>
 <h3 id="convertkit_output_restrict_content_content_preview">
 						convertkit_output_restrict_content_content_preview
-						<code>includes/class-convertkit-output-restrict-content.php::1296</code>
+						<code>includes/class-convertkit-output-restrict-content.php::1222</code>
 					</h3><h4>Overview</h4>
 						<p>Define the output for the content preview when the visitor is not an authenticated subscriber.</p><h4>Parameters</h4>
 					<table>
@@ -1392,7 +1392,7 @@ add_filter( 'convertkit_output_restrict_content_content_preview', function( $con
 </pre>
 <h3 id="convertkit_output_restrict_content_call_to_action">
 						convertkit_output_restrict_content_call_to_action
-						<code>includes/class-convertkit-output-restrict-content.php::1310</code>
+						<code>includes/class-convertkit-output-restrict-content.php::1236</code>
 					</h3><h4>Overview</h4>
 						<p>Define the output for the call to action, displayed below the content preview, when the visitor is not an authenticated subscriber.</p><h4>Parameters</h4>
 					<table>
@@ -1423,7 +1423,7 @@ add_filter( 'convertkit_output_restrict_content_call_to_action', function( $call
 </pre>
 <h3 id="convertkit_output_restrict_content_container_css_classes">
 						convertkit_output_restrict_content_container_css_classes
-						<code>includes/class-convertkit-output-restrict-content.php::1323</code>
+						<code>includes/class-convertkit-output-restrict-content.php::1249</code>
 					</h3><h4>Overview</h4>
 						<p>Define the container CSS classes to wrap the content preview and call to action within.</p><h4>Parameters</h4>
 					<table>
@@ -1454,7 +1454,7 @@ add_filter( 'convertkit_output_restrict_content_container_css_classes', function
 </pre>
 <h3 id="convertkit_output_restrict_content_is_crawler_permitted_user_agent_ip_ranges">
 						convertkit_output_restrict_content_is_crawler_permitted_user_agent_ip_ranges
-						<code>includes/class-convertkit-output-restrict-content.php::2051</code>
+						<code>includes/class-convertkit-output-restrict-content.php::1977</code>
 					</h3><h4>Overview</h4>
 						<p>Define the permitted user agents and their IP address ranges that can bypass Restrict Content to index content for search engines.</p><h4>Parameters</h4>
 					<table>
@@ -1481,7 +1481,7 @@ add_filter( 'convertkit_output_restrict_content_is_crawler_permitted_user_agent_
 </pre>
 <h3 id="convertkit_output_page_takeover_landing_page_id">
 						convertkit_output_page_takeover_landing_page_id
-						<code>includes/class-convertkit-output.php::279</code>
+						<code>includes/class-convertkit-output.php::222</code>
 					</h3><h4>Overview</h4>
 						<p>Define the ConvertKit Landing Page ID to display for the given Post ID, overriding the Post settings. Return false to not display any ConvertKit Landing Page.</p><h4>Parameters</h4>
 					<table>
@@ -1512,7 +1512,7 @@ add_filter( 'convertkit_output_page_takeover_landing_page_id', function( $landin
 </pre>
 <h3 id="convertkit_output_append_form_to_content_form_id">
 						convertkit_output_append_form_to_content_form_id
-						<code>includes/class-convertkit-output.php::359</code>
+						<code>includes/class-convertkit-output.php::302</code>
 					</h3><h4>Overview</h4>
 						<p>Define the ConvertKit Form ID to display for the given Post ID, overriding the Post, Category or Plugin settings. Return false to not display any ConvertKit Form.</p><h4>Parameters</h4>
 					<table>
@@ -1543,7 +1543,7 @@ add_filter( 'convertkit_output_append_form_to_content_form_id', function( $form_
 </pre>
 <h3 id="convertkit_frontend_append_form">
 						convertkit_frontend_append_form
-						<code>includes/class-convertkit-output.php::470</code>
+						<code>includes/class-convertkit-output.php::413</code>
 					</h3><h4>Overview</h4>
 						<p>Filter the Post's Content, which includes a ConvertKit Form, immediately before it is output.</p><h4>Parameters</h4>
 					<table>
@@ -1586,7 +1586,7 @@ add_filter( 'convertkit_frontend_append_form', function( $content, $form, $post_
 </pre>
 <h3 id="convertkit_output_scripts_footer">
 						convertkit_output_scripts_footer
-						<code>includes/class-convertkit-output.php::934</code>
+						<code>includes/class-convertkit-output.php::875</code>
 					</h3><h4>Overview</h4>
 						<p>Define an array of scripts to output in the footer of the WordPress site.</p><h4>Parameters</h4>
 					<table>
@@ -1613,7 +1613,7 @@ add_filter( 'convertkit_output_scripts_footer', function( $scripts ) {
 </pre>
 <h3 id="convertkit_output_script_footer">
 						convertkit_output_script_footer
-						<code>includes/class-convertkit-output.php::953</code>
+						<code>includes/class-convertkit-output.php::894</code>
 					</h3><h4>Overview</h4>
 						<p>Filter the form <script> key/value pairs immediately before the script is output.</p><h4>Parameters</h4>
 					<table>
@@ -2460,7 +2460,7 @@ do_action( 'convertkit_gutenberg_enqueue_styles_editor_and_frontend', function(
 </pre>
 <h3 id="convertkit_restrict_content_register_content_filter">
 						convertkit_restrict_content_register_content_filter
-						<code>includes/class-convertkit-output-restrict-content.php::591</code>
+						<code>includes/class-convertkit-output-restrict-content.php::573</code>
 					</h3><h4>Parameters</h4>
 					<table>
 						<thead>
@@ -2480,7 +2480,7 @@ do_action( 'convertkit_restrict_content_register_content_filter', function(  ) {
 </pre>
 <h3 id="convertkit_output_output_form">
 						convertkit_output_output_form
-						<code>includes/class-convertkit-output.php::234</code>
+						<code>includes/class-convertkit-output.php::177</code>
 					</h3><h4>Parameters</h4>
 					<table>
 						<thead>
@@ -2500,7 +2500,7 @@ do_action( 'convertkit_output_output_form', function(  ) {
 </pre>
 <h3 id="convertkit_output_landing_page_before">
 						convertkit_output_landing_page_before
-						<code>includes/class-convertkit-output.php::315</code>
+						<code>includes/class-convertkit-output.php::258</code>
 					</h3><h4>Overview</h4>
 						<p>Perform any actions immediately prior to outputting the Landing Page. Caching and minification Plugins may need to hook here to prevent CSS / JS minification and lazy loading images, which can interfere with Landing Pages.</p><h4>Parameters</h4>
 					<table>
diff --git a/CHANGELOG.md b/CHANGELOG.md
index b397b3638..0ceb56705 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,7 @@
+### 3.3.6 2026-07-20
+* Fix: Member Content: Tags: Require Login is now always enabled, to ensure subscribers authenticate to access gated content
+* Removed: Kit Forms: Store subscriber ID as cookie when submitting an embedded Kit form
+
 ### 3.3.5 2026-07-07
 * Added: Settings: Tools: Kit Legacy Forms: Migrate from legacy forms to newer Kit forms
 * Fix: Settings: Tools: Migrations: Use `form` instead of `id` for [convertkit_form] shortcode when migrating from third party form Plugins
diff --git a/languages/convertkit.pot b/languages/convertkit.pot
index b3c01bb8d..950473326 100644
--- a/languages/convertkit.pot
+++ b/languages/convertkit.pot
@@ -2,14 +2,14 @@
 # This file is distributed under the GPLv3 or later.
 msgid ""
 msgstr ""
-"Project-Id-Version: Kit (formerly ConvertKit) 3.3.5\n"
+"Project-Id-Version: Kit (formerly ConvertKit) 3.3.6\n"
 "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/convertkit\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
-"POT-Creation-Date: 2026-07-07T07:55:47+00:00\n"
+"POT-Creation-Date: 2026-07-20T05:25:24+00:00\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "X-Generator: WP-CLI 2.12.0\n"
 "X-Domain: convertkit\n"
@@ -734,126 +734,118 @@ msgstr ""
 
 #: admin/section/class-convertkit-admin-section-restrict-content.php:110
 #: admin/section/class-convertkit-admin-section-restrict-content.php:156
-#: admin/section/class-convertkit-admin-section-restrict-content.php:232
+#: admin/section/class-convertkit-admin-section-restrict-content.php:218
 msgid "No Access Text"
 msgstr ""
 
 #: admin/section/class-convertkit-admin-section-restrict-content.php:118
 #: admin/section/class-convertkit-admin-section-restrict-content.php:164
-#: admin/section/class-convertkit-admin-section-restrict-content.php:240
+#: admin/section/class-convertkit-admin-section-restrict-content.php:226
 msgid "The text to display for a subscriber who authenticates via the login link, but is not subscribed."
 msgstr ""
 
 #: admin/section/class-convertkit-admin-section-restrict-content.php:126
-#: admin/section/class-convertkit-admin-section-restrict-content.php:202
+#: admin/section/class-convertkit-admin-section-restrict-content.php:188
 msgid "Subscribe Heading"
 msgstr ""
 
 #: admin/section/class-convertkit-admin-section-restrict-content.php:134
-#: admin/section/class-convertkit-admin-section-restrict-content.php:210
+#: admin/section/class-convertkit-admin-section-restrict-content.php:196
 msgid "Displays text in a heading explaining why the content is only available to subscribers."
 msgstr ""
 
 #: admin/section/class-convertkit-admin-section-restrict-content.php:141
-#: admin/section/class-convertkit-admin-section-restrict-content.php:217
+#: admin/section/class-convertkit-admin-section-restrict-content.php:203
 msgid "Subscribe Text"
 msgstr ""
 
 #: admin/section/class-convertkit-admin-section-restrict-content.php:149
-#: admin/section/class-convertkit-admin-section-restrict-content.php:225
+#: admin/section/class-convertkit-admin-section-restrict-content.php:211
 msgid "Displays text explaining why the content is only available to subscribers."
 msgstr ""
 
-#: admin/section/class-convertkit-admin-section-restrict-content.php:171
-msgid "Require Login"
-msgstr ""
-
-#: admin/section/class-convertkit-admin-section-restrict-content.php:178
-msgid "When checked, subscribers are sent a code in an email to login after being subscribed and tagged."
-msgstr ""
-
-#: admin/section/class-convertkit-admin-section-restrict-content.php:186
+#: admin/section/class-convertkit-admin-section-restrict-content.php:172
 msgid "Subscribe Button Label"
 msgstr ""
 
-#: admin/section/class-convertkit-admin-section-restrict-content.php:194
+#: admin/section/class-convertkit-admin-section-restrict-content.php:180
 msgid "The text to display for the call to action button to subscribe."
 msgstr ""
 
-#: admin/section/class-convertkit-admin-section-restrict-content.php:248
+#: admin/section/class-convertkit-admin-section-restrict-content.php:234
 msgid "Email Text"
 msgstr ""
 
-#: admin/section/class-convertkit-admin-section-restrict-content.php:256
+#: admin/section/class-convertkit-admin-section-restrict-content.php:242
 msgid "The text to display asking if the subscriber has already subscribed."
 msgstr ""
 
-#: admin/section/class-convertkit-admin-section-restrict-content.php:263
+#: admin/section/class-convertkit-admin-section-restrict-content.php:249
 msgid "Email Heading"
 msgstr ""
 
-#: admin/section/class-convertkit-admin-section-restrict-content.php:271
+#: admin/section/class-convertkit-admin-section-restrict-content.php:257
 msgid "The heading to display above the email field, directing the subscriber to log in."
 msgstr ""
 
-#: admin/section/class-convertkit-admin-section-restrict-content.php:278
+#: admin/section/class-convertkit-admin-section-restrict-content.php:264
 msgid "Email Field Description"
 msgstr ""
 
-#: admin/section/class-convertkit-admin-section-restrict-content.php:286
+#: admin/section/class-convertkit-admin-section-restrict-content.php:272
 msgid "The text to display below the email field, explaining the subscriber will receive a code by email."
 msgstr ""
 
-#: admin/section/class-convertkit-admin-section-restrict-content.php:293
+#: admin/section/class-convertkit-admin-section-restrict-content.php:279
 msgid "Email Button Label"
 msgstr ""
 
-#: admin/section/class-convertkit-admin-section-restrict-content.php:301
+#: admin/section/class-convertkit-admin-section-restrict-content.php:287
 msgid "The text to display for the button to submit the subscriber's email address and receive a login link to access the member-only content."
 msgstr ""
 
-#: admin/section/class-convertkit-admin-section-restrict-content.php:308
+#: admin/section/class-convertkit-admin-section-restrict-content.php:294
 msgid "Email Check Heading"
 msgstr ""
 
-#: admin/section/class-convertkit-admin-section-restrict-content.php:316
+#: admin/section/class-convertkit-admin-section-restrict-content.php:302
 msgid "The heading to display telling the subscriber an email with a log in code was just sent."
 msgstr ""
 
-#: admin/section/class-convertkit-admin-section-restrict-content.php:323
+#: admin/section/class-convertkit-admin-section-restrict-content.php:309
 msgid "Email Check Text"
 msgstr ""
 
-#: admin/section/class-convertkit-admin-section-restrict-content.php:331
+#: admin/section/class-convertkit-admin-section-restrict-content.php:317
 msgid "The text to display instructing the subscriber to check their email for the login link that was sent."
 msgstr ""
 
-#: admin/section/class-convertkit-admin-section-restrict-content.php:338
+#: admin/section/class-convertkit-admin-section-restrict-content.php:324
 msgid "Container CSS Classes"
 msgstr ""
 
-#: admin/section/class-convertkit-admin-section-restrict-content.php:346
+#: admin/section/class-convertkit-admin-section-restrict-content.php:332
 msgid "Optional CSS classes to apply to the container wrapping the content preview and call to action for non-authenticated subscribers."
 msgstr ""
 
-#: admin/section/class-convertkit-admin-section-restrict-content.php:361
+#: admin/section/class-convertkit-admin-section-restrict-content.php:347
 msgid "Defines the text and button labels to display when a Page, Post or Custom Post has its Member Content setting defined."
 msgstr ""
 
-#: admin/section/class-convertkit-admin-section-restrict-content.php:374
+#: admin/section/class-convertkit-admin-section-restrict-content.php:360
 msgid "Defines settings when a Page, Post or Custom Post type has its member content setting set to a Kit form."
 msgstr ""
 
-#: admin/section/class-convertkit-admin-section-restrict-content.php:387
+#: admin/section/class-convertkit-admin-section-restrict-content.php:373
 msgid "Defines settings when a Page, Post or Custom Post type has its member content setting set to a Kit product."
 msgstr ""
 
-#: admin/section/class-convertkit-admin-section-restrict-content.php:401
+#: admin/section/class-convertkit-admin-section-restrict-content.php:387
 msgid "Defines settings when a Page, Post or Custom Post type has its member content setting set to a Kit tag."
 msgstr ""
 
 #. translators: 1: General settings screen link, 2: Closing link tag
-#: admin/section/class-convertkit-admin-section-restrict-content.php:413
+#: admin/section/class-convertkit-admin-section-restrict-content.php:399
 #, php-format
 msgid "Looking for reCAPTCHA settings? They can now be found in the %1$sGeneral settings screen%2$s."
 msgstr ""
@@ -1470,7 +1462,7 @@ msgid "The text to display for the button."
 msgstr ""
 
 #: includes/blocks/class-convertkit-block-form-trigger.php:317
-#: includes/class-convertkit-settings-restrict-content.php:147
+#: includes/class-convertkit-settings-restrict-content.php:133
 #: includes/integrations/contactform7/class-convertkit-contactform7-admin-section.php:84
 #: includes/integrations/forminator/class-convertkit-forminator-admin-section.php:71
 #: includes/integrations/wishlist/class-convertkit-wishlist-admin-section.php:66
@@ -1687,59 +1679,55 @@ msgstr ""
 msgid "Kit Product ID %s does not exist on Kit."
 msgstr ""
 
-#: includes/class-convertkit-settings-restrict-content.php:133
-#: includes/class-convertkit-settings-restrict-content.php:144
+#: includes/class-convertkit-settings-restrict-content.php:120
+#: includes/class-convertkit-settings-restrict-content.php:130
 msgid "Your account does not have access to this content. Please use the form above to subscribe."
 msgstr ""
 
-#: includes/class-convertkit-settings-restrict-content.php:136
+#: includes/class-convertkit-settings-restrict-content.php:123
 msgid "Read this post with a premium subscription"
 msgstr ""
 
-#: includes/class-convertkit-settings-restrict-content.php:137
+#: includes/class-convertkit-settings-restrict-content.php:124
 msgid "This post is only available to premium subscribers. Join today to get access to all posts."
 msgstr ""
 
-#: includes/class-convertkit-settings-restrict-content.php:138
+#: includes/class-convertkit-settings-restrict-content.php:125
 msgid "Your account does not have access to this content. Please use the button above to purchase, or enter the email address you used to purchase the product."
 msgstr ""
 
-#: includes/class-convertkit-settings-restrict-content.php:141
+#: includes/class-convertkit-settings-restrict-content.php:128
 msgid "Subscribe to keep reading"
 msgstr ""
 
-#: includes/class-convertkit-settings-restrict-content.php:142
+#: includes/class-convertkit-settings-restrict-content.php:129
 msgid "This post is free to read but only available to subscribers. Join today to get access to all posts."
 msgstr ""
 
-#: includes/class-convertkit-settings-restrict-content.php:148
+#: includes/class-convertkit-settings-restrict-content.php:134
 msgid "Already subscribed?"
 msgstr ""
 
-#: includes/class-convertkit-settings-restrict-content.php:149
+#: includes/class-convertkit-settings-restrict-content.php:135
 msgid "Log in"
 msgstr ""
 
-#: includes/class-convertkit-settings-restrict-content.php:150
+#: includes/class-convertkit-settings-restrict-content.php:136
 msgid "Log in to read this post"
 msgstr ""
 
-#: includes/class-convertkit-settings-restrict-content.php:151
+#: includes/class-convertkit-settings-restrict-content.php:137
 msgid "We'll email you a magic code to log you in without a password."
 msgstr ""
 
-#: includes/class-convertkit-settings-restrict-content.php:152
+#: includes/class-convertkit-settings-restrict-content.php:138
 msgid "We just emailed you a log in code"
 msgstr ""
 
-#: includes/class-convertkit-settings-restrict-content.php:153
+#: includes/class-convertkit-settings-restrict-content.php:139
 msgid "Enter the code below to finish logging in"
 msgstr ""
 
-#: includes/class-convertkit-subscriber.php:69
-msgid "Access Token not configured in Plugin Settings."
-msgstr ""
-
 #. translators: %1$s: PHP class name
 #: includes/class-wp-convertkit.php:398
 #, php-format
diff --git a/readme.txt b/readme.txt
index cd9385bb0..7c1b1fdce 100755
--- a/readme.txt
+++ b/readme.txt
@@ -5,7 +5,7 @@ Tags: email marketing, email newsletter, subscribers, landing page, membership
 Requires at least: 5.6
 Tested up to: 7.0
 Requires PHP: 7.1
-Stable tag: 3.3.5
+Stable tag: 3.3.6
 License: GPLv3 or later
 License URI: https://www.gnu.org/licenses/gpl-3.0.html
 
@@ -346,6 +346,10 @@ Please report security bugs found in the source code of the Kit (formerly Conver
 
 == Changelog ==
 
+### 3.3.6 2026-07-20
+* Fix: Member Content: Tags: Require Login is now always enabled, to ensure subscribers authenticate to access gated content
+* Removed: Kit Forms: Store subscriber ID as cookie when submitting an embedded Kit form
+
 ### 3.3.5 2026-07-07
 * Added: Settings: Tools: Kit Legacy Forms: Migrate from legacy forms to newer Kit forms
 * Fix: Settings: Tools: Migrations: Use `form` instead of `id` for [convertkit_form] shortcode when migrating from third party form Plugins
diff --git a/wp-convertkit.php b/wp-convertkit.php
index 1af93d377..53ca6e38a 100644
--- a/wp-convertkit.php
+++ b/wp-convertkit.php
@@ -9,7 +9,7 @@
  * Plugin Name: Kit (formerly ConvertKit)
  * Plugin URI: https://kit.com/
  * Description: Display Kit (formerly ConvertKit) email subscription forms, landing pages, products, broadcasts and more.
- * Version: 3.3.5
+ * Version: 3.3.6
  * Author: Kit
  * Author URI: https://kit.com/
  * Text Domain: convertkit
@@ -27,7 +27,7 @@
 define( 'CONVERTKIT_PLUGIN_FILE', plugin_basename( __FILE__ ) );
 define( 'CONVERTKIT_PLUGIN_URL', plugin_dir_url( __FILE__ ) );
 define( 'CONVERTKIT_PLUGIN_PATH', __DIR__ );
-define( 'CONVERTKIT_PLUGIN_VERSION', '3.3.5' );
+define( 'CONVERTKIT_PLUGIN_VERSION', '3.3.6' );
 define( 'CONVERTKIT_OAUTH_CLIENT_ID', 'HXZlOCj-K5r0ufuWCtyoyo3f688VmMAYSsKg1eGvw0Y' );
 define( 'CONVERTKIT_OAUTH_CLIENT_REDIRECT_URI', 'https://app.kit.com/wordpress/redirect' );