« Changelog History


Mautic v7.2.0 Release Notes

Release Date: 2026-06-02 // 6 days ago

  • 🚀 Welcome to Mautic 7.2.0 Release Candidate: Lynx Edition

    🚀 Mautic 7.2 is here! Today we are excited to announce the release of Mautic 7.2 Release Candidate.

    🚀 ⚠️ This is a Release Candidate pre-release and should only be used for testing purposes. DO NOT use this in a production environment.

    What's Changed

    🔨 🔧 Refactoring

    🤖 DevOps
    ⬆️ Dependencies
    🧑‍💻 Developer experience
    🚀 Campaigns

    ✨ Features and enhancements

    🏗 🍇 GrapesJS Builder
    💻 API
    • ✨ Enhance tag search, api and ui, to match descriptions as well. by @shinde-rahul in #16003
    🌐 Landing pages
    👣 Tracking
    • ↔ Integrate matomo-org/device-detector library for Bot identification by @escopecz in #15870
    • ➕ Add global defaults for preference center and UTM tracking parameters by @msoukhomlinov in #15905
    🍱 📁Assets
    📊 Reports
    👥 Contacts
    • ➕ Added LeadList::getDeleted() method by @fedys in #16093
    • 👌 Improve contact timeline readability with intuitive date grouping by @kuzmany in #15329
    • 🌲 Option to skip contact last active logging by @fedys in #16080
    📌 Dashboards
    • 🛠 Fix upcoming Emails widget on Dashboard fails to load due to query timeout by @rohitpavaskar in #16101
    🤖 DevOps
    🎨 User Experience / User Interface
    🌍 Segments
    • 👍 Segment filters support relative date up hours by @escopecz in #16135
    💌 Email
    🐎 🚄 Performance and optimization
    🏢 Companies

    🐛 Bugs

    🌍 Segments
    • Prevent deletion of segment while used in a campaign by @escopecz in #16013
    🔌 🌱 Plugin support
    • Remove skip_if_exist option from plugins (custom object) by @escopecz in #16008
    💌 Email
    • 🛠 Fix email signature missing when added by {signature} token by @escopecz in #15931
    🎨 User Experience / User Interface
    🌐 Landing pages
    📊 Reports
    👥 Contacts
    🔌 🌱 Plugin support
    🚀 Campaigns
    🏗 🍇 GrapesJS Builder
    • 🛠 Fix CKEditor license-key-missing in GrapesJS HTML email builder by @Copilot in #16191
    • 🛠 Fix TypeError when MJML theme contains <mj-preview> tag by @patrykgruszka in #16106
    👣 Tracking
    • Prevent page_hits with null data from being persisted to the db. by @escopecz in #16130

    🆕 New Contributors

    Full Changelog : 7.1.2...7.2.0-rc

    SHA1(7.2.0-rc.zip)= 60a0428753a92500424a23d071c045085c8f2304
    ⚡️ SHA1(7.2.0-rc-update.zip)= 40c53bd16690aba1c014b1be552a8843156586c1


Previous changes from v7.1.2

  • Announcing Mautic 7.1.2: Aludra Edition

    🚀 🔒 Security Release

    🚀 This release addresses several security vulnerabilities. We strongly advise updating your installation at your earliest convenience after performing a full backup and testing the upgrade in a staging environment.

    🔒 🔒 Security Fixes

    • CVE-2026-4776: SQL Injection in API Contact Filtering

    • CVE-2026-9557: SSRF in the Mautic Focus Component

    • CVE-2026-9558: Server-Side Template Injection (SSTI) in Theme Templates

    • CVE-2026-9559: Path Traversal via Campaign Import

    • CVE-2026-9808: Authorization Bypass in API v2 Endpoints

    • CVE-2026-9809: Stored Cross-Site Scripting (XSS) in Projects Component

    • CVE-2026-9811: Stored Cross-Site Scripting (XSS) in Project Option Selector

    ⚡️ 🤖 DevOps Updates

    • ⚡️ Update vulnerable Composer dependencies for 6.0 security phase (by @escopecz).

    What's Changed

    🐛 Bugs

    • ⬆️ Bumping CK editor libraries by @escopecz in #16074
    • Handling adding points to deleted contacts by @escopecz in #16073
    • ✅ Register mautic:phpunit:config command in test environment only by @fedys in #16104
    • 🛠 fix(grapesjs): avoid MJML reparse in HTML mode in source editor by @fujijin in #15971
    • ✅ Stabilizing a flaky test by @escopecz in #16134

    🆕 New Contributors

    🚀 💡 Release Team & Sponsors

    🚀 This release was made possible through the dedicated efforts of our community and supporters:

    SHA1(7.1.2.zip)= 6da6aa5e2ad41d3f1a1f07788d05fd185e2e0fb3
    ⚡️ SHA1(7.1.2-update.zip)= 584841094031c93229a9ebf144f92c34e35ffd26