Activating the plugin no longer writes anything to wp-content; the query-capture drop-in (db.php) is installed only by Enable profiler in Tools, and Disable profiler now removes it as well as the loader. Upgrading removes a db.php the profiler was never enabled for.
Scalability Pro is offered again for slow catalogue queries that also join product categories.

0.55.026 October 2026

Merge of 0.54.2 into the main release; no further change.

0.54.226 October 2026

The Compare tab now shows 50 saved runs at a time, with Older runs and Newer runs links, so it stays fast on sites with many runs; every run is still reachable and a saved run's Back link returns to its page.

0.54.126 October 2026

The profiler's MU loader carries a new version number, so sites refresh their installed copy with the direct-access fix.

0.54.026 October 2026

Merge of 0.53.1 into the main release; no further change.

0.53.126 October 2026

An analysis now starts even when WordPress will not save the synthetic test customer; only the logged-in customer pages are skipped, and the run says why.
The plugin-change notice now appears only on the Plugins, Updates and Performance Analysis screens, and can be dismissed.
The front-end analysis panels no longer show a "Powered by" credit or a link to superspeedyplugins.com.
Traffic recording now keeps its on/off state in the database instead of a file, and its uploads folder is closed to direct web access.
Admin actions now check permissions and their security token before reading any request values.

0.53.025 October 2026

A plugin-change notice could stop wp-admin pages loading; it no longer creates or edits users while showing.
When the synthetic test customer cannot be saved, a new analysis or cache check now shows WordPress's reason instead of breaking the page.

0.52.724 October 2026

A query run by WordPress core now names the code that asked for it, such as WP_Query::get_posts, instead of SSPA_Profiling_WPDB::query.
Findings measured on a page now store the URL that was measured, and the Overview's "Open the page" link uses it.

0.52.624 October 2026

Slow-query advice now reports every shape a query has, strongest evidence first, and blames SQL_CALC_FOUND_ROWS only when nothing else explains the query; a leading-wildcard LIKE is now named.
Queries that start with WITH (common table expressions) now get a query plan.
Stored SQL now shows % instead of a 64-character placeholder hash, so it can be pasted into a database client.

0.52.524 October 2026

Fixed "Profile this endpoint" getting HTTP 401 from REST endpoints that need a login, such as wc-analytics/reports; logged-in REST requests now carry the REST nonce.
"Profile this endpoint" now asks whether to send the request as a logged-out visitor or as you, preselected from how the endpoint was observed.
A refused request's result now says which HTTP status it got and, for 401 or 403 as a logged-out visitor, to send it as you, instead of "No detailed data is stored for this measurement because it was pruned."

0.52.424 October 2026

Each Overview insight measured on a page now links to that page (new tab) and to its page analysis on the Pages tab, where Re-run analyses it again.

0.52.324 October 2026

Fixed the Imports tab saying "No importer plugin is active on this site." while Super Speedy Imports Pro or Lite is active; the Import speed box now lists every active importer, and the separate Super Speedy Imports box only appears when there is an upgrade to offer.

0.52.224 October 2026

Fixed the checkout analysis failing with "place_order_failed - Billing Postcode / ZIP is a required field." on stores outside 24 countries that have no store postcode; the test address now has a real postcode and state for 89 countries.
The checkout analysis now stops before adding to the cart, with the outcome checkout_address_incomplete, when WooCommerce would reject the store address, and says to set the store postcode in WooCommerce > Settings > General.

0.52.122 October 2026

Internal test fixes; no change to the plugin's behaviour.

0.52.022 October 2026

Fixed every page, including wp-admin and the login page, returning HTTP 500 when the plugin's folder was renamed or deleted while a traffic collection or AJAX window was running; the traffic observer now stands down and sends X-SSPA-Traffic-Observer: inactive; plugin files missing.

0.51.022 October 2026

Added an Observed endpoints table to the AJAX tab: per endpoint, handler time, time outside the handler, time before the MU plugins load, CPU against wall time, and the plugins and theme that actually loaded, including the trimmed set of a Fast Ajax or Fast REST endpoint.
Added "Profile this endpoint" to the AJAX tab for observed GET and HEAD REST or admin-ajax endpoints: confirm the exact URL and the number of samples, and the result opens in the profile panel and is listed on the Pages tab.
Added environment evidence to every profiled request: OPcache state (full, disabled, restarts, and how many of the request's PHP files were cached), database connection and round-trip time, and object-cache round-trip time and drop-in, with warnings when OPcache is disabled, full or thrashing.
The Pages tab now lists one-page and endpoint analyses before a full analysis has been run.

0.50.022 October 2026

Fixed profiling of requests that do not load Performance Analysis itself, such as Fast Ajax or Fast REST endpoints and plugin organiser rules, which reported capture_missing for every sample.
A measurement that cannot be recorded because PHP raised an error now names that error instead of reporting capture_missing.

0.49.421 October 2026

Internal test fixes; no change to the plugin's behaviour.

0.49.321 October 2026

Internal test fixes; no change to the plugin's behaviour.

0.49.221 October 2026

Internal test fixes; no change to the plugin's behaviour.

0.49.121 October 2026

Internal test fixes; no change to the plugin's behaviour.

0.49.021 October 2026

Request a fix quote: on Performance Analysis screens you can send a page's Markdown report to Super Speedy Plugins for a fixed-price quote, after reading exactly what will be sent and ticking a consent box.
New WP-CLI commands wp sspa profiler enable and wp sspa profiler disable do the same as the Enable profiler and Disable profiler buttons on the Tools tab.

0.48.221 October 2026

Raw stream URLs in page reports and summaries no longer show email addresses, numbers or other private-looking parts of the path.

0.48.121 October 2026

The cache check no longer reports a time to first byte later than the request's total time.

0.48.021 October 2026

Compared with other sites now sits directly under Compare points in time instead of below the list of every analysis run.
Community figures on the Compare tab list your key pages first (home, shop, product category, product, checkout and search), with a Show all link for the other page types.
The History tab is now called Compare, and old History links and bookmarks still open it.
After an analysis and on the Compare tab, a panel asks whether to share this site's anonymised results automatically, with a button to be asked again in 24 hours.
The Share tab has a Don't ask me again option that stops that panel, and can be unticked to bring it back.
The Compare tab can load superspeedy.org's public figures for similar sites and for your active plugins, showing how many installations each figure comes from and how far it can be relied on.
Community figures are downloaded only when you press Load community figures, and the download sends nothing about your site.

0.47.021 October 2026

The fixed-price fix quote for a page whose time is mostly unattributed now appears only when that page takes 1,000 ms or more to generate.
Findings now offer Scalability Pro, Super Speedy Search, Super Speedy Filters, Super Speedy Imports or a fixed-price fix quote only when this site's measured evidence triggers them, after the finding and its free fix.
Each screen shows at most one primary and one secondary offer, and never offers a product the site already runs.
Every offer has a Don't show this again link, and a dismissed offer is left out of Markdown exports too.
Added an Imports tab showing your importer's measured run speed beside the published Super Speedy Imports benchmarks, with a button to install the free Super Speedy Imports Lite.
Offer descriptions and figures are quoted word for word from published Super Speedy Plugins pages, with the source link and the date they were checked.
Recommendations no longer link to a product, and their text now describes the free fix only.
The outdated PHP recommendation no longer claims PHP 8 is significantly faster.
Offer links carry only a fixed placement tag, never the site address, the user or the analysis.

0.46.121 October 2026

Plugin Check now completes its escaping check on the cache check code instead of stopping with an internal error.

0.46.021 October 2026

The Cache performance tab warns when visitors with a basket are served the anonymous cached page and nothing on it loads their own basket, so a mini-basket can show empty.
Without WooCommerce the cache check states and sends no basket requests.
Overview shows the cache summary and its link to Cache performance before any analysis has been completed.
Renamed an internal price-plugin list key so WordPress.org Plugin Check reports no warning for it.
The Cache performance tab summarises how many visitors with a basket and logged-in customers reached WordPress in the latest completed Traffic collection, or links to Traffic.
Added a Cache performance tab showing your cache system, the measured result for each audience and what published Super Speedy Plugins pages say about caching basket users and customers.
The Cache performance tab presents the caching implementation service and, where prices vary per visitor, Super Speedy Ajax Prices, with links tagged only by placement.
Overview now shows a two-line cache summary that opens the Cache performance tab.
Markdown exports mention the caching implementation service only when the cache evidence for that export supports it.
Added a cache check that measures anonymous visitors, visitors with a basket and logged-in customers separately and checks that no logged-in page reaches anonymous visitors.
Agents and WP-CLI receive the per-audience cache check, the cache system inventory and the leak check in the version 3 cache document.

0.45.020 October 2026

Page reports now lead with the dominant time, the measured culprits, attribution coverage and a next action, with PHP phases and sample ranges in the Markdown export.
Signed profiling requests measure process CPU against elapsed wall time.
Signed page measurements time bounded template loads and record header, footer, sidebar, template-part and loop boundaries.
Reports identify the largest untimed render gap with its surrounding events and template context.
Added an optional all-hook timing pass with exclusive callback wall time and source locations.
Page export headlines and component totals now come from the same measured request, keep sub-page paths and list profiler SQL separately as overhead.
Moved page-specific Plugin Impact to the summary with measured suspects preselected, and single-page sweeps can use the browser when loopbacks fail.
Added a separate opt-in raw HTTP stream diagnostic with caller timings and a response-header compatibility warning.

0.44.119 October 2026

Documented the remaining WordPress.org Plugin Check exceptions in the code.

0.44.019 October 2026

Added Clear all caches to the admin bar, with separate outcomes for the object cache, whole page cache and OPcache.
Fixed SG Optimizer page-cache clearing through its public purge API.
Removed the obsolete --output option from Traffic command help.
Reactivation migrates the old Traffic authority before enabling it, and fresh legacy workflow objects keep their launch window.
Upgrade failures appear on Performance Analysis screens and retry in wp-admin without interrupting visitor requests.
Analyse update/save preserves real recipients, while private test objects and deferred order emails use administrator recipients.
Interrupted workflows and write measurements clean up their owned objects, and stale profiler files are flagged in Health.
Browser evidence uses sanitised form arrays, and community uploads are restricted to Cloudflare R2 storage hosts.
WP-CLI exports use stdout; existing agent configurations must use the sspa/ ability names.
Traffic events use individual inserts and stop at the actual event ID limit.
Traffic collections spanning older releases may split keyed URL or visitor joins where input normalisation changed.
Removed the incomplete "Super Speedy caches" admin-bar action in both editions.
Escaped admin report fragments and moved History data and admin-bar styles to WordPress asset APIs.
Restricted ad-hoc profiling assets to measurement screens and controls.
Sanitised request fields and replaced browser response uploads with derived diagnostic evidence.
Moved Traffic authority and stop markers to uploads and protected foreign profiler-loader symlinks.
Renamed agent abilities to sspa/ and included traffic comparisons in discovery.
The wp.org cache shortcut clears only Performance Analysis transients.
Added Traffic privacy-policy guidance, JavaScript translations and complete chart library notices.
Traffic event batches name their table through a prepared identifier placeholder.
Analysis emails go to the site administrator and report measured send/queue time.
Edit/save workflows create and remove their own administrator-owned objects, using a separate zero-price stock product for orders.
Replacement mailers show an owner-naming warning when administrator recipient rewriting cannot be confirmed.
Prepared analysis and traffic SQL identifiers and values without changing query selection or ordering.
Limited query-plan index lookups to this site's prefixed tables.
Updated profiler Health guidance to use the explicit Tools controls.
Removed obsolete settings for the community rules service.
Updated the community sharing notice, privacy policy and terms links.
Removed UTM tracking parameters and an unsupported query-time claim from recommendations.
Traffic collection now stores its observer configuration as JSON.
Added explicit Enable profiler and Disable controls to Tools.
Analysis rules now come only from the bundled snapshot.
Aligned the stable tag and translation template with the plugin version.

0.43.416 October 2026

Removed the temporary db.php swap to keep connection-supplying database drop-ins in place during analysis.
Cache Impact Analysis now uses only per-request cache toggling and names the database drop-in owner when that prevents analysis.
Recovery and uninstall still restore drop-ins held by older versions without replacing another plugin's current file.

0.43.313 October 2026

Fixed invalid_http_call_evidence when an outbound HTTP call is recorded on the 404 page.
Component settings are included in automatic sharing only when the recorded consent covers them.

0.43.213 October 2026

Fixed invalid_component_state_evidence when a shared component has empty settings or state maps.

Showing the 40 most recent of 128 releases. View the full history