v1.0.31
- Security (low): My Account > Waitlists matched signups by the account email as well as the account itself. WooCommerce does not verify an account email, so any logged-in customer could change theirs to a guest's address and then see and remove that guest's pending waitlist signups. Only signups made while logged in to that account show there now. A signup made as a guest before registering no longer appears in My Account; it still gets its restock email.