XSender - Bulk Email, SMS and WhatsApp Messaging Application v5.0 Nulled

Password/Key:

To view the content, you need to Sign In or Register.

*Nulled Version Added

XSender Version 5.0 [​

• New — Unified Inbox. Admin → Communication → Unified Inbox (also on Member panel). One screen for every reply across Email, SMS, and WhatsApp. WhatsApp-style bubbles, delivery ticks (pending / sent / delivered / read / failed), inline image thumbs, file chips, search, channel filter chips, unread-only toggle.
• New — Cross-Channel Reply. Reply to any conversation from the same box. System auto-picks the correct channel + gateway. Attach files, Enter to send, Shift+Enter for newline, optimistic bubble on submit.
• New — AI Reply Copilot. "Suggest reply" button inside every conversation. Returns 3 tone-varied suggestions (Formal / Friendly / Concise). One click fills the reply box. Uses your existing AI Models config (OpenAI / DeepSeek / Groq / Together AI) — no separate setup.
• New — Inbound Email Capture. Replies to your campaign emails route straight into Unified Inbox via HMAC-signed Reply-To addresses. Adapters bundled for SendGrid, Mailgun, Postmark, and any generic provider.
• New — Inbound SMS Capture. Provider webhooks capture inbound SMS into Unified Inbox. Adapters bundled for Twilio (native X-Twilio-Signature verification), Vonage, Infobip, MessageBird, and generic. Unknown senders auto-create a shell Contact.
• New — Auto-Reply Workflow Nodes. Automation → Workflows. Two new conditions: "Message contains keyword" (comma-separated list, ANY/ALL mode, case-sensitive toggle) and "Message matches regex" (case-insensitive by default). New action: "Send template reply" — pick any Email/SMS/WhatsApp template with {{first_name}} placeholder support.
• New — Tab-Title Unread Badge. Unified Inbox tab shows (3) Unified Inbox when new activity arrives while you're on another tab.
• New — Dark-Mode Inbox. Message bubbles, hover states, and thread body all adapt to the active theme.
• New — Auto-Poll for New Messages. Open conversations refresh every 15 seconds. Scroll position preserved while reading older messages.
• New — Mobile Inbox. Single-column layout below 992px with back navigation between list and thread.
• New — Plan Gate for Unified Inbox. Admin → Plans & Pricing → per plan, toggle Unified Inbox on/off. Default = on (backward-compatible for existing plans).
• New — API Diagnostic Error ID. All Android API error responses now include error_ref (visible in response body). Same code written to storage/logs/laravel.log for one-grep tracing.
• Improved — Tracking Domain behind Cloudflare Proxied. Pixel/click URLs correctly emit https:// from background jobs. Setup page now includes web-server (Apache/Nginx/cPanel/Plesk) and Cloudflare SSL/TLS instructions.
• Improved — Welcome Email uses Site Name. Verification email header pulls from Admin → Settings → General → Site Name instead of hardcoded "Xsender".
• Improved — Campaign Intelligence for Member Panel. Avg Delivery Rate and Avg Open Rate cards populate on first visit. Backfill migration recomputes stored engagement scores.
• Improved — SEO Settings Reset button. Clears Meta Title, Meta Keywords (Select2), and Meta Description together in one click.
• Improved — RFC 8058 One-Click Unsubscribe. Full Gmail/Yahoo bulk-sender compliance. HTTPS URL first in List-Unsubscribe header, List-Unsubscribe-Post: List-Unsubscribe=One-Click, POST endpoint accepts the mail-server call.
• Improved — Android API Hardening. Bearer-token auth no longer hard-depends on Passport keys. Enum-to-value coercion added for older Laravel 10.x patches on shared cPanel.

XSender Version 4.9 [​

• New — Install Wizard Compatibility Check. Database Setup step now scans your MySQL server (storage engine, InnoDB row format, character set, primary-key rule, version) before proceeding.
• New — System Health page. Admin → Setting → System → System Health. One screen with green/red status for 11 subsystems: DB, MySQL config, schema, cron processor, queue, cache, disk, permissions, PHP runtime, WhatsApp Node service, WhatsApp gateways. Live refresh + drill-down messages.
• New — Public /status endpoint. JSON diagnostic returning HTTP 200 (healthy) / 503 (any issue). Ready to wire into UptimeRobot, StatusCake, Better Uptime, or any external monitor.
• Improved — Copyright & Support URLs are now fully brand-configurable. Three new site settings (copyright_url, support_url, help_center_url) editable at Admin → Settings → General. No more hardcoded links.
• Improved — Codebase cleanup. Removed 14 unused legacy files (~3,637 LOC) and consolidated three duplicate helper function definitions. Faster autoload, smaller ZIP.

XSender Version 4.8 [​

• New features:
  
  • Template editor "Preserve Original HTML" toggle — BeeFree/imported HTML bypasses CKEditor normalization (raw textarea + live iframe preview, auto-detected)
  • CKEditor <p> margin reset — no more extra spacing between paragraphs on Enter
  • User-side per-recipient delivery drill-down — "Recent Dispatches" table with status filter + live AJAX reload + pagination
  • CSV export of dispatches (admin + user) — streamed via chunkById(500), safe on 100k+ campaigns
  • Bot-filtered insights — new email_events table logs every raw open/click hit with UA + IP; EmailBotDetector with 25+ built-in patterns (Gmail image proxy, Yahoo scanner, Outlook SafeLinks, Mimecast, Proofpoint, Barracuda, etc.); CampaignDispatch.status advances only on non-bot hits
  • Config override for extra bot patterns via config('setting.email.extra_bot_user_agents')

XSender Version 4.7 [​

• WhatsApp Cloud API Chats fix — enum reference + device filter includes Node + Cloud
• Cloud API webhook: phone_number_id lookup fix + user resolution from gateway → replies land in correct account
• System-mail enum-object bug fixed at 8 sites (verification, password reset, ticket reply, payment confirmed, etc.) + Log::warning on silent-skip paths
• Support ticket admin reply — $mailCode scope bug (was undefined when no attachment)
• Cumulative Sent/Delivered stats — Sent count no longer decreases as opens/clicks come in
• CampaignInsight fillable rate columns — Insights show cards no longer stuck at 0%
• ContactEngagement score computed every event + upstream counter bump — Avg Engagement no longer 0%
• Duplicate dispatch guard — firstOrCreate + UNIQUE DB index
• Orphan sweeper preserves sent_at — prevents worker-crash double-sends
• WhatsApp Node campaign send — routed through NodeService::sendTextMessage (correct endpoint, payload, auth)
• Show/Review preview strip_tags + html_entity_decode + Unicode-aware NBSP collapse
• Anchor href entity-decode before token pack — multi-param query URLs no longer break
• Edit-locked campaign redirect with notify (no blank 403 screen)
• Dispatch status filter JS listener + AJAX reload
• Channel-distribution AJAX bound via jQuery + select2:select fallback
• Unsubscribe success landing page — theme-independent
• repair.php at install root — token-gated cache + OPcache reset, self-deletes

XSender Version 4.6 [​

• WhatsApp Cloud plug-and-play — user embedded signup, admin controls Meta App config
• Meta embedded signup fix — whatsapp_business_accounts field error
• WhatsApp session auto-disconnect fix — 3 critical fixes (3-7 day drops)
• Server settings modal redesign — mobile-friendly, close button, status bar
• Workflow builder — "Click to configure" opens properties panel
• Multi-provider AI — DeepSeek, Groq, Together AI + configurable models
• Fresh install fix — meta_keywords cast to array with fallback (implode error)

XSender Version 4.5 [20 May, 2026]​

• Meta Lead Ads integration (MVP) — Webhook receiver /api/webhook/meta-lead-ads with hub-challenge verify + HMAC X-Hub-Signature-256. Graph API lead fetch → contact dedup → optional workflow enrollment. Admin CRUD under Lead Generation → Meta Lead Ads.
• Google Ads Lead Form Extensions (MVP) — /api/webhook/google-ads-lead with shared-key validation. Same contact + workflow flow as Meta.
• WhatsApp multi-media drag-reorder — Attachment badges draggable with order number. Per-file remove button. Submission order matches visual order.
• Modernized System Update modal — Vertical timeline (no truncation), per-step status (pending/active/done) with spinner + checkmark, connecting progress line.
• Workflow webhook action UI — Full properties form for call_webhook (URL, method, JSON headers, JSON body with templating). Was broken in v4.4 — empty panel.
• update_contact + notify_admin workflow action UIs — Previously missing properties forms.

Improvement​

• Sidebar — blank middle column fix — User panel no longer reserves submenu space for menus without submenus (Dashboard, Gateway, Plans, Support). Layouts JS reconciles menu-active class with actual rendered .sub-menu-wrapper.show.
• Sidebar — scrollable user menu — <ul class="menus scrollable-menu"> enables vertical scroll when items overflow viewport (admin had it; user didn't).
• Automation Settings page — Terminal-style code blocks replace truncating <input> patterns. Header labels (SSH command / Cron line / supervisor config / artisan), full-width pre, horizontal scroll on long paths, green "copied" state.
• Workflow execution debug view — Per-step duration + Context Variables panel (admin + user).
• Campaign processor heartbeat — Cron writes campaign_processor_heartbeat.txt each tick. Diagnostic UI uses it.

Bug Fixes​

• Fix admin Create Workflow 500 — 4 unescaped {{var}} in builder.blade.php JS placeholders compiled by Blade as undefined constants ("Undefined constant first_name"). Escaped with @ prefix.
• Fix Send Time Optimizer 500 — ContactEngagement::channel is cast to CampaignChannel enum; keyBy('channel') stringified the enum object → fatal. Patched to extract ->value.
• Fix Send Time Optimizer 500 on bad data — Wrapped each data source in try/catch, type-validates arrays, falls back to array_fill(0,24,0) / array_fill(0,7,0). Single bad JSON row can no longer 500 the page.
• Fix workflow show 404 after create — automation_workflows.uid, workflow_nodes.uid, workflow_executions.uid columns were VARCHAR(32); UUID v4 is 36 chars → silent truncation → redirect URL never matched. Migration widens to VARCHAR(50) + backfills truncated rows with fresh UUIDs.

Password/Key:

To view the content, you need to Sign In or Register.

*Nulled Version Added

Changelog not found

Password/Key:

To view the content, you need to Sign In or Register.

*Nulled Version Added

XSender Version 4.3 [17 Mar, 2026]​

• Enterprise WhatsApp Anti-Ban Protection: Added zero-width character fingerprinting, message-length-proportional typing simulation, presence lifecycle management, Gaussian jitter delays, multi-tier rate limiting (per-minute/hour/day), batch cooldowns, new-chat detection, and 7-day warm-up system for new numbers.
• Bee Free Email Builder Fixed: Migrated to V2 authentication API (/loginV2) after Bee Free decommissioned V1 endpoint.
• UI Fixes: Fixed color reset buttons in Site Appearance settings; changed default installation theme to light mode.
• Performance: Resolved WhatsApp cURL timeout errors by moving anti-ban delays to Laravel side; reduced assets size by ~15MB by removing unused CSS/JS, SCSS sources, sourcemaps, and orphaned fonts/icons

Password/Key:

To view the content, you need to Sign In or Register.

*Nulled Version Added
New Feature
Lead generation via Google Maps and website scraping
Workflow automation
Multi-channel campaign management
Email SMTP gateway with DKIM verification and domain authentication to prevent spam and ensure professional email delivery.
Improved
Meta API update for Cloud WhatsApp
Improve the in-app documentation to make it easier to configure and use the application features.
Email system update with attach file
Some UI improvement

Password/Key:

To view the content, you need to Sign In or Register.

*Nulled Version Added
XSender v4.1 [09 December 2025]
Fixed duplicate incoming WhatsApp messages in chat interface
Fixed WhatsApp "old version" warning popup for recipients
Fixed template buttons not working (converted to formatted text due to deprecated by Meta)
Fixed 500 errors after system update due to cached views/functions
Fixed cache clearing issues on servers without terminal access
Fixed double message sending when multiple automation methods configured
Fixed PHP 8.4 deprecation warnings (nullable parameter types)
Fixed "Attempt to read property on null" errors in topbar

Password/Key:

To view the content, you need to Sign In or Register.

*Nulled Version Added
= XSender Version 3.3.6 [17 September 2025]
New:

• Added WhatsApp Cloud API embedded sign up options
• Added WhatsApp Cloud API chat system with incoming media support
• Fixed issue preventing new users from accessing authentication system
• Resolved problem with disabling registration or login
• Fixed issue where in some browsers file attachments for WhatsApp was not functioning properly
• Fixed an issue where delay time was not being added properly when messages were sent using the API

Password/Key:

To view the content, you need to Sign In or Register.

XSender Version 3.2.3 [20 April 2025]​

Enhancements:

• Implemented refined UI improvements for a more intuitive and seamless user experience.
• Revamped the template system to enhance flexibility and support future customizations.
• Updated routing mechanisms to streamline future updates and improve system maintainability.
• Enhanced the upgrade system to efficiently manage database schema changes, ensuring smoother transitions.

Bug Fix:

• Fixed an issue where selecting a group from the group list failed to load the corresponding group-specific contacts.

New Feature:

• Introduced a comprehensive automation process to streamline workflows and enhance operational efficiency.
• Incorporated a dispatch system to significantly improve application scalability and performance.
• Implemented a new, streamlined contact upload mechanism for improved usability and efficiency.

Password/Key:

To view the content, you need to Sign In or Register.

Version 3.2.2 [23 March 2025]​

Enhancements:

• Improved code structure and logic for increased stability and performance.

New Feature:

• Added support for GET method in API message dispatch.

Bug Fix:

• Resolved issue causing errors during message dispatch.

Password:

To view the content, you need to Sign In or Register.

• Fixed some issue [WhatsApp Report, Currency view ..