Recent Updates
Fixes
- Corrected ProPanel revenue reports to reflect coupon discounts and trial pricing for both LearnDash native checkout and WooCommerce orders, instead of counting the full pre-discount price.
- Detailed Course Reports block no longer renders stale or out-of-order results when the user changes the date range or report filters in quick succession.
- Resolved a fatal error on the Customized Quiz Report View when a learner’s quiz attempt spanned three or more question categories.
- Resolved an issue where group leaders saw fewer quiz attempt rows than the report total, with mismatched pagination, for a managed learner in the Quiz Reports dashboard.
- Resolved an issue where the Course Progress and other donut charts did not render on the ProPanel reporting dashboard.
- Resolved an issue where the Time Spent report block could show different learners completed, in progress, and total counts than the course dashboard.
Fixes
- Resolved a PHP notice triggered by loading translations too early.
Security
- Added additional validation to ensure donation gateway selection respects the enabled payment gateway settings.
- Improved escaping of donation form template output.
- Improved the security of the recurring donation REST API.
Fixes
- Corrected malformed admin-notices.js URL causing 404s in wp-admin.
Security
- Expanded validation of Event Aggregator imports for all statuses.
Languages
- 0 new strings added, 0 updated, 0 fuzzied, and 0 obsoleted.
Security
- Added additional escaping and sanitization to the Sequoia (Multi-Step Form) template settings and donation form markup (CVE-2026-13704).
Security
- Tightened up Stripe checkout validation.
Security
- Tightened security around REST API endpoints.
Security
- Standardized email access confirmation AJAX responses to prevent distinguishable server responses.
- Added additional escaping and sanitization to the Campaign Comments block and shortcode attributes (CVE-2026-13246).
Security
- Hardened capability checks in the pattern and template import process.
- Enhanced authorization checks on the performance optimizer data endpoints.