Recent Updates
Security
- Added additional sanitization to the Donation Form.
- Added additional access control checks to the REST API.
Fixes
- Improved compatibility with WooCommerce Attribute Swatches by Iconic.
- Fatal error regarding invalid type in Imagick->newImage function.
Fixes
- Issue where the reservation table wouldn’t save the date when the cart is empty.
- Fix bug with subscription product where the date would appear incorrect after selecting in the time slot picker for certain timeslots.
- Add defensive check to prevent PHP warnings in get_chosen_shipping_method().
- Validation error for Stripe Express Checkout.
Fixes
- Revert hard-coded database collation conversion.
Security
- Improves PayPal’s and Square’s handle failure endpoint. [SVUL-71]
Fixes
- Make SSR respect AJAX pagination so direct page URLs no longer return 404s. [TEC-5754]
- Prevent 404 errors for paginated TEC list view requests on MariaDB. [TEC-5056]
- Rewrite the day view URL to query-param form and fall back to the default view when day view is disabled, preventing a 404 after a page refresh. [TEC-5765]
Languages
- 0 new strings added, 13 updated, 0 fuzzied, and 0 obsoleted.
Fixes
- Resolved an issue where group leaders with basic settings could not view or grade assignments submitted by users in their groups. Admins and advanced group leaders are unchanged and still see all assignments; author and group filters respect the same visibility rules.
- Resolved an issue where, for group leaders assigned to more than one group, exporting group progress could include users beyond those in the exported group.
Security
- Added additional escaping to the Donation Form Block attributes.
Fixes
- Resolved an issue with donation level labels not displaying correctly for multi-currency donations.
Fixes
- Fatal TypeError in Optimizer meta handler during WooCommerce product meta updates.
- Fatal Error when updating Kadence Blocks.
Fixes
- Query Loop filter by product attribute.