Recent Updates
Security
- Improved output escaping for block attributes.
Fixes
- Hardened import settings and validation.
Fixes
- Removed the previously saved values of a checkbox Additional Field when every option is unselected and the event is updated.
- Resolved two PHP 8 fatal errors in recurring events: describing a yearly rule with no months selected, and generating a series when an instance could not be inserted.
Languages
- 0 new strings added, 36 updated, 0 fuzzied, and 0 obsoleted.
Compatibilitys
- Registered the plugin's editor blocks with Block API version 3 so they render correctly inside the iframed block editor introduced in WordPress 6.9.
Fixes
- Prevented event pages and iCal exports from failing when event descriptions contain Single Event or Events Archive blocks.
- Resolved an issue where hiding the subscribe links with a snippet that returns a non-array value from the
tec_views_v2_subscribe_linksfilter could cause a fatal error on single event pages. - Resolved fatal errors that could occur when WordPress or another plugin passed unexpected data to The Events Calendar, such as while SiteGround Optimizer clears its cache.
Languages
- 0 new strings added, 59 updated, 0 fuzzied, and 0 obsoleted.
Security
- Hardened access checks on REST API responses. Props to Kaveesha Nirmal for reporting.
- Strengthened permission checks in the REST API v1. Props to Mohammed Abd Alrahman for reporting.
Fixes
- Dropped the cached calendar-view ticket data when tickets are sold and when the plugin updates, instead of rebuilding it mid-order, resolving an issue where sold-out events kept showing the remaining ticket count on calendar and list views.
- Fixed an issue where a custom ticket sale end date set during ticket creation in the block editor reverted to the event start date after saving the event.
- Renewed the Square access token ahead of its expiration and retried a rejected request once against the fresh one, which kept Tickets Commerce checkout from failing about 30 days after connecting to Square. Where Square would neither renew the credentials nor accept the stored token, the gateway reported itself as disconnected with an admin notice instead of showing a healthy connection while live charges failed.
- Resolved a fatal error that could occur while rendering the Move Attendees dialog when another plugin listened on the admin_enqueue_scripts action.
- Resolved an issue where the tickets and attendees REST API archives could return a JSON object instead of an array when an entry could not be formatted, preventing the Event Tickets Plus App from listing attendees.
- Stripe checkout could return a server error and never charge the buyer when a coupon changed the cart total, because the application fee left on the Payment Intent no longer matched the discounted amount.
Languages
- 7 new strings added, 153 updated, 0 fuzzied, and 1 obsoleted.
Security
- Tightened the handling of Assigned Seating reservations, covering the seat labels stored against attendees and the session tokens reservations are filed under.
Fixes
- Further reduced database load from the Hide Restricted Posts filtering on REST API and query requests.
- Activation and test emails no longer fail to send when an email template field was left blank.
- Prevented gateway labels from being translated before the plugin's translations were ready, which could trigger a PHP notice.
Changes
- Bug Fix: Settings and setup no longer fail with a "not a valid JSON response" error when a host firewall blocks the batch REST endpoint.
- Bug Fix: Prevent fatal errors for banned IPs when Security is loaded early by the MU Plugin Loader.
Changes
- Bug Fix: Prevent fatal errors for banned IPs when Security is loaded early by the MU Plugin Loader.
Features
- Merged Notifications addon feature into LearnDash core.
- Merged WooCommerce addon feature into LearnDash core.
Fixes
- Resolved an issue where REST API requests for LearnDash post types could fail with a fatal error when a third-party plugin added a non-array entry to the settings metabox fields.
- Resolved quiz saving progress not working correctly when questions are set to display in a random order.
Tweaks
- Added constants:
LEARNDASH_MODULE_{$module_name}_DISABLED. - Added filters:
learndash_module_{$module_name}_disabled.
Security
- Added additional validation to PayPal Commerce donation processing.
- Added additional sanitization to donor information displayed on public pages.
Fixes
- Resolved an issue where resuming a paused Stripe subscription triggered a fatal error.