Black Friday: 30% OFF on all plans, applied automatically at checkout View plans
1,195 sites with automatic updates See plans
Log in Cart

QuickCal – Appointment Booking Calendar for WordPress Changelog

Every recorded version, newest first, with what changed in each one.

Latest 1.0.249 versions

Undated · 9 versions

  1. 1.0.24

    Latest
    2 new3 changes
    New
    • Added the saved `every2hours` cleanup schedule and made invalid cleanup intervals safe
    • Added WordPress regression coverage for the reported WorkSpa failures
    Changes
    • Moved missing WooCommerce order checks to a bounded background job instead of loading orders during booking page rendering
    • Paginated Frontend Agents history, upcoming, and pending lists in the database at 50 appointments per page
    • Processed abandoned unpaid appointments in bounded cron batches

  2. 1.0.23

    3 new11 changes
    New
    • Added nonce and capability checks to Front-End Agents, CSV exports, WooCommerce actions, and dismissible notices
    • Added regression coverage for appointment ownership, calendar authorization, booking input validation, and CSV safety
    • Added end-to-end regression coverage for public appointment-form markup and nonce-without-authorization attempts
    Changes
    • Restricted customer appointment changes, cancellations, and payment actions to the signed-in appointment owner
    • Restricted Booking Agent actions and exports to assigned calendars
    • Disabled legacy demo appointment tools by default and protected opt-in use with administrator permissions and nonces
    • Validated booking dates and time slots on the server and stopped trusting client-supplied appointment timestamps and user IDs
    • Neutralized spreadsheet formulas in exported CSV cells
    • Strengthened calendar feed tokens for new installations and escaped iCalendar text values against property injection
    • Validated and safely rendered nested public appointment-form titles and related calendar/date/time values
    • Hardened public calendar AJAX loaders against reflected attribute injection and malformed request values
    • Closed remaining Booking Agent calendar boundaries in legacy picker and custom-timeslot AJAX routes
    • Prevented Booking Agents from changing linked customer WordPress profiles without permission to edit that user
    • Restricted failed-login redirects to validated same-site destinations

  3. 1.0.22

    1 fix2 changes
    Fixed
    • Fixed an unauthenticated stored cross-site scripting vulnerability in appointment custom fields
    Changes
    • Sanitized submitted custom-field values before storage and escaped stored custom-field markup at every appointment display boundary
    • Enforced the configured guest-booking and user-registration settings on unauthenticated appointment requests

  4. 1.0.21

    2 new1 fix2 changes
    New
    • Added an opt-in email setting to copy the site administrator on customer-initiated appointment cancellations
    • Added regression coverage for cancellation notification recipients
    Fixed
    • Fixed custom calendar assignment lookup during front-end cancellations
    Changes
    • Preserved the existing assigned Booking Agent or default notification recipient behavior when the new setting is disabled
    • Prevented duplicate cancellation emails when the assigned recipient and site administrator use the same email address

  5. 1.0.20

    1 fix1 removed
    Fixed
    • Fixed fresh QuickCal activations so the bundled Font Awesome loader creates both valid default options and release metadata before Font Awesome initializes.
    Removed
    • Removed a PHP 8.2+ dynamic-property deprecation from the bundled Font Awesome release provider.

  6. 1.0.19

    1 fix
    Fixed
    • Fixed fresh QuickCal activations so the bundled Font Awesome loader creates valid default options before Font Awesome initializes.

  7. 1.0.18

    2 new1 fix
    New
    • Added server-side availability enforcement for disabled booking slots
    • Added a focused regression test for disabled booking slot behavior
    Fixed
    • Fixed disabled booking slots so they cannot be booked from the admin calendar after the date view reloads

  8. 1.0.17

    3 new1 improvement5 fixes
    New
    • Added a structured local development and smoke-test workflow for QuickCal
    • Added release tooling for GitHub Releases and hosted zip publishing
    • Added safer WooCommerce order creation for admin-created paid appointments
    Improved
    • Improved admin booking stability for existing users, new users, and unpaid bookings
    Fixed
    • Fixed a profile update notice caused by missing `_wpnonce`
    • Fixed several PHP notices, warnings, and deprecations in request handling and rendering paths
    • Fixed admin guest bookings so paid appointments can create linked WooCommerce orders
    • Fixed translation loading timing issues on newer WordPress versions
    • Fixed a PHP 8.4 deprecation in the bundled Font Awesome library

  9. 1.0.16

    4 fixes
    Fixed
    • Sensitive Data Exposure vulnerability
    • Cross Site Request Forgery (CSRF) vulnerability
    • Issue where appointment details did not sync to related WooCommerce order
    • Minor translation warnings

Changelog published by the developer, in their original language.