Undated · 14 versions
4.11.9
Latest2 security
Security- Only run logging database migrations for administrators.
- Prevent spreadsheet formula injection in exported log files.
4.11.8
2 security2 changes
Security- Add nonce verification to the AJAX request for fetching audience details in the activity dashboard widget.
- Escape log table column output.
Changes- User Sync: Allow mapping core WordPress user fields (username, display name, role, etc.) in the field map, grouped separately from custom fields.
- Misc: Update WordPress Coding Standards to 3.4.
Changes- Forms: Fix encoded character showing on button after submitting.
Changes- User Sync: Rename the remaining "lists" reference to "audiences" on the settings page.
- User Sync: Handle webhook requests without request URI server data without triggering PHP warnings.
- Translations: Use the shared `mc4wp-premium` text domain consistently across premium add-ons and admin screens.
- E-commerce: Generate abandoned cart identifiers using UTC dates for consistent tracking across server time zones.
- E-commerce: Handle requests without request-method server data without triggering PHP warnings.
- General: Improve output escaping across premium admin pages, notices, reports, and settings.
Improved- Avoid unnecessary WooCommerce checks during autoloading.
Security- Add nonce verification to state-changing URLs and abandoned cart queueing.
- Fix potential SQL injection issues for bulk deleting log items.
- Fix potential stored XSS issues in debug output, custom color settings, and Mailchimp audience names when WP_DEBUG is enabled.
Changes- Email Notifications: Fix potential HTML injection in sign-up notification emails.
- E-commerce: Only run upgrade routines during admin or cron requests.
- General: Use deferred loading and inline script data for more scripts.
Changes- Styles Builder: Improve generated CSS for accessible form markup with nested labels.
- Styles Builder: Protect against a race condition between the iframe preview and main window.
- E-commerce: Move site tracking pixel handling to the free plugin.
- E-commerce: Improve setup wizard spacing and hide the automation re-enable notice while in the wizard.
- Logging: Fix date range selector display on the statistics page.
- General: Use WordPress script loading strategies for deferred scripts.
Changes- E-commerce: Only save order meta instead of full order save, prevents potential infinite loop.
- Logging: Only show installed sign-up integrations or with entries.
- Logging: Default to the table overview.
- Logging: Add setting to disable all logging.
- General: ensure settings are stored in an autoloaded option.
Fixed- Fix deprecation warning in Gutenberg editor.
Changes- Handle plugin dependency on free plugin through WordPress core.
- Ensure compatibility with WordPress 7.0.
Fixed- Fix user sync page not accessible on multisite installations.
Changes- Bump required PHP version to 7.4 or higher and modernize code.
- Various strict typing and other code hardening improvements.
Changes- User Sync: fix function call for setting up cron schedule when saving settings.
Changes- E-commerce: Automatically translate WPML product URL's.
Changes- E-commerce: Disconnect store from Mailchimp when running setup wizard whilst choosing a new Mailchimp audience.
- E-commerce: Fix white screen when encountering API errors whilst setting up store connection.
- User-sync: Fix PHP warning about undefined variable when accessing settings page on a fresh installation.
Changes- Minor performance improvements to plugin bootstrapping code.
- Replace chart library from dashboard widget showing Audience size/activity with a locally hosted version with a much smaller filesize.
Changelog published by the developer, in their original language.
