WooCommerce 3.2.4 was released on November 16 as a fix update. It contains 20 fixes for bugs and also vulnerabilities, which could lead to object injection or brute force attacks. It’s recommendet to install this update soon, because the security issue could be exploited by users who can edit content.
The Fixes
- Cache IDs in shortcodes rather than query objects.
- Fix float rounding issues in cart with currencies like Bitcoin.
- Prevent slashes appearing in shipping fields and inside meta keys when using quotes.
- Check valid data when filtering `wp_nav_menu_objects` to prevent conflicts.
- `get_total_ex_tax` should exclude fee taxes.
- Fix orders count in tax reports.
- Allow removing coupons from the cart, even if coupons are disabled.
- Prevent calculate_totals totals running too often.
- Set attributes during variation creation so all options are correctly displayed in cart forms.
- Grab description directly to pass through wc_format_content to prevent double sanitization.
- Fix db warnings when using the «Add Order Indexes» tool.
- Remove unnecessary html formatting in variation dimensions field.
- Fix WC_Customer_Download isset method.
- Removed class within class in admin meta boxes HTML.
- Fixed wrong `flex-control-nav` selector scope in `add-to-cart-variation.js`
- Allow variations to be added to cart from query string.
- Use `add_filter` for `comment_feed_where` hook.
- Change nocache_headers hook firing in the cache helper.
- Coupon min/max spend based on displayed subtotal.
- Fix event propagation on click in setup wizard and improve validation.
- API – Change how line items are saved in API so calculations are correct.
- Tweak – Hide downloads from admin emails.
- Tweak – Set placeholder for variation lxwxh field to that of the parent.
- Tweak – Improve the Add Payment Methods display so buttons are not shown when no payment methods support the feature.
- Localization – Update NJ tax rate.
- Localization – Add Belarusian ruble BYN.
Remember to back up before installing the update.
(Beitragsbild von peshkova)
