The latest WooCommerce update was released on February 20 and contains 89 commits. Most of the fixes are for known bugs and are improving the user experience, but there are also commits to harden the WooCommerce plugin against security threats and vulnerabilities, therefore the update should be installed as soon as possible to improve security.
Fixes:
- Fix allow product low stock threshold be the WC settings default.
- Fix error on product category when sorting by multiple fields.
- Recalculate coupon totals after adding a coupon to an order.
- Include refunded orders in top sellers, earners sales by product.
- Fix issue where «Any» attributes on variable products not always selectable on front end.
- Ensure partial refunds fire order.updated webhooks.
- Reload the cart page when the cart is empty.
- Always show the price filter widget when filtering products by price.
- Added body `{padding: 0;}` CSS rule to the email-styles.php to fix the iOS emails layout issue.
- Update variable product default attributes to reflect attribute terms slug edit.
- Adds all 3 callback arguments to the `woocommerce_order_item_display_meta_value` filter called from the `get_formatted_legacy` method of the WC_Order_Item_Meta class.
- Remove html from add coupon error alert during manual order entry.
- Include tax in subtotals when validating coupon minimum and maximum in manual order entry.
- Fix ssl check in case shop page no longer exists.
- Exclude `paged` from price slider and rating filter.
- Limit bulk variation percentage price adjustment to decimal places in pricing settings.
- Fix category image `name` field to be used for API POST/PUT.
- Fix remote request test in `get_environment_info()`.
- Fix notices when images have no metadata or their metadata is removed.
- Check for presence of ’save› entry in post data when determining whether to save settings.
- Additional CSS support for more input types on variations panel in admin.
- Over escaping rating widget html.
- Update cron sale price removal to remove the price at midnight after the sale ends.
- WC_Log_Handler_File::remove – fix for MS Windows
- Only require flat shipping rate when shipping method is enabled in the On-Boarding Wizard.
- Fix wrong variable check in `add_uncropped_metadata`.
- No alert for mis-matched password reset.
- Hold-stock behavior between simple products and variable products was different.
- OBW: Offer Storefront when WP 5.0 default theme is active
- Add novalidate attribute to payment form to prevent hidden fields preventing submission.
- Switch span to paragraph for descriptions in admin user profile view to correct spacing.
- Added POST variable check in product data meta box.
- PayPal item name encoding.
- Move PayPal BN partner ID.
- The «for» attribute of a label for a radio input is invalid in `woocommerce_form_field`.
- Custom payment options sections was not loading settings.
- Breadcrumbs on custom post types was using the singular name instead of plural.
- Fixed generate webhook signature when secret contains special chars.
- Set correct item meta after restocking items with refunds.
- Sales by Product to consistently calculate net sales counts and amounts.
- Importer – Variations cannot be drafts so set to private.
- Next/previous links for orders REST endpoint when `status` query parameter is present.
- Default value passed to sorting dropdown
Tweaks:
- Updates Mailchimp branding in setup wizard.
- Refactor `@id` generation for product structured data to prevent plugin conflicts.
- Keep count of the number of times custom coupons apply.
- Change WooCommerce emails footer from `Powered by WooCommerce` to `Built with WooCommerce`.
Security:
- Improved escaping for Photoswipe captions.
- Improved escaping for JSON attributes and structured data.
