WooCommerce 2.3.12 + 13 Security and Maintenance Releases

WooCommerce 2.3.13 was released on Juli 7. While the changelog this time is quite short, it weights quite a lot  from a hoster’s point of view. Because of a small script in the WooCommerce code, which was supposed to improve the server compability of the WordPress-function is_ssl(). Anyway, fix_server_vars caused some browsers to crash, and was removed to trade load balancer – and proxy-compability for more browser stability.

This update is now available as a minor update in the WooCommerce backend or at wordpress.org/plugins/woocommerce/ .

Happy patching!

Changelog

• Fix – Improved the email settings save and tabs for 3rd party plugins.
• Fix – Datepicker range for variations.
• Fix – Fixed Google Chrome forcing to use SSL. This can cause some issues on websites behind load balancers or reverse proxies. Read more.
• Fix – Escaped shop url in empty cart template.
• Fix – Escaped product tabs titles.
• Fix – Removed deprecated PHP4 constructor on Widget classes.
• Fix – Wrong price_slider_updated JS event arguments.
• Fix – Stock quantity type in WC-API.
• Fix – Don’t reveal username when login failed on valid email login.
• Fix – Fatal error on order details when have some downloadable product deleted.
• Fix – Relative paths validation for downloadable product.
• Fix – Flat rate shipping costs should ignore virtual items.
• Tweak – Keep product quantity when happens some error while add product on the cart.