WooCommerce 2.6.2-4 Fix Update

In the last 3 months there were 3 WooCommerce updates. All of these updates are for functional and security enhancements, there are no completely new features. WooCommerce 2.7 will bring new features and maybe a new and better product image gallery.

WooCommerce 2.6.4

The latest WooCommerce Update was published on July 26. It improves the security and fixes several minor issues.

• Fix – Security – Only allow image MIME type upload via REST APIs.
• Fix – Shipping method title display in COD settings.
• Fix – Order date input in Edge browser.
• Fix – Ensure value is not null in variations to support empty show_option_none setting.
• Fix – get_the_title does not need escape in grouped template file.
• Fix – Ensure WC_ROUNDING_PRECISION is defined and use it as a low precision boundary in wc_get_rounding_precision().
• Fix – Response body should be a string in webhook class.
• Fix – Use h2 instead of h3 headings in profile screen.
• Dev – API – Allow Allow meta_key/value filters for products.
• Dev – CLI – Explode tags and category IDs to allow multiple comma separated values.
• Dev – add $order arg to woocommerce_admin_order_item_class and woocommerce_admin_html_order_item_class filters.

WooCommerce 2.6.3

This update was released on July 19 and contains 18 fixes and 3 tweaks. One of the fixes sloves a XSS vulnerability and also the caching for comments was improved in this update.

• Fix – Security – Escape captions in product-thumbnail and product-image templates (template versions have been bumped).
• Fix – Fixed how we calculate shipping tax rates when using more than one tax class.
• Fix – When duplicating product variations, set title, name, and guid.
• Fix – Normalized ‹read more› buttons.
• Fix – Add to cart notices for grouped products.
• Fix – Do not sanitize passwords in the settings API.
• Fix – Handle shipping zone location range conversion during update (dashes to …).
• Fix – Always remove commas while processing flat rate costs.
• Fix – Ensures account page layout is only applied to desktop-sized displays.
• Fix – When getting layered nav counts, take search parameters into consideration.
• Fix – Free shipping show/hide javascript.
• Fix – Strip hash characters when exporting reports.
• Fix – Use permission id to revoke access to downloads to prevent removing wrong rows.
• Fix – When duplicating product variations, set title, name, and guid.
• Fix – Set more appropriate default rounding precision based on currency decimal places.
• Fix – Fix message styles for empty carts.
• Fix – Fixed the load of the WC_Email_Customer_On_Hold_Order class.
• Fix – Don’t perform cart update on search submit.
• Dev – API – Added support for WP REST API with custom URL prefixes.
• Dev – API – Delete variations when deleting a variable product.
• Dev – API – Fixed how we check for product types.
• Dev – Added woocommerce_cart_id filter.
• Dev – Add shortcode name param to shortcode_atts function calls.
• Dev – Post custom data when fetching a variation via ajax.
• Dev – Include child prices in grouped_price_html filter.
• Dev – Allow filtering of variation stock quantity.
• Dev – Added $_product argument to ‹woocommerce_restock_refunded_item› hook.
• Dev – Added a filter hook for the wc_ajax endpoint url.
• Tweak – Include account page link in new customer account emails.
• Tweak – Updated all URLs from WooThemes.com to WooCommerce.com.
• Tweak – Cache the result of WC_Comments::wp_count_comments() in a transient (improves performance).

WooCommerce 2.6.2

This older WooCommerce update brings the feature, that now invalid coupon codes are not accepted and not just have no value. There is also a security improvement when you reset your password, which prevents that the password reset tokens being leaked via the page’s referer headers.

• Fix – Set max index length on woocommerce_payment_tokenmeta table for utf8mb4 support.
• Fix – is_available check for legacy shipping methods.
• Fix – wc_add_to_cart_message() when non-array is passed.
• Fix – Maximum coupon check should allow the ‹maximum› value.
• Fix – Product coupon logic to avoid applying non-applicable coupons.
• Fix – Potential notices when leaving out ‹default› field for shipping instances.
• Fix – wp_cache_flush after term meta migration/update.
• Fix – wc_add_to_cart_message() when non-array is passed.
• Fix – woocommerce_redirect_single_search_result type check was incorrect.
• Fix – Javascript show/hide of option in free shipping method.
• Fix – Convert ellipsis to three periods when saving postcodes.
• Fix – Prevent get_terms returning duplicates.
• Fix – Removed non-existent country (Netherlands Antilles)
• Fix – Grouped product range display when child is free.
• Fix – Remove discount when checking free shipping min amount.
• Fix – Prevent blocking the same element multiple times on cart page.
• Fix – Don’t sync ratings right after a new comment to prevent rating sync whilst rating meta does not exist yet.
• Fix – Fix product RSS feeds when using shop base.
• Fix – woocommerce_local_pickup_methods comparison by stripping instance IDs before the check.
• Fix – During password resets, use cookie to store reset key and user login to avoid them being exposed in the URL/referer headers.
• Dev – API – Fixed variable product stock at product level.
• Dev – CLI – Introduces woocommerce_cli_get_product_variable_types filter.
• Dev – Allow notices to be grouped on checkout after certain events.
• Dev – API – Allows save images by ID with product variations.
• Tweak – Made customer pay link display if order needs_payment() rather than checking pending status.
• Tweak – Zones – Wording clarifications.
• Tweak – Zones – Match zones with postcodes but no country.
• Tweak – Zones – Match zones with no regions as ‹everywhere›.
• Tweak – Added view_admin_dashboard cap for disabling the admin access restriction in custom roles.
• Tweak – Revised stock display based on feedback to hide ‹in stock› message if stock management is off and only show available on backorder if notifying customer.
• Tweak – Allow external product SKUs.
• Tweak – PT (Portugal) and JP (Japan) postcode formats.
• Tweak – Sort products from the [product_category] shortcode by menu order.
• Tweak – Improve wc_orders_count() performance by running a query to count only posts of the given status.
• Tweak – To allow my account page tabs to be disabled without code, you can now set the endpoint value to a blank string.

More detailed information for all updates can be read in the WooCommerce changelog or developer blog.

Remember to backup your system before updating. Good luck and happy ecommerce!

This posting first appeared on the official WooCommerce changelog.