GIFTiT – Free Gifts for WooCommerce

4.6

* Security: Fixed an unauthenticated arbitrary shortcode execution vulnerability in the gift popup AJAX handler.

* Security: Restricted gift layouts to supported values and improved shortcode attribute validation and escaping.

Credits: Thanks to Nguyen Quang Tan and Patchstack for responsibly reporting this vulnerability.

4.5

Fixed: Duplicate gift additions caused by repeated clicks, overlapping requests, or slow AJAX responses.

Fixed: Gift quantity limits when adding gifts, including requests exceeding the remaining allowance.

Fixed: Outdated gift eligibility and quantities after cart changes.

Fixed: Cart totals synchronization after gifts are removed or their quantities are adjusted.

Fixed: Valid free gifts being rejected as non-purchasable in WooCommerce Cart and Checkout Blocks.

Fixed: Gift rule state being overwritten during shipping calculations.

Fixed: Incorrect gift quantities reported in AJAX responses.

Fixed: Unwanted WooCommerce notices remaining after failed AJAX gift additions.

Improved: Gift quantity input validation and AJAX security token verification.