توضیحات
WooCommerce funnel builder to create custom checkout pages, sales funnels, one-click upsells, and order bumps - all inside WordPress.
تغییرات این نسخه
3.13.6 (2026-10-28)
Security: Upsell and downsell offers accepting any product, quantity or discounted price instead of the product configured on the offer step, and being accepted more than once per order.
Security: Order details being exposed on upsell and downsell offer pages, and offer charges being triggered, by visitors who do not own the order.
Security: Setup wizard plugin activation running without a nonce and being able to activate plugins the wizard does not offer, and an unused setup wizard action that could write any post meta.
Security: Gutenberg CSS being saved on posts the user cannot edit, and Cross Site Scripting (XSS) through the saved Gutenberg CSS.
Security: Unauthenticated requests being able to change the telemetry opt-in and opt-out setting.
Security: Escaped the button text on the Bricks next step button.
Fix: Checkout failed validation when a funnel step was set as the site front page, because the checkout loaded that step’s field settings instead of its own.
Fix: Order bumps disappeared after the checkout refreshed, and could not be accepted, when a funnel step was set as the site front page.
Fix: The checkout ID hidden field was printed twice on the checkout form.
Fix: A duplicated funnel’s checkout redirected to the home page because it still pointed to the original funnel’s A/B testing step.
Fix: Checkout field labels such as City and Postcode were hidden under Astra Pro checkout styles.
Fix: WooCommerce Subscriptions price details ov
Security: Upsell and downsell offers accepting any product, quantity or discounted price instead of the product configured on the offer step, and being accepted more than once per order.
Security: Order details being exposed on upsell and downsell offer pages, and offer charges being triggered, by visitors who do not own the order.
Security: Setup wizard plugin activation running without a nonce and being able to activate plugins the wizard does not offer, and an unused setup wizard action that could write any post meta.
Security: Gutenberg CSS being saved on posts the user cannot edit, and Cross Site Scripting (XSS) through the saved Gutenberg CSS.
Security: Unauthenticated requests being able to change the telemetry opt-in and opt-out setting.
Security: Escaped the button text on the Bricks next step button.
Fix: Checkout failed validation when a funnel step was set as the site front page, because the checkout loaded that step’s field settings instead of its own.
Fix: Order bumps disappeared after the checkout refreshed, and could not be accepted, when a funnel step was set as the site front page.
Fix: The checkout ID hidden field was printed twice on the checkout form.
Fix: A duplicated funnel’s checkout redirected to the home page because it still pointed to the original funnel’s A/B testing step.
Fix: Checkout field labels such as City and Postcode were hidden under Astra Pro checkout styles.
Fix: WooCommerce Subscriptions price details ov