Versions

Fixes

• Redesigned the refund / unregister / replace-site-key notice as a clearer three-card layout.
• Removed legacy cloned-site detection — the cloned-site flow now runs automatically when a site is migrated to a new domain.
• Minor refresh of bundled icons and translation files.

• Fixed a fatal error related to the plugin activation order with the Types plugin.

• Preselects Toolset Types and Toolset Blocks if no other Toolset plugin is installed.

• Fix: resolve 500 console error when selecting to translate certain Toolset field groups.
• Fix: Fixed BeaverBuilder compatibility issue. Exlclude autoSuggest fields from shortcode-button wrapper.
• Fix: Add early-exit check in before_delete_post for post types without RFGs.

• Performance: Optimize WPML label registration by replacing registerDefaultLabels() with maybeRegisterDefaultLabels().
  • Adds version-based caching and stores registration flags in wpcf_settings to prevent repeated executions.
  • Previously, default label registration ran on every page load. It now runs once per plugin update, significantly improving load times.
  • Observed ~50–70% faster page loads in local tests by avoiding redundant WPML string registration.

• Enhancement: extend the labels offered for Custom Post Types and Custom Taxonomies to cover most of the WordPress API.
• Enhancement: include filters to modify the labels of the items offered when creating a relationship association.
• Compatibility: translate Custom Post Types, Custom Taxonomies, Fields Groups, and Relationships using the WPML Translation Management dashboard.
• Compatibility: use the right translations for labels on Custom Post Types, Custom Taxonomies, Fields Groups, and Relationships, when changing the admin language with WPML.
• Fix: do not produce an error when displaying image fields for images stored in non-standard locations.
• Fix: avoid problems when editing Custom Post Types or Custom Taxonomies labels with a different number of placeholders than expected.
• Fix: remove a JavaScript dependency no longer included with WordPress.
• Fix: add some security checks when automatically generating WooCommerce field groups.

Security

• Fixed a reflected XSS vulnerability in the field-suggestion AJAX endpoint (reported via Patchstack)
• Hardened the wpv_suggest_* AJAX endpoints against XSS and information disclosure

Compatibility

• Raised the minimum PHP version to 7.4 and cleared deprecation notices on PHP 8.2–8.5
• Fixed “translation loaded too early” notices on WordPress 6.7+

Fixed compatibility with WP Rocket’s CDN URL rewriting

• Fixed a Gutenberg editor crash affecting all Toolset blocks on WordPress 6.5+

Fixes

• Fixed Toolset blocks freezing the editor when used inside synced patterns
• Social Share block: replaced the Twitter logo with X and added WhatsApp as a network
• Fixed the taxonomy dependent-search filter not being applied
• Fixed nested shortcodes leaking as placeholders in View attributes

• Fixed the Conditional block not evaluating against the correct post for each item when placed inside a View block loop or a WordPress Archive loop.
• Fixed the Fields and Text block showing empty content when opening a page, post or Content Template for editing – both when the block was saved in Text (HTML) mode and in the FSE Site Editor.
• Fixed inline dynamic fields added to a Paragraph block inside a View block loop or a post‑type archive loop showing the wrong value (or no value) on the front end – each item now shows its own field values.
• Fixed embed blocks (and bare‑URL auto‑embeds) rendering only the URL instead of the embedded preview when the post body is displayed via the Single Field block’s “Post body (content)” option.

• Fixed a Views editor JavaScript error(object missing $dropdown) where missing Toolset Select2 internals prevented dialog initialization and broke the Pagination controls button.

Security: 

• Dropped the nopriv registration from both delete actions (cred_delete_post, legacy cred-ajax-delete-post)
• Added a hard is_user_logged_in() gate in both delete handlers
• Delete caps no longer granted to logged-out users (own → requires login; others → requires delete_others_posts)

Fix: PHP 8+ fatal error during heartbeat autosave

• reset(), array_keys(), foreach() on getAttachedData() now guarded with is_array() check
• Prevents fatal errors when metadata is corrupted (string instead of array)
• Fixes both autosave crash and post deletion crash

Fix: PHP 8+ fatal error during heartbeat autosave

• reset(), array_keys(), foreach() on getAttachedData() now guarded with is_array() check
• Prevents fatal errors when metadata is corrupted (string instead of array)
• Fixes both autosave crash and post deletion crash

• Compatibility: avoid console errors when editing email templates from FluentCRM.

• Fixed inline dynamic fields added to a Paragraph block inside a View or archive loop showing the wrong value (or no value) on the front end.
• Fixed embed blocks rendering only the URL instead of the embedded preview when the post body is displayed via the Single Field block’s “Post body (content)” option.

• Marker icon now changes on hover (was blocked by marker_icon_use_hover flag never being set for legacy maps)
• Focus-on-marker link hover now triggers marker icon change
• Focus-on-marker link click opens marker popup
• Fix applies to both init_map() and updateGoogleMapInstance() code paths

• Marker icon now changes on hover (was blocked by marker_icon_use_hover flag never being set for legacy maps)
• Focus-on-marker link hover now triggers marker icon change
• Focus-on-marker link click opens marker popup
• Fix applies to both init_map() and updateGoogleMapInstance() code paths

• Compatibility: updated internal dependencies (Select2 upgrade).

• Fix: Allow post authors to preview their own drafts on the front-end.

  • Introduces is_previewing_own_post() to safely detect preview mode and user permissions.
  • Adjusts post_type_visibility() to skip content hiding when previewing own drafts.

• Fix: Preserve pagination in blog pages for secondary WPML languages.

  • Resolves issue where translated paginated posts were redirected to non-paginated URLs.
  • Adds support for correctly detecting paginated blog pages in non-default languages.
  • Ensures translated pages retain the pagination query string.

• Fix: avoid problems when running automatic database cleanups.

Security

• Fixed a reflected XSS vulnerability in the field-suggestion AJAX endpoint (reported via Patchstack)
• Hardened the wpv_suggest_* AJAX endpoints against XSS and information disclosure

Compatibility

• Raised the minimum PHP version to 7.4 and cleared deprecation notices on PHP 8.2–8.5
• Fixed “translation loaded too early” notices on WordPress 6.7+

Fixed compatibility with WP Rocket’s CDN URL rewriting

• Fixed a Gutenberg editor crash affecting all Toolset blocks on WordPress 6.5+

Fixes

• Fixed Toolset blocks freezing the editor when used inside synced patterns
• Social Share block: replaced the Twitter logo with X and added WhatsApp as a network
• Fixed the taxonomy dependent-search filter not being applied
• Fixed nested shortcodes leaking as placeholders in View attributes

• Fixed the Conditional block not evaluating against the correct post for each item when placed inside a View block loop or a WordPress Archive loop.
• Fixed the Fields and Text block showing empty content when opening a page, post or Content Template for editing – both when the block was saved in Text (HTML) mode and in the FSE Site Editor.
• Fixed inline dynamic fields added to a Paragraph block inside a View block loop or a post‑type archive loop showing the wrong value (or no value) on the front end – each item now shows its own field values.
• Fixed embed blocks (and bare‑URL auto‑embeds) rendering only the URL instead of the embedded preview when the post body is displayed via the Single Field block’s “Post body (content)” option.

• Fixed a Views editor JavaScript error(object missing $dropdown) where missing Toolset Select2 internals prevented dialog initialization and broke the Pagination controls button.

• Compatibility: fix some notices on PHP 8.2.

• Added a fix to ensure pages are accessible due to the get_page_by_title function being deprecated in WordPress 6.2.

• Compatibility with PHP8.

• Improved compatibility with the Astra theme.

• Improved the way of determining if the site supports hot module replacement.
• Fixed an issue with a warning appearing on PHP 8.x.

• Fixed various compatibility issues with the Customizer page.

• Improved compatibility with PHP8.
• Fixed various issues on the Checkout and Thank-You pages.

• Fixed the redirections to cart and checkout pages after submitting forms.
• Fixed setting the right customer when completing the purchase process on a form to register a new user.

• Fixed the redirections to cart and checkout pages after submitting forms.
• Fixed setting the right customer when completing the purchase process on a form to register a new user.

• Compatibility: updated internal dependencies (Select2 upgrade).

• Fix: ensure that menu cells do display their children properly.
• Fix: do not produce errors when trying to edit a post with a non-existing ID.

• Fix: error when editing a content layout on PHP 8.x.

• Feature: Automatically loads single assigned Layouts
• Feature: Automatically creates content layouts from previously assigned layout
• Feature: Automatically handles translations migration
• Feature: Cleans up all not needed data including old layout automatically at the end of the process
• Feature: Optimise query when WPML is active