What’s New

The vendor dashboard trades its profile completion bar for a store setup checklist, and four fixes keep add-ons, compliance fields, saved cards, and subscription downloads with their rightful owner.

Privacy and security

• Fix: Hardened EU compliance details so vendors can only save them on their own product variations.
• Fix: Hardened Product Add-ons so vendors can only view their global add-ons, not another vendor’s.
• Fix: Hardened MangoPay saved cards at checkout so they can only be viewed or deactivated by their owner.
• Fix: Hardened subscription downloads so vendors can only grant download access to their own products.

Vendor dashboard

• New: The profile completion bar on the new vendor dashboard and settings pages is now a store setup checklist that links straight to each remaining step, so vendors can see what is left and go do it.

Products

• Update: The legacy YITH WooCommerce Brands integration and its migration tool have been removed, since brands now run on WooCommerce’s native product brands.
• Fix: Global product add-ons now apply only to the products of the vendor who created them, on block-based cart and checkout pages too, so customers no longer see another vendor’s extras.

Admin tools

• Update: Integrations can now add their own summary cards to the Admin Earnings report, so marketplace owners see those figures alongside Dokan’s.

Two fixes clear a blank block editor and get products with no price loading again.

Payments

• Fix: Product pages with no price now load normally when Stripe Connect is enabled, with Express Checkout hidden on those products, so customers reach the page instead of an error.

Admin tools

• Fix: The block editor no longer opens blank while the Delivery Time module is active, because its settings assets now load only on Dokan admin pages.

The new vendor Store Settings page picks up opening hours, biography, and store category along with the module store options, and three security fixes tighten what vendors and non-admins can reach.

Privacy and security

• Fix: Restricted license refresh to administrators through an updated bundled Appsero client, so license actions stay with the marketplace owner.
• Fix: Restricted customer account updates through the REST API so vendors can no longer change a customer’s password.
• Fix: Patched a PHP object injection vulnerability in product meta data handled by the REST API.

Vendor dashboard

• New: The new vendor Store Settings page now accepts multiple opening hours per day, a store biography, and a store category, so vendors can show split trading hours and describe their store properly.
• Update: Module store options — Seller Vacation, store pickup, Live Chat, Store Support, Request for Quote, Order Min/Max cart limits, and EU compliance details — now open from the new vendor Store Settings page, so vendors set everything in one place.
• Fix: Vendor dashboard product pages now load normally with Dokan WPML active when the vendor’s subscription pack carries no category restriction, so those vendors can manage their products again.

Products

• Fix: New product tags that start with a number now save in the legacy product editor instead of being dropped, so numeric tags stay on the product.
• Orders and shipping
• Fix: Vendor cart minimum and maximum amounts now survive a store profile save that leaves those fields out, so Order Min/Max limits stay as the vendor set them.

Admin tools

• Fix: Dokan Pro modules now stay active after the nightly license check whenever the license is valid, so a working license no longer switches modules off overnight.

Dokan’s admin Settings is rebuilt around a new layout and reorganized menus, with every Lite and Pro module setting gathered into it and carried over automatically.

Payments

• Fix: Scheduled withdraw disbursements now run on the date shown in the vendor dashboard on sites outside UTC, with existing schedules adjusted automatically, so vendors are paid on the day they were promised.

Vendor dashboard

Fix: The daily vendor subscription check now sends an expiry alert to every vendor due one, so vendors hear about an expiring subscription in time to renew.

Admin tools

• New: The Dokan admin Settings has a redesigned layout and reorganized menus, so finding a given setting takes less hunting.
• New: Dokan Pro’s settings now live inside that same redesigned Settings area, with dedicated Shipment, Verification, and Social Onboarding pages, so Lite and Pro options sit together.
• Update: Every module’s settings — payment and withdraw methods, Delivery Time, Geolocation, Live Chat, Vendor Verification, Vendor Subscription, RMA, Wholesale, Store Support, Request for Quotation, and Printful — now open from the new Settings pages, so module options are no longer scattered across the admin.
• Update: Existing settings carry over automatically when the update runs, so nothing needs reconfiguring afterwards.

Fixes across PayPal checkout, shipping zones, and the vendor dashboard, with five security and permission fixes that tighten who can act on orders, refunds, and vendor data.

Payments

• Fix: PayPal Marketplace no longer marks an order as paid when the PayPal capture is declined, and a later genuine payment can still complete the order.
• Fix: The PayPal Marketplace “Standard Button” type is now honored on the WooCommerce checkout block, so the “Place order” button stays visible.
• Privacy and security
• Fix: Patched a stored cross-site scripting vulnerability in Product Q&A answers by sanitizing them on save and on load.
• Fix: Patched a cross-site scripting vulnerability in the legacy admin screens.
• Fix: Restricted marking an order as received to the logged-in customer who owns it.
• Fix: Restricted refund requests so a vendor can only submit them for their own orders.
• Fix: Hardened Printful so a size guide can only be added to the vendor’s own products.

Vendor dashboard

• Fix: The vendor statement report now counts and paginates its entries correctly instead of rendering an empty table.
• Fix: Cleared a React defaultProps warning on the vendor dashboard analytics report tables.
• Orders and shipping
• Fix: Vendor shipping methods now appear only in the shipping zone they belong to, instead of being offered in every zone.
• Fix: Delivery Time slots now display on the block checkout in the site’s 12- or 24-hour time format.
• Performance
• Fix: The Export/Import product listing data now loads only on the vendor dashboard instead of on every front-end page.

Admin tools

Fix: The “Create” and “Cancel” buttons in the Vendor Verification method modal are now aligned and sized consistently, and a double click no longer creates duplicate methods.