Dokan Multivendor Plugin Changelog & Latest Updates

August 3, 2026

Fix: Resolved an issue where Apple Pay was not opening inside the Stripe Express Payment Element when using Safari.
Fix: Improved security in the Geolocation map info windows by safely handling vendor-supplied shop names, titles, and links to prevent stored cross-site scripting.
Fix: Ensured product add-on groups can only be deleted by the vendor who owns them.
Fix: Restricted the all-order-logs CSV export to marketplace administrators, ensuring vendor order and earnings data remains private.

July 27, 2026

Update: Removed the duplicate Tailwind framework from the admin and dashboard stylesheets, making the asset files smaller and cleaner.
Fix: Resolved an issue where repeated partial refunds failed for PayPal Marketplace orders by using a unique invoice reference for each refund.
Fix: Improved security in the Live Chat script by safely handling the vendor shop name and email to prevent stored cross-site scripting.
Fix: Ensured bookable persons can only be removed from booking products owned by the vendor.

July 22, 2026

New: Added auction product support to the new vendor product editor, allowing vendors to create and edit auction products without using the legacy form.
Update: The Stripe Express payment method now appears in Block Checkout only when all vendors in the cart have completed their onboarding.
Fix: Prevented duplicate order notes from being added to single-vendor orders paid through Stripe Express.
Fix: Improved security in the Booking module by preventing stored cross-site scripting through customer names and email addresses in the Manage Bookings list.
Fix: Ensured product add-ons can only be edited by the vendor who owns them.
Fix: Ensured MangoPay account signup, disconnection, and saved card actions can only be performed for the vendor’s own account.
Fix: Ensured vendors can only update or delete reviews left on their own products.
Fix: Ensured auction products can only be edited by the vendor who owns them.
Fix: Ensured ShipStation shipment notifications are only applied to the vendor’s own orders.

July 14, 2026

New: Added a Clear Dokan Caches tool to the admin Tools page, allowing admins to refresh cached marketplace data with a single click.
New: The Manage Permissions page now displays the staff member’s name, making it easier for vendors to identify whose permissions they are editing.
Update: Tax Status and Tax Class fields are now hidden from the vendor product form when tax calculations are disabled, keeping the form cleaner and removing unnecessary options.
Fix: Ensured that admin-only subscription packs remain completely hidden from vendors, including on the subscription page and during checkout.
Fix: Fixed a fatal error that could occur when generating a Credit Note while the Subscription module was enabled.
Fix: Improved security in the Booking module by ensuring bookings and booking resources can only be viewed, edited, or deleted by their rightful owner.
Fix: Improved security by ensuring vendor delivery time updates can only be applied to the vendor’s own orders.
Fix: Patched a cross-site scripting (XSS) vulnerability in the Elementor store template preview to improve security.

June 26, 2026

Fix: Improved security in the Live Chat (Tawk.to) module by preventing stored XSS attacks through vendor Property IDs and Widget IDs in the storefront chat script.
Fix: Improved seller-wise shipping package splitting to ensure it works correctly even when the WooCommerce cart is not fully initialized.
Fix: Improved Commission API category handling so the earning preview in the product editor always displays accurate commission calculations.
Fix: Ensured vendors can still view their own draft and hidden products in the new dashboard product list when the Request for Quotation module is enabled.
Fix: Improved the layout of the Product Q&A table in the admin panel by refining column widths for better readability and consistency.

What’s New