
The new vendor Store Settings page picks up opening hours, biography, and store category along with the module store options, and three security fixes tighten what vendors and non-admins can reach.
Privacy and security
- Fix: Restricted license refresh to administrators through an updated bundled Appsero client, so license actions stay with the marketplace owner.
- Fix: Restricted customer account updates through the REST API so vendors can no longer change a customer’s password.
- Fix: Patched a PHP object injection vulnerability in product meta data handled by the REST API.
Vendor dashboard
- New: The new vendor Store Settings page now accepts multiple opening hours per day, a store biography, and a store category, so vendors can show split trading hours and describe their store properly.
- Update: Module store options — Seller Vacation, store pickup, Live Chat, Store Support, Request for Quote, Order Min/Max cart limits, and EU compliance details — now open from the new vendor Store Settings page, so vendors set everything in one place.
- Fix: Vendor dashboard product pages now load normally with Dokan WPML active when the vendor’s subscription pack carries no category restriction, so those vendors can manage their products again.
Products
- Fix: New product tags that start with a number now save in the legacy product editor instead of being dropped, so numeric tags stay on the product.
- Orders and shipping
- Fix: Vendor cart minimum and maximum amounts now survive a store profile save that leaves those fields out, so Order Min/Max limits stay as the vendor set them.
Admin tools
- Fix: Dokan Pro modules now stay active after the nightly license check whenever the license is valid, so a working license no longer switches modules off overnight.