v5.3.0 | October 8, 2026

The new vendor Store Settings page picks up opening hours, biography, and store category along with the module store options, and three security fixes tighten what vendors and non-admins can reach.

Privacy and security
  • Fix: Restricted license refresh to administrators through an updated bundled Appsero client, so license actions stay with the marketplace owner.
  • Fix: Restricted customer account updates through the REST API so vendors can no longer change a customer’s password.
  • Fix: Patched a PHP object injection vulnerability in product meta data handled by the REST API.
Vendor dashboard
  • New: The new vendor Store Settings page now accepts multiple opening hours per day, a store biography, and a store category, so vendors can show split trading hours and describe their store properly.
  • Update: Module store options — Seller Vacation, store pickup, Live Chat, Store Support, Request for Quote, Order Min/Max cart limits, and EU compliance details — now open from the new vendor Store Settings page, so vendors set everything in one place.
  • Fix: Vendor dashboard product pages now load normally with Dokan WPML active when the vendor’s subscription pack carries no category restriction, so those vendors can manage their products again.
Products
  • Fix: New product tags that start with a number now save in the legacy product editor instead of being dropped, so numeric tags stay on the product.
  • Orders and shipping
  • Fix: Vendor cart minimum and maximum amounts now survive a store profile save that leaves those fields out, so Order Min/Max limits stay as the vendor set them.
Admin tools
  • Fix: Dokan Pro modules now stay active after the nightly license check whenever the license is valid, so a working license no longer switches modules off overnight.