Changelogs

What's new

• Add External Product with per-product URL, button text, link target, nofollow, sponsored, and price-visibility controls.
• Replace storefront purchase controls across product pages, cards, and standalone FluentCart purchase blocks.
• Redirect legacy instant-checkout links and reject external products in local cart and checkout validation.
• Remove the bundled FluentCart Core and Pro source; FluentCart is now an independently installed dependency.

Requirements

• WordPress 6.0 or newer
• PHP 7.4 or newer
• FluentCart 1.5.5 or newer for External Product and Multi-Currency Checkout

What's Changed

• Improved: SVG Icon block now uses block metadata, lazy paginated icon loading, native block supports, px/em/rem sizing, original-color and monochrome modes, accessible labels, missing-icon recovery, and keyboard-friendly selection.
• Security: SVG sanitization now requires a real SVG root, restricts styles and local references, blocks external href values, and prefixes definition IDs to prevent collisions.
• Fixed: Fresh PWA settings now register rewrite endpoints immediately, and the offline application shell returns a cacheable success response so service-worker precaching can complete.
• Added: True lazy module registry. A frontend request with all modules disabled loads no feature class files; enabling one module loads only that feature and shared dependencies.
• Added: Versioned settings export/import with dry-run differences, module validation, default custom-code redaction, and an explicit code opt-in.
• Added: Privacy-conscious diagnostics download with software versions, enabled modules, writable-path status, and rewrite-rule health. Task content, redirects, users, secrets, and site URLs are excluded.
• Added: Redirect CSV import/export with common column aliases, all-or-nothing dry runs, and duplicate, wildcard, loop, and chain validation.
• Added: Opt-in bounded 404 monitor with retention, row caps, path exclusions, bot/admin/API filtering, referrer-origin-only storage, purge, ignore, and redirect-prefill actions.
• Added: Assumption Detection Site Health status, configurable scheduled scans, stale/failed scan distinction, and opt-in deduplicated email summaries.
• Added: Content Integrity snapshot differences for links, headings, H1s, and word count, plus bounded audit metadata for baseline actions.
• Added: Pull-request CI across PHP 7.4 through 8.5, WordPress Coding Standards, PHPUnit coverage, JavaScript/shell checks, version consistency, and distribution assertions.
• Changed: Admin bootstrap is now a small router with dedicated module, portability, and Site Health controllers.
• Fixed: Task Manager and Redirect Manager JSON updates now use locking, verified same-directory temporary files, and atomic replacement to prevent lost concurrent writes.
• Fixed: Invalid JSON and storage failures preserve the last known file and surface an actionable admin error instead of silently appearing empty.
• Fixed: SVG Icons is disabled on fresh installs, matching the explicit-activation policy used by every module.

= 1.4.7 = = 1.4.8 = Adds the upgraded SVG Icon block, safe settings portability, CSV redirects, an opt-in 404 monitor, native Site Health signals, true lazy module loading, atomic file storage, and pull-request quality gates. Existing option names, block names, shortcode syntax, admin URLs, hooks, and JSON formats remain compatible.

Commits

• Improve SVG Icon block for 1.4.8 (9b797b8)
• Fix PWA offline precaching on fresh installs (#49) (7ec31cc)
• Ship Dynamic Functionalities 1.4.8 (#48) (85cc110)

Added

• Added configurable automatic cache clearing when public posts, pages, products, and custom post types are published or updated, with related-page, post-only, full page-and-edge cache, and disabled modes.
• Expanded the recommended related-page purge to cover author and public taxonomy archives in addition to the post, homepage, and post-type archive.

Fixed

• Stopped WordPress revision cleanup from purging the homepage through the real-content deletion hook, so post-only and disabled publishing policies retain their intended scope.

Core Forms 4.6.0 connects forms, payments, digital products, and software licensing in one native WordPress workflow.

• Rebuilt Products & Licensing around searchable product, license, and order tables, product workspaces, setup checks, operational alerts, activity timelines, and validated plugin or theme release ZIPs.
• Added product icons, sample-product generation, and optional purchase and renewal form generation for every active plan.
• Added currency-to-gateway routing with multiple compatible gateways and a preferred gateway for each currency, plus native product checkout without a stored Core Form.
• Expanded purchase templates for Stripe, PayPal, Razorpay, and Polar with optional business, tax, billing, phone, website, and order-note fields.
• Added permissioned commerce REST endpoints and WordPress 6.9+ MCP-discoverable abilities for products, plans, releases, orders, licenses, subscriptions, downloads, gateways, and sample data.
• Added blocks and shortcodes for product catalogs, product lists, single products, prices, buy buttons, checkout, and the customer dashboard, grouped in the Core Forms block category.
• Removed customer emails and full license keys from newly generated renewal and package URLs, added enumeration-safe dashboard access requests, and recorded non-secret commerce activity events.
• Corrected the plugin and installation-documentation product URL to core-forms.com.

Requires WordPress 6.4+ and PHP 8.1+.

Core Forms 4.5.0 makes standalone forms easier to share and stops unrelated pages from paying the CSS cost of features they do not use.

Highlights

• Add clean, configurable standalone URLs such as /collect/form-slug/, while preserving legacy ?cf-form links.
• Load frontend assets from each rendered form’s actual capabilities; basic forms no longer load Smart Forms CSS.
• Support native Post/Redirect/Get submissions when AJAX is disabled.
• Add global and per-form analytics controls, explicit partial-entry capture, consent filtering, runtime diagnostics, and form-usage discovery.
• Fix SQLite activation migrations, poll-cookie scope, and AJAX validation responses.

Verification

• 190 PHPUnit tests / 386 assertions
• PHPStan and ESLint clean
• WordPress Studio clean activation and upgrade tests on WordPress 7.0.2, PHP 8.2, SQLite
• Playwright coverage for AJAX success/error, asset gating, calculations, native submissions, and no-form pages

The licensed updater serves the immutable 4.5.0 package with SHA-256 fc8759e85d4a841556311a2c670e1de7c4e4bd42dcc0e684449acc7cadd3f2d5.

Fixes currency switches that could change only the symbol while retaining the previous numeric amount.

• Binds currency REST reads and writes to the exact FluentCart checkout hash.
• Reprices stale cart amounts before updating symbols or gateway routing.
• Keeps catalog formatting from inheriting checkout-only currency symbols.
• Preserves currency-aware gateway validation for INR, USD, EUR, and GBP.

Complete local-currency support for FluentCart block checkouts.

• Resolves currency before WordPress constructs checkout inner blocks.
• Restores saved cart currency on every checkout request.
• Synchronizes FluentCart normalized formatting with cart currency.
• Keeps symbols, selector state, totals, and currency-based gateway routing aligned.

Checkout currency-context restoration patch.

• Restores the saved cart currency into FluentCart formatting on every checkout request.
• Prevents stale base-currency symbols and selector state after automatic repricing.
• Keeps totals and currency-based gateway routing synchronized.

Checkout rendering synchronization patch.

• Resolves local currency before WordPress pre-renders FluentCart checkout inner blocks.
• Keeps the first response currency symbol, selector, totals, and gateway routes synchronized.
• Retains shortcode and block-checkout compatibility from 2.1.1.

Patch release for FluentCart checkout-block compatibility.

• Resolves location currency before block checkout prices render.
• Shows the currency selector on block and shortcode checkouts.
• Synchronizes currency-aware payment gateway routing with block checkout totals.

Local currency at checkout

• Automatically selects an enabled local currency when checkout loads.
• Resolves location from billing country, shipping country, then Cloudflare visitor country.
• Reprices the full cart in the configured default currency when the local currency is disabled or cannot price every item.
• Preserves manual customer currency choices and refreshes automatic choices when checkout country changes.
• Keeps checkout display, gateway routing, REST hydration, cart state, and order currency synchronized.

GT Extensions for FluentCart 2.0.0 replaces the old per-variation currency label with a complete multi-currency checkout system.

Highlights:

• One authoritative currency per cart, order, transaction, and subscription.
• Exact per-variation price books with manual or Frankfurter exchange-rate fallback.
• Currency-to-payment-gateway routing with preferred gateways and server-side validation.
• Server-side cart repricing for items, fixed coupons, shipping, fees, and signup amounts.
• Storefront currency selector and [gtfc_currency_selector] shortcode.
• FluentCart product-editor controls for exact local prices.
• Redesigned responsive settings, diagnostics, rate markup, rounding, and missing-price behavior.

Multi-currency checkout requires FluentCart 1.5.5 or newer. Version 2.0.0 is designed for two-decimal currencies; test zero-decimal currencies separately before production use.