Releases

= v5.3.4 ( Nov 05, 2026 ) =

new: Added a Black Friday 2026 offers page to the Dokan admin.
update: Added CartPilot and FlyAffiliate to the setup wizard's recommended add-ons, with a Show More option for the extra add-ons.
update: Adde 8000 d CartPilot and FlyAffiliate to the admin Extensions page.
fix: Prevented unauthenticated visitors from reading private product data through a crafted request made to look like an MCP request.
fix: The vendor customer list now counts only the vendor's own customers, so its totals and pages match the list and searches no longer reveal other registered users.
fix: Customers who buy from several vendors no longer receive duplicate order emails when WooCommerce's deferred emails feature is turned on.
fix: Improved compatibility with WooCommerce 11.3 so the vendor analytics pages keep their layout and no longer log deprecation warnings.
fix: Vendor registration forms no longer accept a shop URL that already belongs to another vendor.
fix: The new vendor dashboard order list no longer shows order status actions when the admin has turned off order status changes for vendors.
fix: The Reverse Withdrawal Invoice email now works in the WooCommerce email preview and test email instead of showing an error.
fix: Vendor dashboard reports no longer show "Something went wrong" after an update because a browser or CDN served outdated files.
fix: The commission settings now name the empty field and explain that 0 is allowed when a commission amount is missing.

Full Changelog: v5.3.3...v5.3.4

= v5.3.3 ( Oct 30, 2026 ) =

fix: Prevented guests from viewing multi-vendor parent orders, along with their notes and downloads, through the orders REST endpoint.
fix: Prevented public product REST endpoints from exposing vendor-only data such as download file links, vendor earnings, purchase notes, and private product details.
fix: The store contact form now sends email from the store's own address and uses the visitor's email only for replies, so it can no longer be used to spoof the sender or add extra recipients.
fix: Prevented subsite admins on a multisite network from changing the selling status of vendors who belong to other sites.
fix: Reverse withdrawal payments can no longer be discounted with coupons, and the vendor's balance is now credited only with the amount actually paid.
fix: Products created through the vendor products API now respect the vendor's selling status and are held for review when the vendor isn't allowed to publish directly.
fix: Vendor dashboard menus switched off by the admin now stay hidden in the collapsed sidebar and can no longer be opened from a direct link.
fix: A vendor's social profile links on the store page are now hidden when the Social Profile menu is switched off in the Dashboard Menu Manager.

Full Changelog: v5.3.2...v5.3.3

= v5.3.2 ( Oct 22, 2026 ) =

fix: Prevented tampered product attribute data from being turned into PHP objects when a vendor saves or edits a product, closing a PHP object injection vulnerability.
fix: Saving a vendor from the WordPress Users screen no longer resets their custom commission to the global rate.

Full Changelog: v5.3.1...v5.3.2

= v5.3.1 ( Oct 15, 2026 ) =

new: Add-ons can now adjust how an order's earnings are split between the vendor and the admin, so features like vendor-funded affiliate commissions show the correct amounts.
fix: Saving a downloadable product from the vendor dashboard no longer resets buyers' existing download limits, expiry dates, and download counts.
fix: Creating a vendor from the admin with selling enabled no longer loses the vendor's phone, address, payment details, and social links.
fix: Vendors can now see download permissions for variable products and variable subscriptions on an order.
fix: The admin dashboard now shows the actual error message when a section fails to load instead of a generic "An error occurred".
fix: REST API requests now return the real error message instead of failing with a server error when certain Dokan errors occur.

Full Changelog: v5.3.0...v5.3.1

= v5.3.0 ( Oct 08, 2026 ) =

new: Introduced a redesigned vendor Store Settings page in the new vendor dashboard.
new: Add-ons and extensions can now show their own options on the new vendor Store Settings page.
update: Admins can switch vendors between the new and classic Store Settings page from the Appearance settings, and existing sites stay on the classic page by default.
update: Added a dokan_product_editor_after_save action so features can save their own data right after a product is saved in the new product editor.
fix: Prevented vendors from changing a customer's password or login email through the customers REST endpoint.
fix: Prevented vendors from storing serialized PHP objects in product meta through the products REST endpoint, closing a PHP object injection vulnerability.
fix: Vendor store maps now open on the default location set in the Geolocation settings, and saving store settings no longer removes a vendor from geolocation search results.
fix: The setup guide now shows an error with a retry option when a step fails to load or save instead of silently moving on, and stops you from continuing while the required admin commission is empty.

Full Changelog: v5.2.1...v5.3.0

= v5.2.1 ( Sep 30, 2026 ) =

fix: Fixed the setup wizard failing to load due to an outdated UI package.

Full Changelog: v5.2.0...v5.2.1

= v5.2.0 ( Sep 30, 2026 ) =

new: Revamped the Dokan admin Settings with a redesigned layout and reorganized menus for easier navigation.
new: The revamped settings screen is opt-in: your existing settings carry over and stay in sync, and you can switch back to the classic screen at any time.
new: Extensions can add their own settings to the new settings screen through the dokan_get_admin_settings_schema filter.
fix: Prevented vendors from using the commission calculator to read another vendor's commission or earnings, and limited it to accounts that can manage products.
fix: The v3 order downloads REST endpoint no longer throws a fatal error for orders that grant download access to existing products.

Full Changelog: v5.1.3...v5.2.0

== Changelog ==

= v5.1.3 ( Sep 24, 2026 ) =

fix: The vendor dashboard navigation is no longer rebuilt on every request, so cron, Action Scheduler, and other background requests no longer do that work on each hit.
fix: The vendor product list now shows each product's real type instead of labeling unrecognized types as Simple.
fix: Prices on the vendor dashboard now follow the store's configured number of decimals, so a zero-decimal currency no longer shows trailing decimals.
fix: Vendors can now reorder product gallery images by dragging them in the new product editor.
fix: REST pagination links now point at the endpoint that actually served the request instead of the controller's shared base route.
fix: Stopped listening to a deprecated WooCommerce hook that flooded the debug log with notices on every vendor analytics page.

Full Changelog: v5.1.2...v5.1.3

== Changelog ==

= v5.1.2 ( Sep 17, 2026 ) =

update: Added FlyCRM to the setup wizard's recommended add-ons and removed Texty from that step.
update: Added FlyCRM to the admin Extensions page as an installable add-on.
fix: Dokan now falls back to a current AI model when the saved one has been retired, so AI content generation no longer fails and the admin AI model dropdown no longer appears blank.
fix: The Single Product Multi Vendor search field now renders correctly in the new product editor instead of showing a plain text box and a debug notice.

Full Changelog: v5.1.1...v5.1.2

== Changelog ==

= v5.1.1 ( Sep 10, 2026 ) =

fix: The Vendors screen's Pending tab now lists vendors whose selling status was never recorded, so the tab no longer shows a count with an empty list.
fix: The Pending vendors filter now runs as a single keyed subquery instead of stacked meta queries, so the Vendors screen stays fast on sites with many users.
fix: The new product editor now shows the category the vendor actually picked instead of its top-level parent.
fix: The store sidebar no longer collapses to a narrow column on the Storefront theme when the theme's store sidebar is enabled.
fix: The admin Status and Pro Features pages now load their translations instead of always showing English.
fix: The admin settings "Choose File" button and the vendor form's "Last Name" label are now translatable.

Full Changelog: v5.1.0...v5.1.1

v5.3.4

Uh oh!

v5.3.3

Uh oh!

v5.3.2

Uh oh!

v5.3.1

Uh oh!

v5.3.0

Uh oh!

v5.2.1

Uh oh!

v5.2.0

Uh oh!

v5.1.3

Uh oh!

v5.1.2

Uh oh!

v5.1.1

Uh oh!