15 versions
JetEngine history.
Every release of JetEngine is archived here with its changelog, file size, and security scan result. Use the archive to roll back to a stable release or audit what changed between updates.
15 of 15 releases scanned clean
v3.8.12Latest
July 14, 20265.9 MBScanned
Added
- Profile Builder. Allow selecting multiple roles for "Show menu for the role" option in "Profile menu";
- Listing grid. Add server-side signature for filtered query to prevent client-side tampering of listing arguments;
Other
- UPD: CCT. Allow to delete CCT item when its related single post is permanently deleted;
Fixed
- Query Builder. Avoid PHP warnings when condition "field" is non-string and ensure proper sanitization;
- Query Builder. Label dedicated relation tables with relation names in the SQL table selector;
- Dynamic Field + Gallery Slider. Set auto height by default;
- Dynamic Field. Reduce redundant inner wrapper and optimize DOM output;
- `[jet_engine]` shortcode. Sanitize output to prevent XSS;
- Components. Preview styles in the Block editor;
- Components. Prevent PHP warning when using Dynamic Field with empty value and no fallback;
- Replace unsafe `maybe_unserialize` usage with safe unserialize helpers across all components where it was needed.
June 19, 20265.9 MBScanned
Fixed
- Query Builder. Advanced SQL Query. More strict applied macros sanitizing to avoid SQL vulnerabilities through publicy allowed macros inputs;
- Data Stores. Reset datastore item counters when clearing Data Stores and CCT stores;
- Maps Listings. Improve escaping and accessibility for Location & Distance filter (aria labels, escaped attributes and option output);
- Components & Elementor views. Background dynamic image handling and Atomic Editor style inlining for components built with Elementor;
- Dynamic Visibility. Block editor error when using Dynamic Visibility;
- Maps Listings. Location Input default value for Maps Listings filter block;
- Angie compatibility;
- Blocks views. Editor styling issues after WordPress 7.0 update;
- Dynamic image preview for specific sizes in Listings — fall back to available thumbnail when requested size is missing;
- Listings. improve unique ID generation for listing objects to reduce collisions and make IDs stable per content object
- WooCommerce Product Image dynamic tag now uses configured fallback when no current product is available.
June 10, 20265.8 MBScanned
Fixed
- More strict sanitization of custom table queries to prevent potential SQL injections in some cases (appears as combination of the some backend CPT config and appropriate front-end setup);
- Legacy forms. Santizie status-related query parameters to prevent XSS vulnerability through the form status parmeter;
- Sanitize URL form fields and listing URLs using JetEngine URL schemes;
- Custom COntent Types. Only unserialize array-backed fields when reading items to avoid converting unauthorized serialized strings into real PHP objects.
May 28, 20265.8 MBScanned
Added
- Meta boxes. Field layout option (Inline/Stacked);
Other
- UPD: CCT + Query Builder. Intersect _ID IN values from initial query and existing filters;
Fixed
- Dynamic Calendar. Normalize event day bounds using site timezone to fix missing/incorrect multi-day rendering;
- Maps Listings. Marker REST access — add source-aware publish/access checks and handle unknown sources;
- Maps Listings. Apply JetSmartFilters currentQuery (jsf_query) for map popup requests;
- Glossaries. Fix handling of "0" custom checkbox values in glossary;
- Meta Boxes. Isolate WC variation meta field names to avoid collisions with parent product fields in variation meta box;
- Adjust Swiper pagination spacing to improve vertical gap and avoid overlap in listings/pagers;
- Potential XSS vulnerability in legacy forms module and PayPal handler;
- Potential PHP object injection when unsafe serialized data is stored into the post data;
- Potential SQL injection with some query types using navigation parameters for the listing grid AJAX handler.
May 7, 20265.8 MBScanned
Added
- Select All/Deselect All Option in the admin Checkbox Field;
- Plain number output option for Query Results Count dynamic tag;
Other
- UPD: Misc Settings. Default slider library switched to Swiper.js; preserve existing sites by adding migration path and admin guidance;
- UPD: Data Stores. Support user stores for post counts and allow custom handlers for count updates;
Fixed
- Rest API Listings. Ensure macro values are JSON-encoded and sanitized correctly to avoid malformed JSON;
- Dynamic Field. Fix wrapper HTML and alignment behavior for listing dynamic fields;
- Maps Listings. Fallback to find parent block ID for map initialization and avoid missing map id on some layouts;
- Dynamic Calendar. Restore correct local variable declarations and ensure calendar selectors remain backwards-compatible;
- Dynamic Calendar. Update JetSmartFilterSettings (start month/year) for multiday and regular calendars and set `custom_start_from` flag;
- Dynamic Visibility + Elementor. Ensure filters added for hidden elements are unregistered reliably to avoid blocking widget rendering;
- Meta boxes. Correctly handle saving/clearing custom option values and clear glossary cache after adding glossary entries;
- Meta boxes + REST API. Ensure repeater separate sub-fields and Advanced Date values are properly handled when updated via REST API;
- Listings. Properly scope Elementor dynamic CSS to listing items and generate stable per-item identifiers;
- Swiper/carousel CSS. Prevent global forcing of anchor display to flex; scope and add safe fallback to avoid layout breaks.
Why archive
Sometimes the latest release isn't the one you need. The archive lets you pin JetEngine to a known-good version, or roll back while a bug is investigated. Every release stays scanned and reachable.