JetEngine icon

15 versions

JetEngine history.

Every release of JetEngine is archived here with its changelog, file size, and security scan result. Use the archive to roll back to a stable release or audit what changed between updates.

15 of 15 releases scanned clean
v3.8.15Latest
September 9, 20266.0 MBScanned
Added
  • Dynamic Calendar. Auto-month switching option to jump to the closest month with posts;
Other
  • UPD: Map Listings. Allow to load Google Maps API asynchro asynchronously;
  • UPD: Listings. Add settings signature to listing-related AJAX requests to ensure this part of the request can't be modified outside;
  • UPD: Meta Fields UI/UX. Add `sanitize callback` option for the textarea fields;
Fixed
  • Maps listings. Improve Google Maps info box auto-pan to handle dynamic content;
  • Block views. Dynamic data. Ensure dynamic data output is properly escaped when used in HTML attributes;
  • Dynamic Link. Issue with `jet-engine-optimized-dom` option + CSS selectors;
  • Relations + Query Builder. Safeguard `after_query_setup` to avoid fatal errors when relation or args are missing and preserve previously-built relation data;
  • Query Builder. Posts query now applies saved `post__not_in` exclusions to runtime filtered `post__in` to avoid returning unintended posts;
  • Meta Boxes UI. Taxonomy metabox header + RTL;
  • Ensure listing grid allowed query IDs are validated server-side and sanitize exported `allowed_query_ids` to prevent client injection;
  • Gallery & listing sliders. Set initial slider height when available and ensure swiper slide classes are present for proper slider initialization.
August 25, 20266.0 MBScanned
- UPD: Legacy Forms. Convert field values to numbers before calculations through the calculated fields to prevent unsafe JS execution through the form.
August 19, 20266.0 MBScanned
- UPD: Shortcodes. Add `sanitize` parameter to secure the output for cases when shortcode outputs user-inputed data; - UPD: Options Pages. Add `sanitize` parameter to option page fields to allow make the options storing more secure and controlled.
August 17, 20266.0 MBScanned
Fixed
  • Timber Views. Prevent shortcodes from being compiled as Twig to prevent user-inputted RCE.
August 10, 20266.0 MBScanned
Other
  • UPD: Multiday calendar. Add "Current Week Day" styling controls and highlight the current day;
Fixed
  • Dynamic Calendar. Reinitialize Bricks widget scripts when opening mobile calendar events;
  • Profile Builder. Listing dynamic CSS issue;
  • Listing block styles are now properly inlined for AJAX-rendered listings;
  • Listings. Prevent dynamic-visibility checks while preloading listing item assets to avoid duplicate checks and ensure assets are loaded;
  • WooCommerce. Listing quantity handling and optional variation-to-WC_Product conversion;
  • Dynamic Terms. Custom SVG icon is not rendered in Bricks;
  • Taxonomies. Normalize taxonomy `object_type` values to support multi-object types and avoid registration issues;
  • Maps Listings. Normalize map bounds on sync event to prevent errors in some cases;
  • WPML compatibility. Translate taxonomy labels when registering JetEngine taxonomies
July 29, 20266.0 MBScanned
Fixed
  • Dynamic Calendar. Escape unsafe macros output before print in Multiday calendar
July 28, 20266.0 MBScanned
Fixed
  • Prevent unsafe files uploads in Forms (Legacy) module (thanks to Nguyễn Đức Hòa).
July 22, 20266.0 MBScanned
Added
  • ADD. Admin UI. Add `Add new` and `Back to list` buttons to base admin instance pages;
  • JetFormBuilder. Add Delete Custom Content Type Item action;
Other
  • UPD: Admin UI. Improve conditional visiblity handling for the fields inside meta boxes;
  • UPD: Listing Grid. Change default listing template structure to use Container for Elementor listing templates;
Fixed
  • Admin UI. Issue with meta boxes styling on the Woo product pages after latest WP/Woo updates;
  • Query Builder. Correctly process WC product query date clauses;
  • Elementor preview. Ensure WP block Columns styles are enqueued in preview mode;
  • Elementor dynamic tag fatal on profile pages when custom field contains non-scalar object;
  • Dynamic Calendar. Calendar-related AJAX requests now sends calendar type for multiday calendars to allow proper server-side rendering and caching.
July 14, 20265.9 MBScanned
Added
  • Profile Builder. Allow selecting multiple roles for "Show menu for the role" option in "Profile menu";
  • Listing grid. Add server-side signature for filtered query to prevent client-side tampering of listing arguments;
Other
  • UPD: CCT. Allow to delete CCT item when its related single post is permanently deleted;
Fixed
  • Query Builder. Avoid PHP warnings when condition "field" is non-string and ensure proper sanitization;
  • Query Builder. Label dedicated relation tables with relation names in the SQL table selector;
  • Dynamic Field + Gallery Slider. Set auto height by default;
  • Dynamic Field. Reduce redundant inner wrapper and optimize DOM output;
  • `[jet_engine]` shortcode. Sanitize output to prevent XSS;
  • Components. Preview styles in the Block editor;
  • Components. Prevent PHP warning when using Dynamic Field with empty value and no fallback;
  • Replace unsafe `maybe_unserialize` usage with safe unserialize helpers across all components where it was needed.
July 6, 20265.9 MBScanned
Fixed
  • Query Builder. Advanced SQL query. Rework macros sanitizing to effectively prevent potential SQL-injections but avoid false-positives.

Why archive

Sometimes the latest release isn't the one you need. The archive lets you pin JetEngine to a known-good version, or roll back while a bug is investigated. Every release stays scanned and reachable.