Release v1.0.23
QuickCal v1.0.23
What's new in v1.0.23
QuickCal v1.0.23 was released on . QuickCal is a powerful and user-friendly appointment booking plugin for WordPress. See the full changelog below and compare with the complete version history.
Release details
Released
1.0 MB
File available
Changelog
Other
- Restricted customer appointment changes, cancellations, and payment actions to the signed-in appointment owner
- Restricted Booking Agent actions and exports to assigned calendars
- Disabled legacy demo appointment tools by default and protected opt-in use with administrator permissions and nonces
- Validated booking dates and time slots on the server and stopped trusting client-supplied appointment timestamps and user IDs
- Neutralized spreadsheet formulas in exported CSV cells
- Strengthened calendar feed tokens for new installations and escaped iCalendar text values against property injection
- Validated and safely rendered nested public appointment-form titles and related calendar/date/time values
- Hardened public calendar AJAX loaders against reflected attribute injection and malformed request values
- Closed remaining Booking Agent calendar boundaries in legacy picker and custom-timeslot AJAX routes
- Prevented Booking Agents from changing linked customer WordPress profiles without permission to edit that user
- Restricted failed-login redirects to validated same-site destinations
Added
- nonce and capability checks to Front-End Agents, CSV exports, WooCommerce actions, and dismissible notices
- regression coverage for appointment ownership, calendar authorization, booking input validation, and CSV safety
- end-to-end regression coverage for public appointment-form markup and nonce-without-authorization attempts
Compatibility
- Requires WordPress
- 5.0
- Tested up to
- 6.8
- Requires PHP
- 7.4