9 versions
QuickCal history.
Every release of QuickCal is archived here with its changelog, file size, and security scan result. Use the archive to roll back to a stable release or audit what changed between updates.
7 of 9 releases scanned clean
v1.0.24Latest
September 24, 20261.0 MBScanned
Other
- Moved missing WooCommerce order checks to a bounded background job instead of loading orders during booking page rendering
- Paginated Frontend Agents history, upcoming, and pending lists in the database at 50 appointments per page
- Processed abandoned unpaid appointments in bounded cron batches
Added
- the saved `every2hours` cleanup schedule and made invalid cleanup intervals safe
- WordPress regression coverage for the reported WorkSpa failures
September 6, 20261.0 MBScanned
Other
- Restricted customer appointment changes, cancellations, and payment actions to the signed-in appointment owner
- Restricted Booking Agent actions and exports to assigned calendars
- Disabled legacy demo appointment tools by default and protected opt-in use with administrator permissions and nonces
- Validated booking dates and time slots on the server and stopped trusting client-supplied appointment timestamps and user IDs
- Neutralized spreadsheet formulas in exported CSV cells
- Strengthened calendar feed tokens for new installations and escaped iCalendar text values against property injection
- Validated and safely rendered nested public appointment-form titles and related calendar/date/time values
- Hardened public calendar AJAX loaders against reflected attribute injection and malformed request values
- Closed remaining Booking Agent calendar boundaries in legacy picker and custom-timeslot AJAX routes
- Prevented Booking Agents from changing linked customer WordPress profiles without permission to edit that user
- Restricted failed-login redirects to validated same-site destinations
Added
- nonce and capability checks to Front-End Agents, CSV exports, WooCommerce actions, and dismissible notices
- regression coverage for appointment ownership, calendar authorization, booking input validation, and CSV safety
- end-to-end regression coverage for public appointment-form markup and nonce-without-authorization attempts
July 31, 20261.0 MBScanned
Fixed
- an unauthenticated stored cross-site scripting vulnerability in appointment custom fields
Other
- Sanitized submitted custom-field values before storage and escaped stored custom-field markup at every appointment display boundary
- Enforced the configured guest-booking and user-registration settings on unauthenticated appointment requests
v1.0.21Unavailable
July 24, 20261.0 MBScanned
Added
- an opt-in email setting to copy the site administrator on customer-initiated appointment cancellations
- regression coverage for cancellation notification recipients
Other
- Preserved the existing assigned Booking Agent or default notification recipient behavior when the new setting is disabled
- Prevented duplicate cancellation emails when the assigned recipient and site administrator use the same email address
Fixed
- custom calendar assignment lookup during front-end cancellations
v1.0.20Unavailable
May 20, 20261.0 MBScanned
Fixed
- fresh QuickCal activations so the bundled Font Awesome loader creates both valid default options and release metadata before Font Awesome initializes.
Removed
- a PHP 8.2+ dynamic-property deprecation from the bundled Font Awesome release provider.
v1.0.18Unavailable
May 11, 20261.0 MBScanned
Fixed
- disabled booking slots so they cannot be booked from the admin calendar after the date view reloads
Added
- server-side availability enforcement for disabled booking slots
- a focused regression test for disabled booking slot behavior
v1.0.17Unavailable
March 28, 20261.0 MBScanned
Added
- a structured local development and smoke-test workflow for QuickCal
- release tooling for GitHub Releases and hosted zip publishing
- safer WooCommerce order creation for admin-created paid appointments
Fixed
- a profile update notice caused by missing `_wpnonce`
- several PHP notices, warnings, and deprecations in request handling and rendering paths
- admin guest bookings so paid appointments can create linked WooCommerce orders
- translation loading timing issues on newer WordPress versions
- a PHP 8.4 deprecation in the bundled Font Awesome library
Improved
- admin booking stability for existing users, new users, and unpaid bookings
v1.0.15Unavailable
December 24, 20251.6 MB
* **IMPROVED:** - Appearance of variations to use title instead of slug where possible and make them more readable
* **IMPROVED:** - Support for WooCommerce High Performance Order Storage (HPOS)
* **FIXED:** - Issue where in some instances appointments were not properly cleared and dates became unviewable in backend calendar view
* **FIXED:** - Multiple instances of deprecated code
v1.0.16Unavailable
June 3, 20251.6 MB
* **FIXED:** - Issue where appointment details did not sync to related WooCommerce order
* **FIXED:** - Sensitive Data Exposure vulnerability
* **FIXED:** - Cross Site Request Forgery (CSRF) vulnerability
* **FIXED:** - Translation warnings
Why archive
Sometimes the latest release isn't the one you need. The archive lets you pin QuickCal to a known-good version, or roll back while a bug is investigated. Every release stays scanned and reachable.