12 versions
Woocommerce Wishlists history.
Every release of Woocommerce Wishlists is archived here with its changelog, file size, and security scan result. Use the archive to roll back to a stable release or audit what changed between updates.
12 of 12 releases scanned clean
August 24, 202616.3 MBScanned
Fixed
- Empty wishlists were being created for requests that could not add anything. On a variable product, following the add-to-wishlist link without choosing options created the list first and only then discovered there was nothing to put in it, leaving it behind - so search engine crawlers, which follow that link, produced one empty temporary list per visit. One store accumulated 11,000 of them. The product is now resolved and checked before any list is created, so a request that cannot add anything leaves nothing behind. Existing empty lists are not removed by this update; they can be deleted safely.
- Choosing a variation through the add-to-wishlist link failed with "Please choose product options" even when the options were named in the URL. The variation lookup read only posted data, while the link is a normal link and carries its attributes in the query string. It now reads both, matching the validation immediately after it, which always did.
v2.3.20Unavailable
August 12, 2026153.2 KBScanned
Fixed
- On single-site WordPress, deactivating WooCommerce while Wishlists was active caused a fatal error on both the front end and wp-admin instead of the "requires WooCommerce" notice, locking the site out entirely. The load-order check added in 2.3.18 called wp_get_active_network_plugins(), which WordPress only defines on multisite. Affects 2.3.18 and 2.3.19.
- The view-a-list page answered 200 with an empty list body for any wlid value, which let crawlers enumerate list IDs indefinitely and leaked whether a given list existed. Requests for a list that does not exist, or that the visitor is not allowed to view, now return a real 404. Filterable via 'wc_wishlists_404_invalid_list'.
Improved
- The extension now initializes on the 'plugins_loaded' hook and checks for WooCommerce with class_exists(), replacing the custom active-plugins scan. Every active plugin has been loaded by that point, so the check is reliable regardless of plugin load order without inspecting WordPress internals. The 'Requires Plugins: woocommerce' header governs activation, but WordPress still loads the plugin when WooCommerce is deactivated by other means, so the runtime check remains.
- The wishlist pages now send noindex, nofollow via both an X-Robots-Tag header and the robots meta tag, so they are excluded from search indexes by default. Filterable via 'wc_wishlists_noindex_pages'.
- WC_Wishlists_Wishlist::get_wishlist() no longer writes to the object cache when a list ID does not resolve. The stored value could never be read back (wp_cache_get() cannot distinguish a cached false from a cache miss), so it cost a cache write per request without ever saving a query - noticeable when a crawler requests many invalid list IDs.
Added
- WC_Wishlists_Pages::is_current_page() to test whether the current request is a wishlist page (is_wishlist_page() returns the configured page ID and is not a request-context check).
v2.3.19Unavailable
July 9, 2026150.2 KBScanned
Fixed
- Restored the $wishlists global used by the [wc_wishlists_button] shortcode; a 2.3.18 change stopped setting it, causing a fatal error (method call on null) wherever that shortcode rendered the wishlist button.
v2.3.18Unavailable
June 29, 2026150.2 KBScanned
Fixed
- Wishlists could silently fail to load when it initialized before WooCommerce in the plugin load order (the common case, since "woocommerce-wishlists" sorts before "woocommerce" alphabetically) - which removed the Wishlists settings tab and all functionality. Initialization now runs on the 'plugins_loaded' hook so the WooCommerce dependency check is reliable regardless of load order.
- Corrected the admin settings and wishlist singletons to store self::$instance, preventing duplicate initialization.
Improved
- Tested up to WooCommerce 10.9.
v2.3.17Unavailable
June 12, 2026149.4 KBScanned
Fixed
- Removed an invalid WooCommerce feature compatibility declaration ('product_blocks') that was triggering memory exhaustion during HPOS configuration on WordPress 7.0 / WooCommerce 10.8. The plugin now only declares its valid HPOS ('custom_order_tables') compatibility.
Improved
- Replaced the legacy is_woocommerce_active() bootstrap shim with the standard 'Requires Plugins: woocommerce' header and a class_exists( 'WooCommerce' ) runtime guard.
v2.3.15Unavailable
May 4, 2026146.4 KBScanned
Improved
- Tested up to WordPress 6.9
- Tested up to WooCommerce 10.7
v2.3.14Unavailable
March 17, 2026146.4 KBScanned
Improved
- Tested up to WordPress 6.9.1
- Tested up to WooCommerce 10.6
Other
- WP and WC compatibility tags. PHPCS fixes
Why archive
Sometimes the latest release isn't the one you need. The archive lets you pin Woocommerce Wishlists to a known-good version, or roll back while a bug is investigated. Every release stays scanned and reachable.