We just released WPML 4.6.13 and WooCommerce Multilingual 5.3.7, which address low-level security issues, improve compatibility, and fix bugs.
WPML 4.6.13 Updates
Security Update
After various media outlets published a story about this security issue, we wrote a separate announcement. It clarifies the timeline, how it affects WPML users, and how we worked with Wordfence to fix it.
This WPML release fixes a security vulnerability that could allow users with certain permissions to perform unauthorized actions. This issue is unlikely to occur in real-world scenarios. It requires users to have editing permissions in WordPress, and the site must use a very specific setup.
However, as with all security fixes, we advise you to update to this latest version to ensure the highest level of security for your sites.
Compatibility Fixes
This WPML release also provides two compatibility enhancements:
- Fixed various deprecation notices with PHP 8.2
- Fixed a PHP notice that appeared when using the Google XML Sitemaps plugin
WooCommerce Multilingual 5.3.7
Security Update
This WooCommerce Multilingual update fixes a low-level security issue where certain nonce validations were missing on AJAX requests.
Support for the Global Unique ID Field
We added translation support for the Global Unique ID, a new field that WooCommerce 9.2 will introduce with its release on August 20th.
This field has a behavior similar to SKU, allowing you to use any type of text while keeping the value unique across all products. The field is available both for main products and variations.
This field is copied and locked for translations, similar to the SKU field. The WCML 5.3.7 update ensures it remains locked on all translated products.
Bugfixes
WooCommerce Multilingual 5.3.7 includes several improvements and bug fixes for a smoother experience:
- Fixed the display of a currency name in settings when it has HTML entities
- Better default format for the Euro currency
- Fixed the wrong currency displaying in the Standalone mode when updating the quantity in the cart
For a list of all the fixes, see the WooCommerce Multilingual 5.3.7 changelog.
Update Now
We strongly encourage you to update to WPML 4.6.13 and WooCommerce Multilingual 5.3.7 to benefit from these improvements.
In your site’s admin, go to the Plugins page. This update should display as available so simply click to update WPML.
Questions or Comments?
If you have any questions or comments, let us know in the comments below.
The update to the newest versions doesn’t appear on my plugins page
Hi there,
Sometimes, it takes up to 24 hours for the update to reach all websites. If you don’t want to wait, you can try going to Plugins → Add New Plugin and clicking over to the Commercial tab, where you can click to Check for updates. Or, you can manually download the newest WPML and WCML versions from the Downloads page of your WPML account.
Hello,
Has the issue mentioned in this link been resolved?
https://wpml.org/errata/php-warning-preg_match-unknown-modifier/
Please let me know!
Thank you.
Hi! Yes, I just checked and this issue is fixed in WPML 4.6.13. 🙂 We will mark the known issue page as solved.
WPML Multilingual CMS 4. 6. 11과 WPML String Translation 3.2.12 모두 파일 권한에 문제가 있다며 최신 버전으로 자동업데이트가 안되고 있습니다. 수동으로 업데이트 하려고 해도 파일 권한 문제로 플러그인 삭제도 안되고 있는 상태합니다. OTGS Installer도 깔았다너 이것도 활성화가 계속 안되고 있는 상황입니다. 어떻게 해야 되나요?
Hi there,
Can you please open a ticket in our Support forum? Our team will be able to help you.