What's Changed
Feature
- System upgraded to Laravel 12, now fully compatible with PHP 8.4.
- Integrated AI Smart Customer Service Assistant + Knowledge Base (available as add-on plugin).
- WooCommerce API support for connecting with mainstream ERP systems (available as add-on plugin).
- New Customer Data Dashboard in admin: visitor trends, traffic sources, conversion rates, funnel analysis, and more.
- Homepage Editor fully upgraded with a more user-friendly interaction.
- Frontend UI upgrade: new fonts, refreshed icons, and modernized button styles.
- Backend UI overhaul: new color scheme, improved layout, and smoother form & list interactions.
- Frontend product search: displays trending keywords + real-time preview results.
- Theme color modes in admin: light, dark, or auto (system adaptive).
- Product detail pages now support adding YouTube video links.
- Main product images can be uploaded directly via drag & drop from local files.
- New Store Name setting: applied consistently across emails, login page, and admin.
- Custom Email Template Plugin (available as add-on plugin).
- Category pages now support category descriptions and images.
- Bulk edit for products: categories, stock, and prices (available as add-on plugin).
- Customers can now enter tracking numbers when returning products in after-sales service.
- Users can delete their own accounts from the profile settings.
- After purchasing a License, copyright info will sync across frontend and backend.
- Debug Mode option in system settings for easier troubleshooting.
- Checkout form fields for phone and postal code can be set as optional/required.
- If email configuration fails, customers can still register; system logs and notifies admin.
- SendCloud added as a new email engine option.
- Each SKU of multiple specifications of products can choose the status of on-shelf and off-shelf
- Auto-fill calling code via IP
Bugfix
- Resolved security vulnerabilities in homepage design modules to prevent secondary SQL injection
- a stored XSS vulnerability in the product video feature to prevent malicious scripts
- Added address ownership validation in the checkout process to prevent information leakage
- Added permission checks for guest checkout to prevent unauthorized access to other orders
- Patched SQL injection vulnerabilities in admin product and brand queries to secure the database
- Added product ownership validation in the returns process to prevent order data leakage
- Product placeholder image display issues
- Hover display bug for single-image products
- Incorrect "Disabled" status in brand search
- Custom CDN URL failure and order pagination reset
- Image/Text Slider error occurring after image deletion.
- Image display issues caused by file path formatting in sliders.
- Video playback rendering glitch on Product Detail pages.
- Category data missing when navigating paginated blog post lists in the admin panel.
- Fixed multiple serious CVE security vulnerabilities
- Issue with product detail description module overflowing the screen on mobile devices.
- Error occurring when currencies are disabled.
- Display error on the frontend when countries or provinces are disabled.
- Delete button not working when removing images in the footer decoration.
- When switching currencies on the front-end category page, the price filter data is incorrect.
- Inaccurate product browsing data in backend reports
- Backend product classification logic error
- The plugin homepage editor module is not compatible with php8.4
- The problem of the editor browser icon not being displayed on the homepage\footer
- Adding products with multiple specifications to the shopping cart even if the specifications are not selected
- The email logo is displayed abnormally in Google Mail
- Problems that occur when product data on the homepage is disabled
- Brand product list without filtering, disabled products
- After changing the custom path in the backend, the system settings form submission error occurred
- Database migration file error, causing incompatibility with PostgreSQL
- After-sales applications can be submitted repeatedly.
- Bug when deleting submenus in the admin navigation.
- Fixed several known bugs
Optimize
- Enhanced security via upgraded HTTP client protocols and strengthened host trust mechanisms.
- Upgraded Stripe payment security validation to prevent fraudulent paid orders
- Added PayPal compatibility for legacy NVP/SOAP APIs
- Enhanced file manager path validation, restricting operations strictly to the catalog directory
- Core directory structure optimization for the system.
- Database schema optimization: unified status and type fields.
- Multi-specification product display: shareable specification URLs, SKU images displayed when switching specifications, etc.
- Product editing page: fully upgraded UI for editing modules.
- Admin file manager now supports drag-and-drop uploads with simplified steps.
- Merchants can configure a “Latest Products” module link in the navigation.
- Buyers can request a refund before shipment once the order is successfully paid.
- When using PayPal settlement, current currency is automatically converted into a supported settlement currency.
- Product images now support WebP/GIF formats.
- In product description editing, images copied from the web will be automatically saved locally.
- After downloading a plugin from the marketplace, merchants can jump directly to the plugin list and locate the plugin.
- Order statuses are now distinguished by colors.
- System settings and plugin list modules upgraded with card-style UI for a clearer and more convenient experience.
- Role permission configuration simplified in the admin panel.
- Product list in admin now shows a preview of the main product image, making it easier to enter the edit page.
- Category list in admin: added sorting field.
- Contact email and notification sending email are now decoupled for independent configuration.
- In the homepage editor module editing state, a highlighted border is displayed
- The length of the blog summary field is 500
- In the front-end personal center, add a "Status" column to my after-sales list.
- How to obtain Token in the plugin market.
- For products with multiple specifications, if you only select one specification, the corresponding pictures will be displayed.
- Added a dynamic model fillable extension mechanism, allowing plugins to safely register additional writable fields. Details
- Added dynamic model Relation extension mechanism, allowing plugins to define relationships. Details
- Front-end “Add to Cart” functionality now supports custom extension parameters.
- Fixed payment info misalignment in backend order details.
- Added missing terminology for tax rate settings and other areas.
- Fixed TLS v1.2 errors for older cURL versions
- The plugin root directory supports storing, reading, and displaying README.md documentation files. Details