Changelog

Bulk Attributes for WooCommerce 3.1.1: full changelog

Release type: security and data-integrity update. Updating is strongly recommended for every site running a previous version. Download it from My Account > Downloads.

Security

• Critical security fixes. The plugin no longer loads or displays anything on the public side of your shop, and every screen and every action is now restricted to authorised users.
• Every change made by the plugin now requires a valid security token and the proper permission before anything is written.
• All displayed content is now properly escaped, and data is written only through the official WordPress and WooCommerce APIs.

For the safety of our customers, we do not publish technical details of the issues fixed. Please update as soon as possible.

Fixed

• Assigning several checked terms to a product now assigns each of them, instead of only one.
• Product attributes are no longer corrupted when terms are assigned: existing attributes, including those used for variations, are preserved.
• Deleting terms no longer leaves orphan data behind in the database.
• The delete screen no longer creates term relations by mistake.
• Pasted lists with Windows line breaks or non-breaking spaces no longer produce empty or untidy terms.
• The attribute selector on the term creation screen is no longer empty, and the pages no longer display twice.
• Stricter input validation on all forms: unexpected values are ignored, and only products (not variations) can be targeted.
• Terms created at the top level are now always created at the top level, even if a term with the same name exists under another parent.
• Deleting a term now always moves its direct children to the deleted term’s parent.

Changed

• Permissions: access to the plugin now requires the manage_woocommerce capability instead of manage_options. Shop Managers can now use the plugin, as well as Administrators.
• Name: the plugin is now displayed as “Bulk Attributes for WooCommerce”.
• jQuery: the plugin now uses the jQuery bundled with WordPress. Its own copy has been removed.
• DataTables: updated to a current version, loaded only on the plugin’s own screens.
• One plugin identity: the plugin is now a single package, woocommerce-bulk-attributes, so versions 3.0 and 3.1.x can no longer run side by side as two different plugins.
• No new feature and no change to the way the screens look.

Compatibility

Component	Minimum	Tested up to
PHP	7.4	8.3
WordPress	6.0	7.1
WooCommerce	7.0	11.1

Compatible with WooCommerce High-Performance Order Storage (HPOS).

Upgrade notes

• From version 3.0: install and activate 3.1.1. Version 3.0 is deactivated automatically and a notice asks you to delete it. Your hierarchy setting is kept. Please delete the old version: it is the vulnerable one.
• From version 3.1.0: install 3.1.1 over the existing plugin. Nothing else to do; your settings are kept.
• Some Windows hosting: the old and new files may end up in the same folder. If the plugin shows as inactive after the update, activate it again from the Plugins screen.
• Data corrupted by older versions is not repaired. If earlier versions already damaged product attributes or term data on your shop, 3.1.1 prevents new damage but does not fix existing damage.

Known limitations

• Data corrupted by older versions is not repaired (see above).
• After a term is deleted, an empty attribute line may remain on a product until the product is next saved (fix planned for 3.1.2).
• When creating terms, the parent you choose applies to every term in the list you enter.
• On a case-sensitive file system where versions 3.0 and 3.1.1 sit in two separate folders, the “deactivated” notice is covered by automated tests but has not been verified end to end.
• Some DataTables labels differ slightly from earlier versions (for example “entries per page”).

Earlier versions

Historical notes. For current compatibility, see the Compatibility section above.

3.1.0

• Contains security issues fixed in 3.1.1: please update to 3.1.1.

3.0 — 2021-03-14

• Updated: support for WooCommerce 5.x.
• Added: attribute hierarchy support can be activated directly from the plugin.
• Updated: compatibility with WordPress 5.7.

2.3 — 2017-11-17

• Updated: fixes the issues faced since the WooCommerce 3.x upgrade, for better compatibility; WooCommerce 3.x compatibility bug fixes; minor code improvements.

2.2 — 2016-12-04

• Fixed: several bugs.

2.1 — 2016-12-02

• Updated: better WooCommerce integration.
• Added: additional input list formats: comma-separated values, pipe-separated values, one value per line.
• Added: bulk assignment of attribute terms to products.

2.0 — 2016-12-01

• Added: version jump to prepare WooCommerce compatibility.

1.4 — 2016-08-15

• Updated: bulk import of attributes separated by pipes.

1.3 — 2016-06-25

• Updated: bulk import of attributes separated by commas.

1.2 — 2016-06-17

• Fixed: several bugs.

1.1 — 2016-06-15

• Fixed: bug fixes.

1.0 — 2016-06-01

• Initial release.