Avada - Responsive Multi-Purpose Theme 7.15.2

Security hardening
- SECURITY: Fixed vulnerability of unauthenticated SQL injection via the product_order parameter in Post Cards element
- SECURITY: Fixed Subscriber+ users being able to set up a stored XSS through the fallback option in dynamic data
- SECURITY: Fixed Subscriber+ users being able to access arbitrary file contents through the custom SVG option in Section Separator
- SECURITY: Enforced that non-admin users cannot store Code Block element in their user meta
- SECURITY: Enforced that protected (underscore-prefixed) post meta fields and WordPress actions cannot be used in dynamic data by non-admin users



Main Changelog
- NEW: Added options to rename Columns and all other elements
- NEW: Added options to allow Woo Category Filter element to filter categories on the shop page directly
- NEW: Already picked filters will now be kept when using the Woo Category Filter element in the change page mode
- NEW: Added breakpoint-specific options for margin, padding, and button span to the Button, Form Submit, and Stripe Button elements
- NEW: Added page options to allow setting robots follow and index meta tag
- NEW: Added loop option to the Image Carousel element
- NEW: Added WooCommerce brands to the Woo Active Filters element
- NEW: Added an option to enable/disable the AJAX updating of sub-totals and totals on the WooCommerce Cart page
- NEW: Added CSS Class and ID options to the Nested Columns Row editing
- NEW: Added singular and plural text options to the order item count dynamic data endpoint
- ACCESSIBILITY: Added keyboard navigation and aria-selected attribute to the Tabs element
- PERFORMANCE: Improved the db query when using the Avada Forms form view count
- PERFORMANCE: Changed the element auto-activation to reduce the number of option queries and the size of the builder settings variable
- IMPROVEMENT: Made sure that Avada Forms can be submitted correctly when using AJAX nonce and adding form to a page cached page
- IMPROVEMENT: Added a fallback for SVG image URL retrieval in case an SVG has an incorrect MIME type in the media library
- IMPROVEMENT: WooCommerce order-specific dynamic data endpoints can now also be used for non-logged-in users and orders
- IMPROVEMENT: Variable-based font sizes can now be used in the Social Links element
- COMPATIBILITY: Ensured that saved library content is also available on secondary languages when using PolyLang
- COMPATIBILITY: Fixed compatibility issue between the MemberPress Directory plugin and the Layout Builder
- COMPATIBILITY: Added check for protected widget clone function to avoid AJAX error on third-party widgets
- UPDATED: Compatibility preparations for WordPress 7.0
- UPDATED: Compatibility with WooCommerce 10.6.2
- UPDATED: Chart.js to version 2.9.4
- FIXED: Auto column breaking not correctly working in Post Cards and Gallery elements
- FIXED: Border of the tab nav being doubled in some cases when using Tabs element in horizontal layout
- FIXED: Loader missing on the legacy single product pages, when using AJAX add to cart
- FIXED: Cart totals not correctly auto-updating if the quantity is first set to 0 and then increased
- FIXED: Syntax error in Image element when using fetch priority in the Image element
- FIXED: Sticky header height not being taken into account when scrolling to the WooCommerce Notices after AJAX complete
- FIXED: Avada Forms with required upload fields with single file add/remove being able to be submitted, even if all files have been removed
- FIXED: Bottom margin removal of the last p tag in Text Block element only working on desktop
- FIXED: Avada Forms form entry table pagination input not working correctly
- FIXED: PHP notice in Form element, when using the form label typography options
- FIXED: Potential PHP error when padding on a 100% width page adds up to 100%

- NEW: Added options to set custom authentication pages for user registration, login, lost password and reset password
- NEW: Added user registration, login, lost password, and reset password form submission actions to Avada Forms to perform the corresponding WordPress actions
- NEW: Added options to count current live visitors on a post or WooCommerce product
- NEW: Added a dynamic data endpoint to display the rest amount needed to receive free shipping for WooCommerce products (incl. options)
- NEW: Added a buy now endpoint to dynamic data, which adds the WooCommerce product to cart and takes the customer directly to the checkout
- NEW: Added stock mode option to the Progress Bar element to allow for a product stock progress bar when using WooCommerce stock management
- NEW: Added several new options to the Progress Bar element, including active and max values, display types and filling speed
- NEW: Added several new options to the Breadcrumbs element, including several independent color options, Home and separator icon options
- NEW: Added a password strength indicator option to the Password Field of Avada Forms
- NEW: Added the possibility to have Avada Forms display notices and perform redirects on the same submission, using a redirect delay
- NEW: Added an HTML attributes repeater option to Container, Column, Title, Text Block, Image and Button elements to allow for easy attributes addition
- NEW: Added Instagram to the privacy embeds
- NEW: Added support for the Pagination element inside of an Off Canvas tied to Post Cards element
- NEW: Added post IDs as option to the query builder in Post Cards element
- NEW: Added a position offset option to the Container element
- NEW: Added an option to set the webP image quality
- NEW: Added the possibility to display the WooCommerce cart sub-totals before or after the discounts using the Cart Totals dynamic data endpoint
- NEW: Added sizes="any" to the fav icon, if an SVG image is used
- NEW: Added the "does not contain" comparison option to the Avada Forms conditional logic setup
- IMPROVEMENT: Added explicit checks for image types to make sure webP/AVIF conversion does not affect unwanted MIME types
- IMPROVEMENT: Changed the way the OG image render function works, to make sure there is no output if the image cannot be constructed
- IMPROVEMENT: Refactored the way the actual image source data is retrieved in the Image element to avoid backwards compatibility issues
- IMPROVEMENT: Dynamic data source images now always take precedence over an uploaded image in the Image element
- IMPROVEMENT: Made sure that Woo Product Sorting element on search pages is compatible with third-party plugins
- IMPROVEMENT: Added the fallback "Home" label also to the Breadcrumbs element
- IMPROVEMENT: CSV exports of Avada Forms data are now UTF-formatted to avoid HTML entities in the export data
- IMPROVEMENT: Page Title Bar dynamic data endpoints are allowed now on all posts
- IMPROVEMENT: Added note to WooCommerce shipping totals, if shipping still needs to be calculated
- IMPROVEMENT: Live Editor element previews of WooCommerce elements now also work on Off Canvas edit screens
- IMPROVEMENT: Warnings on SVG upload, when the dimensions can not be retrieved, are suppressed now
- UPDATED: Compatibility with WordPress 6.9
- UPDATED: Compatibility with WooCommerce 10.4.2
- FIXED: webP images being converted to AVIF, even if webP was chosen as output format
- FIXED: Turnstile used for the WordPress comments form not working as expected
- FIXED: Addresses with added line breaks getting output with newline char (\n) in Google Maps info windows
- FIXED: AJAX add to cart loader also being shown on in the Cart element when using text links
- FIXED: Videos not always displaying correctly in the lightbox of the Instagram element
- FIXED: Modal element on mobile causing a a container width change on sticky containers
- FIXED: WooCommerce cart quantity change no longer triggering cart totals auto-update
- FIXED: Inconsistency in the Term Count dynamic data endpoint between normal and inline dynamic data
- FIXED: Some Avada Forms not submitting correctly, depending on the nonce setting
- FIXED: Cache clearing nonce name for a few third party API calls not adjusting according to multi-language sites Global Options name
- FIXED: PHP notice in the Woo Order Table element
- FIXED: PHP notice in the Woo Cart Total element
- FIXED: PHP notice in the background image slider random ordering option of the Column element
- FIXED: Avada Forms notification attachment option not always being correctly styled and working in the backend builder
- FIXED: Incorrect option rendering of the responsive background color options in the Column element in the backend builder

- NEW: Added the Conditional Rendering engine to all Avada elements, allowing for maximum fine-tuning
- NEW: Added user meta data to Conditional Rendering options
- NEW: Added "does not contain" as comparison option to Conditional Rendering
- NEW: ACF field value comparison for bool fields now works with both bool and numerical values in Conditional Rendering
- NEW: Added user meta data to Dynamic Data options
- NEW: Added separator option for ACF single repeater field dynamic data endpoint
- NEW: Added possibility to link an Off Canvas to Post Cards element, allowing for dynamic content being pulled into the Off Canvas per Post Card (e.g. allowing custom Quick View)
- NEW: Nested rows wrapping the Nested Columns element can now be edited directly in the builder, offering flex alignment options
- NEW: Added flex gap option to the Column element
- NEW: Added max height option to Column element
- NEW: Extended the overflow options in Container and Column element for separate values on the x and y axis
- NEW: Added global option and options for individual forms to disable the form view counting in Avada Forms
- NEW: Added a custom attachment option to Notifications in Avada Forms
- NEW: Added preview options, min and max files and single add and remove options to Avada Forms Upload field element
- NEW: Added capture option to the Avada Forms Upload field element
- NEW: Added the possibility to have a reset button in Avada Forms
- NEW: Added the possibility to have a reset form step button in Avada Forms
- NEW: Added the possibility to have a save to local storage button in Avada Forms allowing to save for m data for later continuation
- NEW: Added hover text and icon options to the Submit / Reset Button element in Avada Forms
- NEW: Added a random order option to the background image slider setup for Container element
- NEW: Added option to sort post cards by recently purchased WooCommerce products in Post Cards element
- NEW: Added different styling approach for WooCommerce cart shipping options to improve appearance at narrow widths
- NEW: Added global options for Turnstile styling and made Turnstile available for the comments form
- PERFORMANCE: Added global option to convert uploaded images to webP or AVIF format automatically
- PERFORMANCE: Added global option to replace or keep original uploads after conversion
- PERFORMANCE: Added option to Avada System Status page to bulk convert already existing images in the media library to webP or AVIF format
- PERFORMANCE: Adjusted Lightbox element to store the image IDs for faster lookup and better accessibility
- IMPROVEMENT: Combine Third Party CSS Files option is now a multi-select, which makes it easier to add or remove certain plugins
- IMPROVEMENT: Woo Sorting element now works on a search results page that only contains WooCommerce products
- IMPROVEMENT: Images in AVIF format will now open in the lightbox
- IMPROVEMENT: Updated the video element or embed option in Media Slider element for easier usage
- IMPROVEMENT: Set the default heading tag for the Title element to h3
- IMPROVEMENT: Cards layout in Image Carousel element can now loop even if less than 5 images have been added
- IMPROVEMENT: Made sure that library templates are not cached when selecting them in maintenance mode option
- IMPROVEMENT: Updated the inline dynamic data parser to allow for more formats and made sure it only reruns on options where a callback is available
- IMPROVEMENT: Updated several option descriptions, dependencies, and dialogs for better usability and internationalization
- UPDATED: Compatibility with WordPress 6.8.3
- UPDATED: Compatibility with WooCommerce 10.3.4
- UPDATED: Compatibility with The Events Calendar 6.15.11
- FIXED: Custom icons set scroll not working in Avada Menu Options
- FIXED: Fallback image option in Post Card Image element not working correctly
- FIXED: Adjusted the Google reCAPTCHA v3 implementation to make sure the token does not expire before the form is submitted
- FIXED: Empty paragraph tags being output when using a page template in the maintenance mode settings that includes several containers
- FIXED: Page Options custom CSS being incorrectly escaped when using a library template in the maintenance mode
- FIXED: Bottom margin not being removable in Media Slider element
- FIXED: Testimonial pagination container always loading, even if there is only one item
- FIXED: Some animated elements do not init when more posts are loaded dynamically via AJAX in Post Cards element
- FIXED: Global social icon set for Email not working in elements using social icons
- FIXED: Dynamic data term count using single and plural label, if both are set and only 1 element being in that term
- FIXED: Quick-view modal not being closed correctly, after a variable product was added to cart
- FIXED: WooCommerce ajax add to cart button loading not always styled correctly
- FIXED: WooCommerce notices displaying twice when using the Woo Notices element and a coupon error happens
- FIXED: Event organizer post content option of Dynamic Data always displaying excerpt, even if full content is chosen
- FIXED: z-index issue with select2 powered select fields, when being used within animated Containers / Columns
- FIXED: Text align option Text Block element not working in responsive modes if "justify" is chosen
- FIXED: PHP notice happening in a few cases within the ACF repeater count function in the Conditional Rendering engine
- FIXED: Posts appearing as "changed" in Live Editor after page load when inline dynamic data is used
- FIXED: Patterns and masks not live updating their colors in Live Editor if set to a global color that gets changed
- FIXED: Blank page info box in Off-Canvas editing in Live Editor picking up Off-Canvas styles
- FIXED: Separator preview in LE being incorrect when the parent column uses flex direction row
- FIXED: Off-Canvas close icon not appearing selected in the corresponding option in the builders, and hover indication not working

- NEW: Added the possibility to use inline dynamic data syntax inside the fallback option of dynamic data
- NEW: Added dynamic data options to the min and max value settings in Avada Forms Date field
- NEW: Added progress bar pagination style to Image Carousel element
- NEW: Added text-align option to the Woo Short Description element
- NEW: Added option to also count dynamically added Post Cards element headings in the number of headings conditional rendering option
- SECURITY: Fixed Contributor+ level XSS issue in the Vimeo element, allowing contributors to use JS in the video ID
- SECURITY: Fixed Subscriber+ level broken access control in the Avada 5.0 migration tool
- IMPROVEMENT: clamp() is now also working when used in Global Options typography settings, even if responsive typography is enabled
- IMPROVEMENT: Refined encoding/decoding to allow usage of UTF8 encoded chars inside the Code Block element
- IMPROVEMENT: Ensured that Live Editor preference options all have saved defaults
- UPDATED: swiper.js to version 12
- UPDATED: Compatibility with WooCommerce 10.2.1
- UPDATED: Compatibility with The Events Calendar 6.15.4
- FIXED: Not all bundled and recommended plugins from the Avada plugins page updating correctly
- FIXED: Discounts displayed in amounts not respecting the decimals as set in the WooCommerce settings in Woo Price element
- FIXED: Countdown element not always initializing when being used as part of dynamically used content
- FIXED: End animation option not correctly working in Lottie element
- FIXED: Scrolling issue in responsive mode in Image Carousel when using an explicitly set number of columns for responsive modes
- FIXED: Button gradients set in Global Options overriding button background color options in Instagram element
- FIXED: PHP notice happening in some cases in post date dynamic data
- FIXED: Device type rendering logic preference not working in Live Editor

7.13.2