4.26.4

Security

• Check the destination course permissions when changing the lesson course from the bulk editor.
• Enforce course edit permissions when creating a module from the course editor.
• Enforce lesson edit permissions when saving the course structure.
• Ensure Learning Mode applies colour values without changing block markup.
• Escape the label attribute in the Exit Course block.
• Escape the teacher name and archive link rendered by the sensei_teachers shortcode.
• Improved how locked lesson content is excluded from frontend listings.
• Improved how private messages are excluded from frontend queries.
• Improved how the admin lesson and course fields are initialised so that post content cannot influence them.
• Improved the authorization of lesson completion.
• Improved the authorization of private messages sent to teachers.
• Improved the authorization of usage tracking events.
• Improved the handling of files uploaded as quiz answers.
• Improved the privacy of private messages.
• Improved the scoping of teacher comment moderation.
• Made request-input handling consistent across the admin and frontend.
• Prevent students from changing their quiz answers after the quiz has been submitted.
• Require the Order Courses capability to save the course order.
• Restrict the legacy lesson quiz save handler to the lesson being saved.

Changed

• Reports Overview Students and Courses header counts now read HPPS progress tables when High-Performance Progress Storage is enabled. #8231
• Reports Overview students per-row average grade now reads HPPS progress tables. #8205
• Reports Overview students per-row course counts now read HPPS progress tables when High-Performance Progress Storage is enabled. #8231
• Resolve HPPS storage configuration consistently across progress query services and repositories. #8248
• Update Sensei blocks to Block API version 3 so they render in the WordPress iframe block editor. #8190
• Update the Action Scheduler package to version 4.1.0. #8166
• Update the pelago/emogrifier package to version 7.3.0. #8231

Deprecated

• Deprecate the sensei_analysis_user_lesson_grades filter. #8205

Fixed

• Fix a fatal error when a teacher triggers a module hierarchy rebuild.
• Fix a PHP 8 TypeError when post_updated fires with a null post object during autosave. #8222
• Fix a PHP 8.4 deprecation notice when exporting CSV files. #8213
• Fix a thick border showing on Course Outline modules in the editor when the module border setting is off. #8191
• Fixed a PHP deprecation notice when reviewing a grade for an unanswered True/False question. #8214
• Fixed a PHP warning when changing a course's teacher on a course with no modules. #8225
• Fixed edits to a WPML-duplicated lesson's quiz landing on the original language's quiz and questions. #8220
• Fixed quiz answers, grades, resets, and lesson and course quiz surfaces breaking when the admin uses a secondary language or the lesson is translated on multilingual sites. #8130
• Fixed saving a translated course overwriting and stealing the original course's lessons on WPML sites. #8219
• Fixed the quiz saved message not showing in Learning Mode. #8272
• Fixed the student management and grading screens showing no students when the WPML admin language is not the original one. #8224
• Fixed the text domain on the "Generate quiz questions with AI" upsell label so it can be translated. #8230
• Fix garbled text in button blocks whose text uses non-Latin characters when the button URL is set at render time. #8226
• Fix lesson/module hamburger menu being hidden on mobile when the course title is too long. #8094
• Fix lesson order not reaching WPML translations when the translated lessons are not duplicates. #8246
• Fix lessons removed from a course staying in its WPML translations after the translation is updated. #8245
• Fix PHP 8.4 deprecation warnings from implicitly nullable function parameters. #8199
• Fix Sensei templates in the Site Editor when Gutenberg's Template activation experiment is enabled. #8250

Development

• Refactored course report lesson metrics into dedicated progress aggregation and grading statistics services. #8249
• Remove the unused sensei_question_slug filter registration from the WPML compatibility class. #8215