6.5

What's Changed

• Security: Stored XSS in the calendar block theme attribute (CVE-2026-97642). Block attributes are now sanitized and the calendar output escaped.
• Security: Escape calendar links, post titles, month names, and table attributes at the point of output.
• Security: Harden the Mellat, Parsian, and Pasargad payment gateways.
• Add: Dokan integration. Jalali date fields in Dokan admin screens and the seller dashboard.
• Add: Directories addon. Jalali datepicker for Directories date fields. #issue
• Add: Jalali date/time picker for Elementor editor widget settings, with a new “fix_editor_date_time” option.
• Add: Optional plugins in addon requirements (e.g. Dokan Pro on top of Dokan Lite).
• Fix: WooCommerce order date saving, including server-rendered order date fields. #issue
• Fix: Show the Jalali datepicker on the WooCommerce orders admin screen.
• Fix: Prevent WooCommerce order date corruption (year 2647) and accept Persian numerals in the date input pattern.
• Fix: Restore the WooCommerce classic city dropdown.
• Fix: Wrong Jalali year and trailing week padding in the calendar block and widget. #PR
• Fix: _load_textdomain_just_in_time notice on WordPress 6.7+. #PR
• Fix: PHP warnings in the ACF date/time pickers and the “access_expires” array key. #issue
• Fix: Undefined WooCommerce function errors when WooCommerce is not loaded on a page.
• Fix: Ensure admin notices can be dismissed reliably when JavaScript is unavailable or fails.
• Perf: Build static date lookup tables once per request for faster dual-date rendering.
• Perf: Persistently cache archive, calendar, and permalink lookups to reduce repeated database queries.
• Update: Dependencies, including enshrined/svg-sanitize 1.1.1

New Contributors

• @abolfazl-moeini made their first contribution in #339
• @mahdyaralipor made their first contribution in #345
• @isaeedam-ir made their first contribution in #340
• @mostafasoufi made their first contribution in #335
• @mngzir made their first contribution in #348
• @mahdisarani made their first contribution in #353

Full Changelog: 6.4...6.5