Changelogs

New

• AI Agent support (MCP) – manage discounts with Claude, Cursor, or any MCP agent: create, edit, enable, and organize rules, look up products and customers, read analytics. New AI Agent page with one-click Agent Connector setup
• Full translation support – every string translatable, Spanish included, WPML and Polylang support for merchant-entered text

Changed

• Now requires PHP 8.0+ and WordPress 6.0+

Fixed

• Partial updates through the REST API deleting fields omitted from the request
• Error responses exposing internal error details
• Discount rules named “0” being skipped on import
• Legacy-format bulk pricing tiers bypassing validation
• Failures not being logged when Debug Mode was off

Security

• Update downloads restricted to trusted URLs, and cached update responses signed with HMAC-SHA256 and verified before use
• PHP object injection fix in the updater: server responses are no longer unserialized with objects enabled
• HTML injection fix in the placeholder editor: typed text is now HTML-escaped before rendering
• Discount metadata and settings are now sanitized field by field against a per-key schema before saving

New

• Automatic plugin updates – new versions are delivered through your Elevated Extensions license and appear on the WordPress Plugins screen

Security

• License key is now sent in the request body instead of the URL for activation, validation, and deactivation

New

• BOGO mode for Buy X Get Y rules – discount a set number of items per matched set, cheapest or most expensive, repeating per threshold
• Strikethrough original shipping cost next to the “Free” label when a rule zeroes shipping
• Buy X for Fixed: per-line strikethrough on discounted lines and a consolidated cart savings row
• Automatic notice placement detection – the manual render-mode toggle is gone
• Bulk pricing tier table with Breakdance editor integration
• Gift add mode selector for free-product rules (all, cheapest, most expensive)
• Gifts can be product variations or “all variations” parent groups
• Custom gift line-item text on the classic cart and mini-cart
• Bulk pricing tier overlap validation

Fixed

• Conflict with AutomateWoo breaking the admin: the plugin’s admin script leaked a global named AW that collided with AutomateWoo’s
• Conflict with UiPress covering the plugin header
• Catalog strikethrough not respecting “show original price” and missing at thresholds
• Mini-cart strikethrough prices across classic and blocks carts
• Order page showing discount info when no discounts applied
• Duplicate discount rows in cart totals for fee-based rules
• Notice layout breaking inside flex containers
• Buy X for Fixed not operating cart-wide
• Bulk pricing tier quantities not aggregating by parent or listed variation
• “Add Tier” not seeding the minimum quantity from the previous tier
• Sale badge and page content showing for bulk pricing on catalog and product pages
• Free-shipping cart notice not rendering reliably

Security

• Direct-access guards added to 6 PHP files

New

• Tags and attributes selection – apply discounts to products by tags or attributes, not just categories
• Buy X Get Y improvements – gift selection modes, customizable gift price text, and improved BOGO configuration
• Import/export – export and import discount rules and plugin settings for easy migration and backup
• Plugin settings page – threshold calculation options, tax/shipping inclusion toggles, and global defaults

Enhancement

• “Apply discount to” field replaces confusing “Number of discounted products” with clear scope dropdown
• Variety of improvements for the free products discount type
• Threshold settings relabeled with info tooltips explaining each option
• Discount type descriptions updated to accurately reflect behavior
• UI polish – updated menu branding, improved onboarding experience, settings layout, and visual refinements

Fixed

• Sale badge not showing in some cases
• Sale badge showing incorrect strikethrough prices for BOGO and bulk pricing discounts
• Bulk pricing tiers not updating when cart quantity changes
• Buy X rounding errors in discount calculations
• “Buy X get Y free” not working in some cases
• Block checkout showing literal HTML in strikethrough price
• Shipping savings double-counting in block checkout
• Various improvements to analytics charts
• Product/category filter not clearing when switching filter type
• Discount toggle switches desync when rapidly toggled on and off
• Discounts not applying on admin-AJAX requests
• Various stability fixes for edge cases

Fixed

• Words typed with an ending now find the base word, for languages that build words by adding endings (Hungarian, Finnish, Turkish, Polish).

New

• AI Agent support (MCP) – run searches, change settings, rebuild the index, and read analytics with Claude, Cursor, or any MCP agent. New AI Agent page with one-click Agent Connector setup
• Full translation support – every string translatable, Spanish included, WPML and Polylang support for merchant-entered labels
• Custom taxonomy indexing – all public taxonomies on your selected post types, not just categories and tags

Changed

• PHP requirement raised from 7.4 to 8.0

Fixed

• Search modal popping back open on its own right after being closed
• Keyboard shortcut opening every search widget on the page instead of one
• SQLite index rebuilds failing with an “Unsupported driver” error
• Engine switches rebuilding the previous engine instead of the selected one
• A failed rebuild no longer takes down the active index: the engine and settings switch only after the new index builds successfully
• Password-protected posts appearing in search results
• Accessibility improvements: search dialogs now expose modal semantics, label every control, lock background scrolling, trap keyboard focus, and restore focus on close

Security

• Stored XSS fix in search results: titles and excerpts are now escaped even when match highlighting is off
• Popular searches no longer record queries containing an email address, 5 or more consecutive digits, or a phone-like number
• Update downloads restricted to trusted URLs, and cached update responses signed with HMAC-SHA256 and verified before use
• Search queries capped at 200 characters

New

• Instant, typo-tolerant search for any WordPress site: live ranked results across posts, pages, custom post types, taxonomies, comments, and custom fields (ACF, Meta Box, post meta)
• Per-field weighting: decide what matters most, per post type and field
• Two frontend themes, Classic dropdown and Modern command palette, each with light and dark modes
• ⌘K / Ctrl-K keyboard shortcut, recent searches, popular searches, and “Did you mean” suggestions
• Four typo-tolerance levels (Off / Soft / Normal / Hard)
• Purpose-built search index with result caching. Instant queries on sites with tens of thousands of posts
• Background indexing with progress tracking, scheduled rebuilds, and automatic updates on content changes
• Native Breakdance and Oxygen elements, plus a shortcode for everything else
• Brand-color theming: set brand, accent, and background colors and the full palette is derived automatically

Fixed

• Words typed with an ending now find the base word, for languages that build words by adding endings (Hungarian, Finnish, Turkish, Polish).
• Searching a word now returns every product whose title starts with it.

New

• AI Agent support (MCP) – search products, change settings, rebuild and inspect the index with Claude, Cursor, or any MCP agent. New AI Agent page with one-click Agent Connector setup
• Full translation support – every string translatable, Spanish included, WPML and Polylang support for search labels
• Index status now reports which products are excluded and why

Changed

• PHP requirement raised from 7.4 to 8.0
• Search input CSS hook changed from #elex-search-input to the .elex-search-input class. Update any custom CSS/JS targeting the old ID

Fixed

• Search results were returned in ascending post ID instead of relevance order; they now follow the engine’s scores
• Products created without a product type term (WP-CLI, importers) were skipped by the indexer; they are now indexed
• A failed rebuild no longer leaves the store with no search: the new index is built alongside the old one and swapped in only once complete
• Failed rebuilds reporting “idle” instead of an error
• Rebuild batches were read in unstable order, so catalogs over 500 products could index one product twice and skip another; batches now page in stable ID order
• The scheduled rebuild re-queued itself even when disabled and ran offset by the site’s UTC difference; disabling now sticks and runs happen at the configured time
• Category and tag edits triggering a full index rebuild
• Category paths ending in a dangling separator
• Add-to-cart failures showing as success
• Search button clicks closing the results popover
• Multiple search widgets on one page conflicting with each other

Security

• Stricter validation on public search and add-to-cart requests
• Update downloads restricted to trusted URLs, and cached update responses signed with HMAC-SHA256 and verified before use
• License keys no longer sent in URLs

New

• Automatic plugin updates – the plugin checks elevatedextensions.com for new versions using your activated license and surfaces available updates on the WordPress Plugins screen

New

• Breakdance and Oxygen Element Studio integrations
• Per-side and per-corner border, padding, and radius controls
• Hover state controls
• Icon styling controls (color, size, padding)
• Input font size control
• Category breadcrumbs in search results

Fixed

• Submit button ignored clicks below Minimum Characters
• Missing accessible name on search input
• Search errors shown as “no results”
• Out-of-stock and variable products linked incorrectly
• Add-to-cart failures shown as success
• Settings save did not cancel in-flight requests
• Multiple shortcodes on the same page broke
• Tag and category result URLs ignored custom permalinks
• License deactivation failed with special characters in the key
• Plugin activated without required PHP extensions present
• Broken search bar preview layout in admin
• Empty image and price elements rendered as blank slots
• Search bar width broken in flex layouts
• Layout shift from clear button and loader
• Inconsistent “exclude out of stock” setting

Security

• Nonce verification on the public AJAX search endpoint
• License options no longer autoload
• Patched a dependency vulnerability (@remix-run/router)

New

• Search filters with category and tag selection (All/Include/Exclude modes)
• Multiple custom fields support
• Search button customization (custom text, size, border radius, loading spinner)
• Real-time progress tracking for index rebuilds
• Exact match search option (disable fuzzy matching)

Enhancement

• Changed product name to Elevated Product Search
• Changed shortcode to elex_product_search, with backwards compatibility
• Improved settings organization with better descriptions
• New color picker with transparency support
• Faster indexing with batched product loading

Fixed

• CSS conflicts with page builders
• Fuzzy matching not working correctly in some cases
• Search scope settings not applying in some cases
• WooCommerce null cart error
• Index rebuild not triggering when settings change

Security

• Concurrent rebuild protection
• Error details hidden from frontend responses
• Prepared SQL statements for database queries

Bug Fixes

• Video posts downloading in full on page load; only the poster image now loads until a visitor plays the post
• Every video in the popup autoplaying at once, ignoring the Autoplay video setting; only the post you open plays

New

• AI Agent support (MCP) – create and edit feeds, manage accounts, refresh caches, and change settings with Claude, Cursor, or any MCP agent. New AI Agent page with one-click Agent Connector setup. Instagram login stays human-only
• Full translation support – every string translatable, Spanish included, WPML and Polylang support for feed labels

Enhancement

• Admin pages no longer make a remote license check on every load: license status is now cached for 15 minutes

Changed

• Now requires PHP 8.0+ and WordPress 6.0+

Fixed

• Profile pictures getting corrupted when saving a feed
• Saving a feed replaced the whole stored feed, wiping any setting omitted from the request; saves now merge into the stored feed
• Deleted feeds leaving orphaned database rows
• License and Settings screens giving no save feedback
• Slider animation speed labeled as milliseconds when the value was always seconds
• A slider animation speed of 0 being replaced with 0.5s
• The media cleanup tool reported zero files deleted and zero space freed even when it deleted files; counts are now correct

Security

• Instagram tokens are now encrypted at rest
• Connecting an Instagram account now requires an administrator to open a single-use window that expires after 10 minutes
• Tokens and license keys no longer sent in request URLs
• Update downloads restricted to trusted URLs, and cached update responses signed with HMAC-SHA256 and verified before use
• Remote media downloads now accept only HTTPS URLs that pass WordPress’s URL safety checks
• All 150 feed settings fields are now validated on the server; 87 were previously checked only in the browser

Removed

• Unused legacy Facebook app settings screen

New

• Automatic plugin updates – one-click plugin updates from wp-admin using your activated license

New

• Breakdance & Oxygen 6 integration – native drag-and-drop element for Breakdance Builder and Oxygen 6 with feed selector and live SSR preview in the builder
• Per-side style controls – padding, margin, border radius, and border width now support per-side values with a linked/unlinked toggle
• Border controls – added border color, width, and radius controls for feed, header, post, and modal sections

Fixed

• Color picker panel stretching beyond the visible viewport
• Save progress toast getting stuck at 0% when media caching is disabled
• Extra spacing appearing above the feed grid on feed templates
• Video posts not respecting the aspect ratio set in the feed editor
• Malformed OAuth authentication URL on WordPress Bedrock installs where home_url() and site_url() differ
• Infinite frontend requests for missing images when media caching is disabled

New

• Local media caching – images, videos, and profile pictures are now stored locally
• Global settings page with cache management controls
• Accounts management tab in My Feeds page
• Load More button for Grid and Mosaic templates
• Per-breakpoint layout settings (desktop, tablet, mobile)
• Color picker with transparency/opacity support
• Carousel/album support on frontend feeds
• Custom labels for header text (Posts, Followers, Following, Follow button)

Enhancement

• Updated branding to match Elevated Product Search
• Border radius controls for posts
• Improved settings UI

Fixed

• Instagram connection failing for some users
• Profile pictures not loading or showing broken images
• CSS conflicts with certain themes and plugins
• Verified badge (blue checkmark) not displaying
• Follow button color not applying
• Masonry gutter spacing not working
• Copy shortcode button not working on non-HTTPS sites
• Row limits not respected on tablet/mobile
• Database compatibility with MySQL strict mode

Security

• Media stored with encrypted local storage
• Improved Instagram authentication security