New Modules:
– Team Member — team/staff cards with photo, role, bio, social links and schema.org Person markup; repeatable child items.
– Testimonial — customer reviews with avatar, rating, name/role and schema.org Review markup; repeatable child items.
– Pricing Table — responsive pricing plans with featured-column highlight, ribbon, tick/cross feature lists, CTA button and per-plan accent + button text colours; repeatable child items.
– Icon Box — blurb-style box pairing an icon, image or Lottie animation with a title, content, optional badge and a clickable box link, with top/left/right layouts.
– Advanced Tabs — tabbed content with horizontal / vertical layouts, mobile-accordion mode, icon tabs, URL-hash deep-linking and full keyboard/ARIA support; repeatable child Tab items.
Improvements:
– The free module library grows to 54 modules — the largest of any free Divi pack — with 53 running in both Divi 5 and Divi 4 (Post Carousel remains Divi 5-only).
– Extended WPML String Translation config for every new module’s translatable attributes.
Security:
– Fixed XSS in Typing Text (D4) — text_element_tag prop was used as a raw HTML tag name without allowlist validation; wp_kses_post() on a plain string like script does not strip it.
– Fixed CSS injection in Image Gallery (D4) — esc_attr() on CSS custom-property values does not strip ;; replaced with absint() and sanitize_css_length().
– Fixed CSS injection in Image Mask (D5) — decoration layer fill color written into a <style> block via esc_attr() instead of sanitize_css_background().
– Fixed CSS injection in Post Grid (D5) — gap CSS custom property value not length-validated before insertion.
– Fixed CSS injection in Video Popup, Image Mask (D4) — color and transform values interpolated into set_style() declarations without sanitization.
– Fixed CSS injection in Gradient Text, Skill Bar, Divider (D5) — missing semicolons in declarations and wrong escape function in class attributes.
– Fixed XSS across 9 D4 modules (Scrolling Text, Dual Button, Drop Cap Text, Advanced Button, Table of Contents, Text Highlighter, Drop Cap Text, Lottie, Glitch Text) — prop values used in HTML output without proper escaping.
Bug fixes:
– Fixed output-buffer leaks in all 4 Auth form modules (D4) — catch blocks returned without calling ob_get_clean(), leaking the open buffer on exceptions.
– Fixed Forminator form condition (D4) — inverted ” !== $form_html meant the form never rendered; corrected to ” === $form_html.
– Fixed Post Reading Time wrong toggle slug and broken CSS selector (D4).
– Fixed Flip Box front button border applying to wrong slide (D4) and missing leading dots in several CSS selectors.
– Fixed Video Popup icon opacity selector and wrong use_overlay default (D4).
– Fixed Star Rating display type default and wrong font transition group (D4).
– Fixed Post Grid Child prop() fallback typo ‘ off’ → ‘off’ (D4).
– Fixed ob_start leak in Post Grid and Ninja Forms catch blocks (D4).
– Added missing aria-hidden on decorative elements in Breadcrumbs and Hover Box (D4).
– Added missing image alt field to Number Counter (D4).
– Added missing root CSS classes and fixed VB preview styles for 24 Divi 5 modules.
– Fixed Skill Bar spacing selector and Post Grid load-more button style (D5).
Refactor:
– Consolidated sanitize_css_background() and sanitize_css_length() into the D4 and D5 abstract base classes — removed 43 identical private static copies across module files (-6,087 lines).
New Modules:
– Social Share — share buttons for popular networks, fully server-rendered and CSS-only.
– Table of Contents — auto-generated, anchor-linked contents from page headings.
– Number Counter — animated count-up numbers with prefix/suffix and styling controls.
– Advanced Button — richer button with dual icons, hover styles, and states.
– Text Highlighter — animated highlight/underline effects for emphasis text.
– Inline Content — mix text, icons, images, buttons, and dividers in a single flowing line.
– Hover Box — reveal content on hover with CSS-only transitions.
– Animated Heading — headlines with rotating/animated phrases.
– Floating Images — decorative images with parallax-style floating motion.
– Image Reveal — images that reveal on scroll or hover.
– Advanced Video — styled video player with custom poster and overlay controls.
– Image Carousel — touch-friendly image carousel with autoplay, loop, and effects.
– Logo Grid — responsive grid/marquee of brand logos.
– Skill Bar — animated progress/skill bars with labels and percentages.
– Author Box — author bio block with avatar, social links, and layouts.
Admin Dashboard Redesign:
– Rebuilt the admin area as a modern React single-page app (Tailwind + shadcn) with a light/dark theme.
– Live dashboard stats and a modules-by-category library breakdown.
– Modules and Extensions management with search, category filters, bulk actions, and an unsaved-changes save bar.
– What’s New changelog timeline, real Freemius affiliate program terms and application status, and an Account screen with license activation and an anonymous-usage-sharing toggle.
– Brand-aligned Freemius account, pricing, and affiliation pages.
Changes:
– Renamed the admin page slug from divi_squad_dashboard to divi_squad. Existing links and bookmarks to the old slug (including Freemius sub-pages) are permanently redirected to the new slug automatically.
Improvements:
– Reorganized the Divi 4 and Divi 5 builder source into a shared structure, consolidating cross-version Supports/Module helpers and the build shell.
– Standardized PHP interface and class naming, and added per-module brand icons for the Divi 4 builder.
– Generated an inline module-icon registry at build time for the admin app.
– Expanded automated test coverage for the core and builder layers.
Bug Fixes:
– Fixed two fatal errors in the Inline Content module caused by method overrides incompatible with ET_Builder_Element (render_button, render_image).
– Fixed the Modules/Extensions batch enable/disable save path and URL-unsafe category routes in the REST API.
– Corrected the admin REST namespace, dashboard live-data mapping, and several admin styling regressions against wp-admin core CSS.
Plugin Website
Visit website
Share Post
Get insights into what’s happening at ChangelogWP right in your inbox. We don’t believe in spam.
