Fixed: Updated all custom database queries to use $wpdb->prepare() / $wpdb->insert() for safe, parameterized SQL.
Fixed: Hardened post list helper query by using a single parameterized $wpdb->prepare() call for post type, search, and limit clauses.
Fixed: Hardened service taxonomy admin filter by sanitizing $_GET input and escaping all dynamic output in the dropdown markup.
Fixed: Sanitized admin page detection and corrected search options script localization structure on the Avas settings screen.
Fixed: Sanitized and unslashed nonce values before verification to comply with WordPress security guidelines.
Fixed: Missing version parameters in enqueued resources.
Fixed: WP_Query parameter compliance for VIP standards.
Fixed: Missing text domain arguments in translation functions.
Tweak: Avas Scroll Up widget's button is now always visible in Elementor edit mode for easier styling and positioning. Added scroll_threshold control in widget settings. Added aria-label attribute for accessibility compliance. Updated render() method to output data-threshold attribute.
Fix: PHP 8.4.10 compatibility issues.
Updated: Plugin Update Checker library v4 to v5.
Fix: Contact Form 7 Date field width not set to 100%, submit button % option added for the width option.
Fix: Avas Icon Box widget's icon margin bottom option doesn't work for all the styles.
Fix: Header Style One responsive issue on iPad Pro.
New: Animated gradient border module created for Widgets, Containers, Sections, and Columns. To enable the animated gradient border effect, select any widget or column, or container, then go to the Advanced tab and enable Avas Animated Border.
Fix: WordPress.WP.I18n.NonSingularStringLiteralText.
Fix: Avas Post Masonry Grid widget layout issue on frontend and editor mode.
Fix: Avas Circle Text widget's mismatched text domain.
Fix: Theme Builder, Tag, Category, Recent Posts, Text widgets, and Avas Source Code widget are missing a text domain parameter.
Tweak: Avas Post Masonry Grid widget added auto Isotope layout refresh to prevent item overlap when editing. Removed inline JS code from PHP widget; JS is now fully handled in a dedicated script file.
- Updated: Redux Framework.
Fix: Issue where only one header/footer (default language) displayed on frontend, even when multiple translations existed on the Theme Builder.
Fix: Prevented conflicts where both Polylang and WPML might not be installed (code runs safely without either plugin).
Fix: Ensured Elementor preview mode ignores language condition filters (avoids hiding the active editing template).
Fix: Posts Carousel widget — load Owl assets only on front-end, correct color sanitization, and handle “All categories” properly; improved escaping and compatibility with block-based Widgets screen.
Fixed duplicate init issues: Prevented multiple initializations when multiple carousels exist on the same page.
Improved enqueue logic: Owl CSS/JS now loads only when needed (e.g., Related Posts, Related Courses, News Ticker).
Improved: Circle Info widget behavior – the animation and interactions now start immediately when the page loads, removing the need to scroll first.
Fix: Prevented widget screen errors by not enqueueing wp-editor assets when the block-based Widgets editor is active.
Fix: Replaced deprecated wp_targeted_link_rel() usage (removed in WP 6.7) with an internal helper that safely adds rel="noopener noreferrer" only to links with target attributes.
Fix: Resolved the issue where updated Front/Back Flip Box content in Elementor editor did not appear correctly on the live site.
Fix: The Avas Flip Box icon color is not changing.
Fix: Avas Portfolio and Avas Portfolio widgets show an Empty category.
Improvement: Reworked Flip Box controls to use separate tabs for Front and Back content instead of conditional toggling, ensuring WYSIWYG editors (TinyMCE) always save content reliably.
Improvement: Implemented parse_text_editor() for WYSIWYG fields to better handle formatting, shortcodes, and safe HTML output.
Change: Removed fallback defaults from render logic, so cleared fields no longer repopulate with placeholder text.
Compat: Verified compatibility with WordPress 6.7+ Widgets (block) editor.
Refactor: Minor code hygiene and safer guards around admin enqueue.
Fixed: The Avas Services List widget displays the date option from the custom source.
Fixed PHP warning “Trying to access array offset on null” when the new_badge_duration slider control was unset.
Fixed: Avas WooCommerce product grid widget's responsive issue.
Fixed: Text domain for Avas Highlight Text widget.
Tweak: Added speed option to the Avas Highlight Text widget to manage text scroll highlight speed.
Tweak: Added safe defaults and validation for all badge controls (Sale, New, Featured, Sold Out) to prevent undefined index/offset warnings.
Tweak: Improved compatibility with Elementor slider values by ensuring fallback defaults are always applied.
Tweak: Enhanced product badge rendering logic for better stability when WooCommerce product data is missing or incomplete.