YOOtheme Pro WordPress 5.0.48

5.0.48 – October 1, 2026​

Fixed​

• Fix active states for menu items with Polylang enabled (WordPress)

5.0.47 – September 30, 2026​

Fixed​

• Fix hiding hover videos in Panel Slider items
• Fix Google Analytics tracking when consent management is disabled
• Fix customizer requests without query parameters

5.0.46 – September 24, 2026​

Added​

• Allow extensions to register font picker groups in customizer data

Fixed​

• Fix regression where closing a lightbox leaves the page unresponsive
• Fix missing accessible names for dialog offcanvas and modal panels
• Fix active state for Polylang language menu items (WordPress)
• Fix regression in theme settings import
• Fix selecting Unlimited for Regular Labs related fields (Joomla)
• Fix breadcrumb structured-data URLs with SEF URLs (Joomla)

5.0.45 – September 22, 2026​

Added​

• Add Google Analytics consent mode setting

Fixed​

• Fix scripts loading more than once in live search results
• Remove obsolete system message layout override (Joomla)
• Fix rendering an empty menu size class (Joomla)
• Fix stale errors being shown when loading photos
• Fix errors saving Joomla modules with malformed data
• Fix duplicate flex utility classes in Grid, Panel, and Slider items
• Fix translating consent content in Map and Video elements
• Fix component-only page rendering when Cassiopeia is unavailable or YOOtheme Pro is inactive (Joomla)
• Fix Joomla article-source event listeners remaining registered
• Fix duplicate aliased selections in dynamic-content source queries
• Fix compatibility with 3rd party plugin adding controls in link picker (WordPress)

5.0.43 – August 26, 2026​

Added​

• Add child categories page source to Category Blog (Joomla)
• Add sorting options to child categories source (Joomla)

5.0.42 – August 24, 2026​

Fixed​

• Fix escaping location custom field value (Joomla)
• Fix missing authorization check in module controller (Joomla)

5.0.41 – August 21, 2026​

Security​

• CVE-2026-75115: Fix arbitrary file read exploitable by any contributor-level user
• CVE-2026-76613: Fix SQL injection exploitable by any contributor-level user

Fixed​

• Fix tabs style in frontend editing (Joomla)

5.0.40 – August 13, 2026​

Fixed​

• Fix language overrides in Newsletter element
• Fix custom fields not being filtered by language (Joomla)
• Fix do not show categories tab when in frontend customizer mode (Joomla)
• Fix missing form-login ID on the offline page login form (Joomla)

Fixed​

• Fix template assignments for product archive pages in WooCommerce 11 (WordPress)

5.0.38 – July 28, 2026​

Fixed​

• Fix update quantity in cart menu item (WordPress)
• Fix prevent generation of zero byte image cache files
• Fix whitespace in title elements

Added​

• Add option to set query type to WooCommerce Product Filter element (WordPress)

Fixed​

• Fix filter terms and pages by current admin language for Polylang plugin (WordPress)
• Fix menu active state in language switcher items (Joomla)
• Fix Google Analytics script loading with consent mode enabled

5.0.36 (June 24, 2026)​

• Added
  Add support for responsive embedded content (WordPress)
• Added
  Add created date to Smart Search item source (Joomla)
• Fixed
  Fix Vimeo video lightbox link in Grid and Gallery elements

5.0.35 (June 8, 2026)​

• Fixed
  Fix redirecting to the original image when image processing fails
• Fixed
  Fix filtered post content by stripping UIkit data attributes before KSES validation (WordPress)
• Fixed
  Fix WordPress editor overlay font in posts element