Version 8.13.1 (Maintenance)
Maintenance
We are limiting technical details on these changes to protect users who may not yet have upgraded.
- WHMCS-18936 — Prevent error when sending email from custom email template with bad attachment reference
- WHMCS-19766 — Disabling auto renewal for a domain in the admin area does not cancel the renewal invoice
- WHMCS-22025 — Clarify Ioncube Loader Minimum version for PHP 8.3
- WHMCS-22090 — Improve Activity Log entry for Admin-initiated User password change
- WHMCS-22228 — Layout changes on Client Area homepage after switching the theme (Also known as: WHMCS-22280)
- WHMCS-22233 — Improve formatting for invoice modification log entries
- WHMCS-22245 — Improve CSS for MarketConnect DigiCert landing page
- WHMCS-22289 — Honour parent theme definition for captcha.tpl on Login as Owner link
- WHMCS-22304 — Correct regression for target opening of custom module actions (styled as links) in clientarea sidebar
- WHMCS-22308 — Ensure ticket scheduled actions can be updated or cancelled when language is not set to English
- WHMCS-22450 — Improve visual responsiveness for SocialBee MarketConnect landing page
- WHMCS-22456 — Correct alignment of Admin Global Warning text
- WHMCS-22457 — Correct regression for displaying embedded videos in Knowledgebase articles
- WHMCS-19435 — Undisclosed Security Fix
- WHMCS-19947 — Undisclosed Security Fix
- WHMCS-19950 — Undisclosed Security Fix
- WHMCS-19952 — Undisclosed Security Fix
- WHMCS-19953 — Undisclosed Security Fix
- WHMCS-19954 — Undisclosed Security Fix
- WHMCS-19955 — Undisclosed Security Fix
- WHMCS-19957 — Undisclosed Security Fix
- WHMCS-19958 — Undisclosed Security Fix
- WHMCS-19959 — Undisclosed Security Fix
- WHMCS-19960 — Undisclosed Security Fix
- WHMCS-19967 — Undisclosed Security Fix
- WHMCS-19981 — Undisclosed Security Fix
- WHMCS-19983 — Undisclosed Security Fix
- WHMCS-19984 — Undisclosed Security Fix
- WHMCS-19987 — Undisclosed Security Fix
- WHMCS-19992 — Undisclosed Security Fix
- WHMCS-20029 — Undisclosed Security Fix
- WHMCS-20064 — Undisclosed Security Fix
- WHMCS-20066 — Undisclosed Security Fix
- WHMCS-21726 — Undisclosed Security Fix
- WHMCS-21729 — Undisclosed Security Fix
- WHMCS-21763 — Undisclosed Security Fix
- WHMCS-21765 — Undisclosed Security Fix
- WHMCS-21766 — Undisclosed Security Fix
- WHMCS-21768 — Undisclosed Security Fix
- WHMCS-21769 — Undisclosed Security Fix
- WHMCS-21862 — Undisclosed Security Fix
- WHMCS-21884 — Undisclosed Security Fix
- WHMCS-21998 — Undisclosed Security Fix
- WHMCS-22041 — Undisclosed Security Fix
Modules
- WHMCS-21375 — Ensure only partial payment amount is capture when appropriate for invoices paid by PayPal Payments (Also known as: MODULE-8180)
Version 8.12.1 (Maintenance)
Maintenance
- WHMCS-19938 — Improve resilience of update routine when previous update queries were improperly applied
- WHMCS-19939 — Prevent fatal error during cron if cPanel Licensing module is enabled (Also known as: CPL-172)
Version 8.12.2 (Security)
We are limiting technical details on these changes to protect users who may not yet have upgraded.
Maintenance
- WHMCS-19435 — Undisclosed Security Fix
- WHMCS-19947 — Undisclosed Security Fix
- WHMCS-19950 — Undisclosed Security Fix
- WHMCS-19952 — Undisclosed Security Fix
- WHMCS-19953 — Undisclosed Security Fix
- WHMCS-19954 — Undisclosed Security Fix
- WHMCS-19955 — Undisclosed Security Fix
- WHMCS-19957 — Undisclosed Security Fix
- WHMCS-19958 — Undisclosed Security Fix
- WHMCS-19959 — Undisclosed Security Fix
- WHMCS-19960 — Undisclosed Security Fix
- WHMCS-19967 — Undisclosed Security Fix
- WHMCS-19981 — Undisclosed Security Fix
- WHMCS-19983 — Undisclosed Security Fix
- WHMCS-19984 — Undisclosed Security Fix
- WHMCS-19987 — Undisclosed Security Fix
- WHMCS-19992 — Undisclosed Security Fix
- WHMCS-20029 — Undisclosed Security Fix
- WHMCS-20064 — Undisclosed Security Fix
- WHMCS-20066 — Undisclosed Security Fix
- WHMCS-21726 — Undisclosed Security Fix
- WHMCS-21729 — Undisclosed Security Fix
- WHMCS-21763 — Undisclosed Security Fix
- WHMCS-21765 — Undisclosed Security Fix
- WHMCS-21766 — Undisclosed Security Fix
- WHMCS-21768 — Undisclosed Security Fix
- WHMCS-21769 — Undisclosed Security Fix
- WHMCS-21862 — Undisclosed Security Fix
- WHMCS-21884 — Undisclosed Security Fix
- WHMCS-21998 — Undisclosed Security Fix
- WHMCS-22041 — Undisclosed Security Fix
Modules
- WHMCS-21375 — Ensure only partial payment amount is capture when appropriate for invoices paid by PayPal Payments (Also known as: MODULE-8180)
8.11 Change Log
WHMCS 8.11.3 includes important security updates. We recommend upgrading to this release as soon as possible.
Version 8.11.0 (Beta)
Implemented
- FEATURE-3760 — Provide full synchronization and translations in all supported languages
- FEATURE-3858 — Implement ability to prevent of client closure of tickets
- FEATURE-3894 — Implement Google reCAPTCHA v3
- CORE-18106 — Add support for PHP 8.2
- CORE-19173 — Introduce Admin permission for Cancel Invoices
Maintenance
- CORE-18934 — Correct running tax total when modifying Quote
- CORE-18991 — Implement dynamic total recalculation of invoice when managing line items
- CORE-19160 — Correct save routine for time-based billing entries; regression from CORE-18747
- CORE-19187 — Prevent fatal error in Clientarea when addon has unexpected/incorrect service association
- CORE-19190 — Improve Credit Card Payment email templates used for PayPal Payments client notifications
- CORE-19191 — Improve Free Domain label on product billing cycle dropdowns when a non-qualifying TLD is used
- CORE-19202 — Ensure cron is not affected if hosting server is in the IP ban list
- CORE-19218 — Remove Evo signup from Getting Started wizard
- CORE-19228 — Ensure duplicating an invoice does not copy the credit value
- CORE-19232 — Prevent client group TLD pricing being shown in the TLD Import & Pricing Sync feature
- CORE-19241 — Prevent erroneous value change for Sequential Paid Invoice Numbering when changing Default Country
- CORE-19244 — Ensure Invoice Payment Confirmation email is sent for manual transactions added from invoice View screen
- CORE-19247 — Update WHMCS PHP compatibility checker for PHP 8.2 and Ioncube 13
- CORE-19250 — Correct preview display of attachment images on ticket notes
- CORE-19256 — Prevent error with ordering prorata addon via AddOrder API
- CORE-19335 — Update Intelligent and Advance Search to link to invoice View screen
- CORE-19431 — Honor CVV values with leading zeros when attempting capture from Admin area with Authorize.net CIM
- CORE-19466 — Add WHOIS server entry for .it.com TLD
Modules
- MODULE-7895 — Prevent client selection of currency for mandates with GoCardless
- MODULE-7915 — Provide non-blocking rejection response to webhook pushes to allow propagation to all subscribing systems of the account at Stripe
- MODULE-8013 — Improve Remote Usage Stats collection for Resellers in DirectAdmin
- MODULE-8056 — Support SHA verification hashes from 2Checkout
- MODULE-8070 — Prevent error in PHP 8.1 when saving contact details with Hexonet
- MODULE-8074 — Prevent display erroneous error message on product details of reseller service with Plesk
- MODULE-8087 — Correct data required for transfer of .es TLDs with OpenSRS (Also known as: CORE-19226)
- MODULE-8101 — Improve webhook payload inspection for alternative transaction reporting from PayPal Payments
- MODULE-8104 — Improve error message for invalid details when attempting to create pay method with Stripe SEPA
- MODULE-8111 — Prevent error in PHP 8.1 for invalid transfer sync requests with Namecheap
- MODULE-8116 — Ensure Statement Descriptor is provided for transaction with Stripe SEPA
Version 8.11.0 (Release Candidate)
Implemented
- FEATURE-2299 — Implement hCaptcha®
- FEATURE-3833 — Improve Admin Dashboard informational controls and provide updated messages
Maintenance
- CORE-19220 — Improve handling of orphaned Predefined Service Addons in Client Area
- CORE-19470 — Uncaught exception during a client area Stripe payment attempt
- CORE-19510 — Prevent erroneous encoder compatibility warnings by removing no longer distributed files related to PayPal integrations
- CORE-19517 — Provide more informative error message when reCAPTHCA v3 invisible verification fails
Modules
- MODULE-8126 — Prevent error in PHP 8.1 when attempting to create an invoice for GoCardless with an unsupported currency
Version 8.11.0 (General Availability)
Implemented
- MODULE-8035 — Implement Stripe app API key generation
Maintenance
- CORE-19400 — Prevent error when viewing invoice assigned to absent payment gateway
- CORE-19573 — Improve description for Captcha settings
- CORE-19617 — Correct currency decimal display of add payment amount on invoice view screen
Version 8.11.1 (Maintenance)
Maintenance
- CORE-19649 — Ensure Invoice Item data is not lost upon save when managing an Invoice
Version 8.11.2 (Maintenance)
Maintenance
- CORE-19640 — Correct translation string interpolation on admin registrar and TLD setup pages
- CORE-19657 — Correct translation string interpolation on admin Updater page
Modules
- MODULE-8142 — Improve display of invoice payment page with optional card fields in PayPal Payments
- MODULE-8144 — Correct webhook generation when saving configuration of Stripe
Version 8.11.3 (Security)
We are limiting technical details on these changes to protect users who may not yet have upgraded.
Maintenance
- WHMCS-19435 — Undisclosed Security Fix
- WHMCS-19688 — Correct date timestamp of refund transactions (Also known as: CORE-19688)
- WHMCS-19691 — Undisclosed Security Fix (Also known as: CORE-19691)
- WHMCS-19734 — Correct credit removal value when removing invoice overpayment (Also known as: CORE-19734)
- WHMCS-19947 — Undisclosed Security Fix
- WHMCS-19950 — Undisclosed Security Fix
- WHMCS-19952 — Undisclosed Security Fix
- WHMCS-19953 — Undisclosed Security Fix
- WHMCS-19954 — Undisclosed Security Fix
- WHMCS-19955 — Undisclosed Security Fix
- WHMCS-19957 — Undisclosed Security Fix
- WHMCS-19958 — Undisclosed Security Fix
- WHMCS-19959 — Undisclosed Security Fix
- WHMCS-19967 — Undisclosed Security Fix
- WHMCS-19981 — Undisclosed Security Fix
- WHMCS-19983 — Undisclosed Security Fix
- WHMCS-19984 — Undisclosed Security Fix
- WHMCS-19987 — Undisclosed Security Fix
- WHMCS-19992 — Undisclosed Security Fix
- WHMCS-20029 — Undisclosed Security Fix
- WHMCS-20064 — Undisclosed Security Fix
- WHMCS-20066 — Undisclosed Security Fix
- WHMCS-21726 — Undisclosed Security Fix
- WHMCS-21729 — Undisclosed Security Fix
- WHMCS-21763 — Undisclosed Security Fix
- WHMCS-21765 — Undisclosed Security Fix
- WHMCS-21766 — Undisclosed Security Fix
- WHMCS-21768 — Undisclosed Security Fix
- WHMCS-21769 — Undisclosed Security Fix
- WHMCS-21862 — Undisclosed Security Fix
- WHMCS-21884 — Undisclosed Security Fix
- WHMCS-21998 — Undisclosed Security Fix
- WHMCS-22041 — Undisclosed Security Fix
Modules
- WHMCS-21375 — Ensure only partial payment amount is capture when appropriate for invoices paid by PayPal Payments (Also known as: MODULE-8180)
8.10 Change Log
8.10.0 (Beta)
Implemented
- FEATURE-3697 — Sitejet Builder education, management, and integration utility
- FEATURE-3729 — Sitejet Builder panels, SSO, and publish for client and admin area
Maintenance
- CORE-19025 — Increase resilience in the event of orphaned pay method data
- CORE-19121 — Correct PayPal Payments logo path in CSS
- CORE-19122 — Correct display of Subtotal in view-only invoice view
- CORE-19123 — Correct pagination on client invoices tab
Modules
- MODULE-8061 — Correct Admin return URL in Duo
- FEATURE-3772 — Correct redirect on checkout with promo code resulting in zero balance due for PayPal Payments and Card Payments
- FEATURE-3781 — Correct rendered height of payment option in checkout
8.10.0 (Release Candidate)
Implemented
- FEATURE-3759 — Auto Cancel Overdue Invoices
- FEATURE-3792 — When aggregating invoices for auto cancellation, exclude those with partial payment or credit applied
- CORE-19024 — Detect CloudFlare connection and provide a Health Status warning when applicable
Maintenance
- CORE-19161 — Correct error with delete button on Client Overview Invoices tab
- FEATURE-3687 — Ensure webhook handlers include History when logging to gateway log
Modules
- MODULE-8066 — Correct Plesk SSO redirect location when accessing a secondary domain
- MODULE-8067 — Prevent cron fatal error when capturing payment for an invoice that is set to PayPal Payments and the client has not stored a token
- MODULE-8069 — Correct SagePay test/sandbox URL
Project Management Addon
- PMA-217 — Prevent erroneous permission failure when duplicating projects
Version 8.10.0 (General Availability)
Implemented
- FEATURE-3794 — Implement Automation Status Overview and Details for Invoice Auto Cancellations
Maintenance
- CORE-19157 — Update WHOIS server listing for .sg TLD
- CORE-19163 — Add View Invoices as valid permission to download invoice PDFs
- CORE-19178 — Use current time for timestamps created by manual invoice payments
Modules
- MODULE-8072 — Update detection of merchant account capabilities performed at onboarding due to changes at PayPal Payments
Version 8.10.1 (Maintenance)
Maintenance
- CORE-19222 — Fix error during upgrade to 8.10.0-release.1 when MySQL 5.7 is in use
8.9.0 (Beta 1)
Implemented
- FEATURE-3367 — Implement On Demand Renewals for Service Addons
- FEATURE-3461 — Integrate PayPal Payments and PayPal Card Payments, allowing recurring payments by card or PayPal without subscription agreements/IDs
Maintenance
- CORE-7657 (#5121) — Prevent setting Next Invoice Number to an unsupported value
- CORE-18029 — Improve performance of admin area pages with large tbladminlog
- CORE-18557 — Improve performance of Client Activity widget for systems with millions of clients
- CORE-18601 — Correct invoicing of scaling quantity product addons
- CORE-18625 — Prevent error in PHP 8.1 when Affiliate Earning Percentage is undefined
- CORE-18651 — Correct relational morph of “Recalculate on Save” for addons
- CORE-18686 — Prevent error when Licensing addon is deactivated and services still link to a Licensing provisioning product
- CORE-18744 — Ensure Ox services cannot attempt to provision billing cycle upgrades (Also known as: MARKET-279)
- CORE-18747 — Ensure billable item can be saved without error with an empty “Hours/Qty” field
- CORE-18771 — Prevent error in PHP 8.1 when placing a new order while using the Arabic language (Also known as: MODULE-7963)
- CORE-18837 — Prevent error in PHP 8.1 when processing Email Marketer Rules with undefined values
- CORE-18860 — Correct upgrade routine in 8.0 for user Sign In Integration association (Also known as: CORE-18863)
- CORE-18879 — Correct error thrown when logging in as a client with a service assigned to a deleted product
- CORE-18891 — Resolve Email sending failed error when using Office 365 (Also known as: CORE-18893)
- CORE-18946 — Gateway Module name needs to be consistent between A&I and config
Modules
- MODULE-6517 — Correct fatal error when selecting approver email for GlobalSignSSL certificates
- MODULE-7992 — Ensure PayPal subscriptions are not attempted for multi-year domains during order checkout
Project Management
- PMA-208 — Prevent error in PHP 8.1 when processing staff logs with invalid data
- PMA-215 — Correct missing endif statement in the view template