Version 4.0.1 is a focused maintenance release that hardens security, fixes a couple of Shipping Carriers issues, and makes the carrier screen feel noticeably snappier.
🔒 Security SQL Injection Fix (CVE-2026-57773) – Hardened the CSV Import against a SQL injection vulnerability reported via Patchstack. The affected query now uses a fully parameterized statement. We recommend all users update to 4.0.1.
🐛 Bug Fixes Bulk Carrier Removal – Fixed the “Remove Selected” button in the “All Carriers Selected” state, which previously did nothing when clicked. Selection Banners – The “carriers selected” and “all carriers selected” notices no longer appear at the same time.
⚡ Performance Instant Edit Modal – The Edit Shipping Carrier window now opens instantly, with no loading delay.
🔧 Compatibility Tested with WooCommerce 10.9.3