VirtueMart 3.2.6 released last month to solve a XSS vulnerability and overhauled infrastructure. However, an error has been found in this VirtueMart version related to setting the default Joomla frontend language as the shop language. This issue has been fixed in latest VirtueMart version 3.2.8. Besides, VirtueMart 3.2.8 also addresses a numbers of bugs which will be listed below. DOWNLOAD VM3 NOWVirtueMart 3 component (core and AIO) Full List VirtueMart 3.2.8 Bug Fixes Fixes for search options and display of search results Search plugin, added SKU (by Franz-Peter Scherer) Shop language is correctly set by Joomla default front end language...

VirtueMart 3.2.6 has been released to address a minor XSS vulnerability present in previous versions as well as improve the infrastructure. It occurred when the features feeds and search were used together. It happened only for feed enabled, so administrators can close the leak by disabling the feed functions. The vulnerability has been addressed by using getCurrentUrlBy function, which works with a whitelist for variable names and it urlencodes any value. DOWNLOAD VM3 NOWVirtueMart 3 component (core and AIO) VirtueMart 3.2.6 Improvements Important patch to prevent memory leak when switching languages. usermodel, extra check if the already loaded user has...

VirtueMart 3.0.18 has been released. It is the last release for the VM3.0 series. There won't be any new VM3.0.x updates except security fixes. VirtueMart for WordPress Beta version may come soon. The last big task is only the router, which must be adjusted to the WordPress links. A light version of the Joomla libraries is still used to transform VirtueMart to a cms-less system like WordPress. New Features in VirtueMart 3.0.18: For Shopowners Customfields of type S (String) and P (Property) can be used to automatically create a dropdown for search (like tags) Added ajax for child variants in category...