Updated the frontend build toolchain to Vite 8.3.4.
4.0.25 2026-10-17
Fixed
Fixed checkout failing when an applied gift voucher had no remaining order value to cover.
4.0.24 2026-10-15
Added
Added the maxVoucherCodesPerOrder setting, defaulting to 500. Orders exceeding this combined voucher quantity must be reduced before starting checkout, or the limit increased in configuration. Payments already in progress retain full fulfilment.
Changed
Limited voucher and coupon submissions through Gift Voucher to approximately one request per second per IP address. Faster submissions return HTTP 429; integrations should wait before retrying.
Updated Craft API usage to avoid deprecated calls.
Changed the default and fallback voucher PDF filename to Gift-Voucher.pdf. Custom filename formats are unchanged.
Fixed
Fixed a medium-severity denial-of-service vulnerability.
Fixed a medium-severity authorization vulnerability.
Fixed a medium-severity information disclosure vulnerability.
Fixed two low-severity authorization vulnerabilities.
Fixed a low-severity rate-limit bypass vulnerability.
Fixed payment retries being blocked after a gateway created an incomplete payment attempt. (#151(opens new window))
4.0.23 2026-10-07
Changed
Require Verbb Base 3.0.20 or later so shared control-panel layouts use the current asset bundle namespace. (verbb-base#3(opens new window))
4.0.22 2026-10-05
Fixed
Fixed a medium-severity denial-of-service vulnerability.
Fixed a low-severity authorization vulnerability.
Fixed a low-severity denial-of-service vulnerability affecting bulk code generation.
Fixed a low-severity authorization vulnerability affecting multisite voucher previews.
Fixed a low-severity information disclosure vulnerability affecting PDF error logging.
4.0.21 2026-10-02
Changed
Updated the required version of verbb/base to 3.0.19.
Fixed
Fixed a high-severity server-side template injection vulnerability.
Fixed a high-severity information disclosure vulnerability.
Fixed a high-severity stored-value authorization vulnerability affecting order-based code storage.
Fixed a low-severity authorization vulnerability affecting site-specific voucher content.
Fixed a low-severity information disclosure vulnerability affecting scheduled and expired vouchers.
4.0.20 2026-09-30
Changed
Route plugin settings through the plugin’s authorized settings controller.
Fixed
Fixed a high-severity stored-value accounting vulnerability.
Fixed a high-severity authorization vulnerability affecting Commerce orders.
Fixed an information disclosure vulnerability affecting voucher code access.
Fixed an XSS vulnerability.
4.0.19 2026-09-23
Changed
Render voucher SKU and description formats in Twig sandbox.
Fixed
Fix saving one settings page resetting settings on the other pages.
4.0.18 2026-09-14
Changed
Align documentation filenames with page titles and update internal links.
Updated documentation for clearer, more consistent guidance.
4.0.17 2026-09-13
Changed
Normalize plugin settings.
4.0.16 2026-08-20
Added
Add support for dompdf/dompdf v3.
4.0.15 2026-06-27
Added
Add dompdf/dompdf:^3.0 support for PHP 8.5 compatibility.
4.0.14 2026-06-20
Fixed
Fix isVoucherAdjustment to check adjustment type and add getVoucherCodeKey Twig helper.
4.0.13 2026-04-29
Changed
Only test line items which are not custom line items when searching for a Voucher purchasable.
4.0.12 2026-01-13
Changed
Update voucher handling for includeShipping = false to include non-inclusive tax.
Fixed
Fix an error when saving voucher types.
4.0.11 2025-11-29
Added
Add support for sorting Voucher Codes by “Original Amount”, “Current Amount”, “Expiry Date”, and “Date Updated”.
Add Description Format to Voucher Types to allow control over the line item description for a Voucher.
4.0.10 2025-11-06
Fixed
Fix PDF handling for Craft Cloud.
4.0.9 2025-07-18
Added
Add includeShipping plugin setting to include or exclude shipping costs for voucher redemption.
Add multisite menu to bulk-generate form also.
Add Voucher as CodeQuery Condition.
Add afterBulkGenerateCodesEvent event.
Changed
Update English translations.
Exclude shipping adjustments on line items when includeShipping is false.
Update voucher shipping handling to support line item shipping rates.
Fixed
Fix an error when downloading PDF vouchers.
Fix an error for shipping/tax categories.
4.0.8 2025-07-18
Added
Add includeShipping plugin setting to include or exclude shipping costs for voucher redemption.
Changed
Update English translations.
Update voucher shipping handling to support line item shipping rates.
Fixed
Fix an error when downloading PDF vouchers.
Fix an error for shipping/tax categories.
4.0.7 2025-05-02
Fixed
Fix an error when generating PDFs for vouchers with no orders.
4.0.6 2025-05-01
Changed
Update PDF URLs to use UIDs instead of IDs.
Fixed
Fix PDF handling for Craft Cloud.
4.0.5 2025-03-05
Changed
Improve redemption querying performance.
Fixed
Fix deleteRedemption return value.
4.0.4 2024-10-20
Fixed
Fix an error when creating custom line items.
4.0.3 2024-09-07
Changed
Change “Share” button to “View” for vouchers, for consistency with Craft/Commerce.
Fixed
Fix missing product variable when previewing a voucher.
Fix an error when duplicating a voucher.
Fix saving a code with a decimal value being cast to an int.
4.0.2 2024-07-21
Fixed
Fix an error when adding a custom-priced voucher to the cart.
4.0.1 2024-07-10
Added
Add support for orderSite for PDF URLs.
Changed
Update English translations.
Switch session handler to use Craft’s Session helper.
Fixed
Fix an error when saving a new site.
Fix session-handling to check for console requests.
Fix vouchers always being re-saved when updating a site or force-applying project config.