π Security: The term picker the editor uses could be called without logging in and returned the names of every term of any taxonomy, private ones included. It now requires the editor's own security token and the capability to edit posts.
π Security: The dynamic-tag autocompletes (posts, terms, authors, attachments) checked a security token but no capability, so their by-id lookups could reveal the titles of draft and private posts. They now require the capability to edit posts.
π Security: The YouTube widget's API status check let any editor-level user replace, or on a failed check, delete the site-wide YouTube API key. Changing the stored key is now for administrators only. Everyone else gets a plain status check.
π Security: The Mailchimp editor endpoints were reachable without logging in, and the audience endpoint could save the site-wide API key. The add-on no longer registers these endpoints and keeps only the subscribe handler for older free-plugin versions.
π Security: Template plugin details were fetched from WordPress.org over plain HTTP and deserialized. They now use WordPress core's plugin API over HTTPS.
π Fixed: The Mailchimp subscribe handler referenced a class name that stopped existing in 4.3, causing fatal errors with the previous free plugin. It now uses the correct class name.
π Fixed: With free version 4.1, the add-on registered no atomic widgets, PHP snippet type, or form hooks. It now supports both hook spellings.
π Fixed: Lottie animations and custom fonts from starter templates were not imported. Administrators can now import .json, .woff, .woff2, .ttf, .otf, and .eot files.
.json
.woff
.woff2
.ttf
.otf
.eot
π Fixed: Sites with the Form widget disabled could log a WP_Scripts::add was called incorrectly warning. The date-picker runtime now waits for its dependency.
WP_Scripts::add was called incorrectly
π Changed: All add-on strings now use the animation-addons-for-elementor-pro text domain. Translations also load from the add-on's own languages/ folder. The translation template increased from 1,302 to 2,682 strings.
animation-addons-for-elementor-pro
languages/
π Changed: The free-plugin update notice now references version AAE Pro Documentation 4.2.2.
π Changed: Every class, constant, and namespace now uses the unique aaeaddon prefix. Previous names still resolve for backward compatibility.
aaeaddon
β¨ Added: Pro now works whether or not the free plugin has already been updated. Pro can be updated first, which is the recommended order.
β¨ Added: An admin notice appears when the matching free-plugin release is not installed. It disappears automatically after updating and can be postponed for one week.
β‘ Changed: Front-end performance improved by loading about 150 KB less PHP per page view. Diagnostics, updater, and cache tools now load only where needed.
ποΈ Removed: An unused slider trait that loaded on every request. All slider widgets already use the free plugin's version.
position: fixed
π Fixed: Flipbox widget backside content was not displaying correctly.
β¨ Added: Lightbox support for the Filterable Gallery widget.
π οΈ Fixed: The Image Reveal on Hover feature was not working after clearing the cache from the Elementor Dashboard Settings. This issue has been resolved, and the Image Reveal effect now works smoothly.
π― Fixed: The Top Position and Left Position options for the Image Reveal on Hover feature were not functioning correctly. Both options are now working as expected.
β¨ Improved: Reordered the Widget Categories Toggle Position controls for a better and more intuitive user experience.
π οΈ Fixed: The Smooth Scroller device-specific Enable/Disable settings occasionally did not work properly. This issue has now been resolved.