VirtueMart Project
VirtueMart Project
  • VirtueMart
    • Extensions
    • Documentation
    • Forum
    • Developer
  • News
    • Latest VirtueMart News
    • List all VirtueMart News
    • Blog
  • Features
    • Features
    • What is VirtueMart?
    • Demo
      • DEMO (shopper)
      • DEMO (admin)
  • Community
    • How to start
    • Support the Project
    • Forum
    • Translations
  • Partners
    • Certification
    • Platinum Partner
    • Gold Partner
    • Silver Partner
    • Bronze Partner
  • Download
  • VirtueMart Showcase
  • Extensions
  1. You are here:  
  2. Home
  3. News
  4. Latest VirtueMart News

Small Fixes for VirtueMart 4 and new Beta for VirtueMart 5

Details
Written by: Max Milbers
Category: Latest News
Published: 14 April 2026
Hits: 4
There are two new features

A customer was not happy to see is review with is clear name. I noticed, there was no way to edit it. I remembered, we did it that way long, long ago, just to reduce Fakereviews by shopowners. It sounds nice, virtuemart cant be misused, but in fact it was stupid. I doubt any person has a greater trust in a review, just because the shop runs on VirtuMart. So I reconsidered. The new review system should work so, that any customer can post with the given name, and the own name is just suggested. Shopowners can change now also the name and the message in the backend, but not the voting (may come later). So it is simpler to add a note or to change the name if a customer requested that.
The seconed feature is a replacement of the "chosen dropdown js" against the "choices dropdown js". The difference is that "chosen" is outdated and that "choices" works native, without jQuery. Choices is also the "right choice" for joomla 6. But you can relax, ... in vm 4 it is just activated for the backend. You can use a hidden config to use it also in the frontend. So we came to the next topic, this feature was implemented for VirtueMart 5.

DOWNLOAD VirtueMart 4.6.8
NOW (needs Membership)

VirtueMart 5 is already running on Joomla 6. It has also some extra performance features added already.

The current idea is to remove the need of jQuery and to replace the core jQuery stuff by native javascript. It is also planned to use more static functions, which may break some extensions. Just one example, why that makes a lot sense. Images are displayed with the mediahandler. It makes not really sense to write for any image the function displayFileHandler into the RAM. So most of these functions are static now, which means they are written only one time into the RAM. So for templaters, nothing changes, these functions are of course still dynamic. But it can happen, that complexer extensions for example use the function "displayFileHandler" to display the media edit. But in anycase it is very simple to update outdated code. 

TEST VirtueMart 4.9.3
NOW

Read more: Small Fixes for VirtueMart 4 and new Beta for VirtueMart 5

Enhanced compatibility for coupons and some templates, Opc and some minor fixes

Details
Written by: Max Milbers
Category: Latest News
Published: 15 December 2025
Hits: 699

Just some minor fixes. All this fixes are already ported to VirtueMart 5.But check your coupons, some shops had problems with the last token integration, this new version should fix this. All other enhancements are safe.

Interesting for shopadmins

  • Fixed couponhandling. Moved the token check before the function setCouponCode
  • added jpeg to multiple image uploads
  • product model, small fix for correct search of products in a subcategory of a selected category
  • added a hidden config for product slug handler. Can be set to "changed", which changes the slug if productname got changed, or "always"
  • Enhanced 404 handling, parts of the router used a fallback, which was wrong
  • Userfields in cart add captcha only, if it is allowed to register without product in cart
  • PayPal checkout, order approved should not sent an email anylonger
  • PayPal checkout configuration, removed invalid order stati in order dropdowns

Interesting for developers

  • plgVmInitialise was just for the FE, added trigger plgVmInitialiseBE for the BE
  • calculatorH enhanced the old rules cache. New calculator is now created without using delivery country or state. The new cache handles per vendorid, delivery country and states. All in a new static function loadAllRulesCached
  • manufacturer model added triggers plgVmBeforeStoreManufacturer and plgVmAfterStoreManufacturer
  • user cache works now for id 0 too
  • vmtable self::$loadedX => $this->_loadedX
  • Field vmorderstate added option to exclude stati
  • added to vmTables the possibility to add a where (and not using the primary key)

DOWNLOAD VirtueMart 4.6.6
NOW (needs Membership)

Just Fixes

  • Category model, fixed missing parents in case loaded by cache, but loaded by router without parents
  • Little fiix by stAn of RuposTel for authorizenet plugin.
  • Small fix in custom view to prevent error if there is no custom
  • Some minors, removed setRouterVars after loadConfig in the module
  • little fix for the getChildCategoryListObject to prevent str_replace with null
  • catched 500: count(): Argument #1 ($value) must be of type Countable in reviews, if no review given
  • cart helper, function add fixed the quantity array if it does not fit the given product id array

Optimisations

  • changed currencydisplay to reuse already loaded vendor currency
  • currency model, found uncached query and replaced against default getVendor function (likely cached or reused)
  • shoppergroup model, the function getShoppergroup and getDefault share their result in the cache now, which spares 2 sql calls
  • cart helper, $this->setCartIntoSession, removed the second param true, because actually we need it only one time at begin to prevent that a checkout is fired more than one time (spares 4-6 sql calles)

New OPC needed some fixes, auto token system

Details
Written by: Max Milbers
Category: Latest News
Published: 10 November 2025
Hits: 831

We underestimated the problems with the missing tokens, despite the given manual Fix Missing Token in Checkout VirtueMart 4.6.x.

So first I added a Plugin, which sets the missing token per trigger as default html. But most people did not see it, so the team asked to add a fix directly in the core. Later I let a community user test the new option. The user asked an AI where to find that option and the AI was surprisingly perfectly updated by the committs of the svn, but then failed with the right version numbers. Freaky at meta level correct, but wrong on the facts. Just as an interesting sidenote. And it used the expression. "Auto token system". Sounds great. So lets use "the new VirtueMart auto token system" ;-)

Read more: New OPC needed some fixes, auto token system

We put on the helmet! Important Security release 4.6.0

Details
Written by: Max Milbers
Category: Latest News
Published: 25 September 2025
Hits: 1033
Another important security and bugfix release 4.6.0

An XSS found again by Adam Wallwork. This time I did general update of our filters, many functions got enhanced. Some filters are now always active, we do not leave it to the developers. This version is NOT working on Joomla 6, we will release a new VirtueMart 5 too match all the changes.

 

Max Milbers wearing a helmet
Max Milbers put on the helmet at Königstein Fortress
For Updaters

If you get the error in the cart "Invalid token". Please read this tutorial https://docs.virtuemart.net/tutorials/templating-layouts/fix-missing-token-in-checkout-virtuemart-4-6-x

What else happened?

We heavily work on a namespaced VirtueMart version, which runs without legacy plugin on Joomla 3 up to Joomla 6.

Read more: We put on the helmet! Important Security release 4.6.0

Important Security and Bugfix release 4.4.10

Details
Written by: Max Milbers
Category: Latest News
Published: 09 May 2025
Hits: 1870

Whats going on here? 3rd security release within 6 months? Yes that is unusual, but better the leaks are found and closed than wrong safety feeling. In this special case we provide also the fix for old installations. It should work for any installation higher than vm3.6

Read more: Important Security and Bugfix release 4.4.10

  1. Security and Bugfix release 4.4.8 - Discord Server
  2. Bugfix release 4.4.6
  3. Security release 4.4.4 Update
  4. Just a little update

Page 1 of 24

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10

Forum

  • General
  • Administration
  • Templating

Subscribe to our News


Delivered by FeedBurner
Virtuemart Newsfeed Counter

Follow the VirtueMart Team on Twitter

Follow

logo

VirtueMart ® der iStraxx GmbH

  • Terms of use
  • Privacy Policy
  • Login
  • Contact
  • Imprint
VirtueMart Project
  • VirtueMart
    • Extensions
    • Documentation
    • Forum
    • Developer
  • News
    • Latest VirtueMart News
    • List all VirtueMart News
    • Blog
  • Features
    • Features
    • What is VirtueMart?
    • Demo
      • DEMO (shopper)
      • DEMO (admin)
  • Community
    • How to start
    • Support the Project
    • Forum
    • Translations
  • Partners
    • Certification
    • Platinum Partner
    • Gold Partner
    • Silver Partner
    • Bronze Partner
  • Download
  • VirtueMart Showcase
  • Extensions
This website uses cookies to ensure you get the best experience on our website.