Hey everyone 👋

This one is small but worth taking. If your Starter Templates page had been throwing a 404 on certain hosts, that’s sorted. We also closed off a few places where the plugin was trusting requests it shouldn’t have.

Let’s get into it.

🐛 Squashed

• The Starter Templates page no longer 404s on some hosts. On Apache and LiteSpeed servers running mod_substitute, the page response grew past the server’s line-length limit and the whole request died. It loads normally now.
• Import actions are administrators only. The CartFlows, Cart Abandonment Recovery, and LatePoint import endpoints, plus the template data request endpoint, were reachable by lower-privileged users. They now require an administrator.
• Image imports can only reach approved stock image hosts. The image sideload endpoints would fetch from any URL handed to them, which could be pointed at services inside your own network. They now download from an allowlist of stock image hosts only.

We recommend updating as soon as you can.

As always, support is one click away if anything feels off.

Team Starter Templates

Hello Starter Templates users,

We’re releasing Starter Templates v4.7.6 — a new custom color palette generator for Classic Templates, deep-link onboarding for in-house plugins, security hardening, and a set of SureMembers restriction fixes.

What’s New?

• Classic Templates: Added a custom color palette generator that creates a full color scheme from a primary color, with live preview and st-color URL parameter support.

• Added deep-link support for in-house plugins to launch the template import onboarding directly.

Security

• ST Importer: Enforced TLS certificate verification on remote image and content downloads during import.

What’s Fixed?

• Security — Elementor: Inserting a template no longer overwrites the layout of an unrelated page, and site-wide Elementor settings can now be changed by administrators only.
• Imported content restrictions now work without re-saving each membership in SureMembers plugin data.
• Blocked visitors now get the intended restriction in memberships on the imported site, instead of the demo.
• AI Builder: Template import reported a generic import failure and logged a PHP warning when the site details were not yet stored.
• ST Importer: SureMembers restrictions now work right after import; the skipped access group priority meta is restored.
• ST Importer: SureMembers restriction precedence and rule references now resolve on the imported site.

---

We recommend updating to Starter Templates v4.7.6 promptly for the security fixes, along with the latest features and improvements.

Best,
Team Starter Templates

Hello Starter Templates users,

We’re releasing Starter Templates v4.7.5 — WordPress 7.1 compatibility, Sigmize integration, AVIF image support in AI Builder, workflow improvements, and a set of security and reliability fixes.

What’s New?

• Added Sigmize (Conversion Testing) to the features selection step in the onboarding flow.
• Finish Setup: Added Sigmize action item to the Finish Setup checklist.

What’s Improved?

• Ensured compatibility with WordPress 7.1.
• AI Builder: Added AVIF image support, so templates using AVIF images bring them across along with the other formats.
• AI Builder: Removed the goals selection screen and the tone and keywords options from the AI website builder onboarding.
• Design Kit: Spectra Blocks plugin is now installed from the WordPress.org repository, removing the temporary hardcoded download URL.
• Finish Setup: Setup steps can now complete directly from the checklist instead of sending you to another screen.

What’s Fixed?

• ST Importer: Site Options import no longer times out on hosts with a strict request limit — log entries are written in batches and the option set is no longer processed twice.
• Elementor template library: Long page titles no longer wrap onto a second line or push the action button out of alignment — titles are now truncated with an ellipsis, keeping the card footer always single-row.
• Security: Enforced TLS certificate verification on ZipWP API requests in the onboarding flow.
• Design Kit: Restricted the ZipWP authentication return handler to users who can manage the site, so lower-privileged roles can no longer overwrite the site-wide ZipWP credentials.
• Design Kit: Design Library button in the editor toolbar no longer sits shorter than the adjacent wp-admin and page builder buttons.
• ST Importer: The import stream now closes after an import error instead of silently reconnecting against the finished import.
• ST Importer: Import log entries are now buffered and written in batches instead of one locked file write per entry, keeping long import steps within the request limit enforced by some hosts.

---

We recommend updating to Starter Templates v4.7.5 promptly for the security fixes, along with the latest features and improvements.

Best,
Team Starter Templates

Hello Starter Templates users,

We’re releasing Starter Templates v4.7.4 — a security hardening for imported post meta, more resilient template imports, and search UX improvements.

Security

• Prevented PHP object injection by disallowing object instantiation when deserializing imported post meta.

What’s Improved?

• Changing the page builder, filter, toggle, or sort order while a search is active now updates results instead of clearing the search.
• AI Builder: Ecommerce AI site builds now show live status updates during the final step instead of appearing stalled.
• AI Builder: The import screen now shows a waiting state when a previous import request is still running, instead of stalling without feedback.
• ST Importer: Content import now survives dropped connections, running in the background, and reports a clear error on fatal failures instead of failing silently.

What’s Fixed?

• AI Builder: AI site import now retries when export data isn’t ready yet, instead of erroring under high-volume site creation.
• AI Builder: Interrupted imports no longer get stuck in an endless retry loop; dead imports are now detected via a heartbeat and recovered automatically.
• ST Importer: SureDonation donation forms no longer import with blank fields and missing labels; form and campaign content now runs through block-content normalization.

---

We recommend updating to Starter Templates v4.7.4 promptly for the security fix, along with the latest improvements.

Best,
Team Starter Templates

Hello Starter Templates users,

We’re releasing Starter Templates v4.7.3 — more reliable imports, better error reporting when things do go wrong, SureCart variant support, and a set of Elementor tooltip refinements.

What’s Improved?

• Refined the Elementor Template Library premium tooltips for better usability, clarity, and dark mode accessibility.
• AI Builder: PHP fatal errors during import are now captured in the import log and reported on the import screen instead of failing silently.
• ST Importer: Added import compatibility for SureCart products with variants.
• ST Importer: Import log entries are now appended atomically so concurrent requests no longer overwrite each other, and PHP fatal errors during reset are captured in the import log.

What’s Fixed?

• Added database fallback for demo content when the JSON file write fails silently on shared hosting, preventing “Customizer data is empty” errors.
• Accented and special characters (e.g. é, ñ) getting corrupted into literal escape sequences when inserting a single Elementor template or block.

---

We recommend updating to Starter Templates v4.7.3 for the latest improvements and fixes.

Best,
Team Starter Templates

Hello Starter Templates users,

We’re releasing Starter Templates v4.7.2 — broader importer support (SureMembers, SureCookie, Spectra Blocks), a cleaner Finish Setup experience, and a set of AI Builder polish and fixes.

What’s Improved?

• Added SureCookie (Cookie Consent) to the features selection step in the onboarding flow.
• Importer: Spectra Blocks plugin is now installed from the WordPress.org repository during import, removing the temporary hardcoded download URL.
• Importer: Added SureMembers import support — access group, post, and term ID remapping across restriction rule metas, restricted-content post meta, shortcodes, and block attributes.
• Finish Setup: Show the Website Pages action item in the Finish Setup checklist when the standalone Spectra Blocks plugin is active.
• Design Kit: Version toggle no longer appears when UAGB is inactive, even if stale database options from a previous install are present.
• AI Builder: Import progress screen improvements.

What’s Fixed?

• AI Builder: Template search now correctly handles multiple keywords and keywords containing spaces or special characters.
• AI Builder: Prevent Spectra Blocks onboarding redirect after activation during import by updating to the renamed redirect and onboarding options.
• AI Builder: Corrected typos in user-facing error messages.

---

We recommend updating to Starter Templates v4.7.2 for the latest improvements and fixes.

Best,
Team Starter Templates

Hello Starter Templates users,

We’re releasing Starter Templates v4.7.1 — a small patch fixing an AI Builder loading-screen glitch and an image replacement issue in V3 template imports.

What’s Fixed?

• AI Builder: Progress loader jump and content alignment on the building-website screen.
• Importer: Selected images were not replaced in content for V3 templates using core Image and Spectra v3 Container blocks.

---

We recommend updating to Starter Templates v4.7.1 for the latest fixes.

Best,
Team Starter Templates

Hello Starter Templates users,

We’re releasing Starter Templates v4.7.0 — a feature-packed update with broader plugin compatibility, a redesigned AI Builder loading experience, and a set of Design Kit improvements.

What’s New?

• Added compatibility for the SureDonation plugin.
• Added SureMembers Core plugin compatibility to prevent onboarding redirect during template import.
• AI Builder: Added a feature card carousel to the loading screen with auto-advancing dot navigation, gradient progress ring, and support CTA.
• Design Kit: Added a consent popup that installs and activates the required Spectra and form plugins before a pattern is inserted, with a tooltip on the Insert button listing the required plugin.
• Design Kit: Added compatibility for the Spectra Blocks plugin.

What’s Improved?

• AI Builder: The loading screen now handles failures gracefully with a credit-restore message, retry that rebuilds the site, and a stall timeout.
• Importer: Added compatibility for the SureCart Product Form block to correctly remap product IDs after template import.
• Design Kit: Pattern import no longer shows the upfront ZipWP connection prompt.

What’s Fixed?

• Fixed the ecommerce platform selection step showing incorrectly for templates without a SureCart variant.
• AI Builder: Listbox language selection crash and tooltip rendering issue while using the Google Auto-Translate wizard.
• Design Kit: Auto-open Design Library no longer closes third-party plugin modals.
• Design Kit: Improved sanitization of imported block content in the block and template-kit importers. Uses raw context in sanitize_post_field to preserve Gutenberg block comment delimiters.
• Design Kit: Self-host the Inter and Figtree fonts used by the Design Library / template importer UI instead of fetching from fonts.googleapis.com.

---

We recommend updating to Starter Templates v4.7.0 for the latest features, improvements, and fixes.

Best,
Team Starter Templates

Hello Starter Templates users,

We’re releasing Starter Templates v4.6.3 — bringing Spectra Blocks compatibility to AI Builder imports and adding a version selector for sites running Spectra Legacy.

What’s New?

• Added Spectra Blocks plugin compatibility for Classic Builder and AI Builder template imports.

What’s Improved?

• Added a version selector for sites with Spectra Legacy installed, allowing users to switch between Spectra Legacy and Spectra Blocks template designs.

---

We recommend updating to Starter Templates v4.6.3 for the latest improvements.

Best,
Team Starter Templates