5.5.1.69 - 29 October 2026

Fixes & small changes (8)

• 2026-10-23 #XCB-5703
  Fixed a security vulnerability. #CDev-Core

• 2026-10-28 #ECOM-10741
  Fixed multiple Insecure Direct Object Reference (IDOR) vulnerabilities in the storefront and several add-ons. #CDev-Core #XC-CustomerAttachments #XC-VendorMessages #XPay-XPaymentsCloud

• 2026-10-26 #ECOM-10728
  Migrated SSH addresses from bitbucket.org to ssh.bitbucket.org and updated Docker images to version 1.5.2. #CDev-Core

• 2026-10-28 #ECOM-10684
  Improved CloudSearch logging to respect store log levels: 401/403 responses are logged as notices, network failures as warnings, response bodies are truncated, and API keys are excluded. #QSL-CloudSearch

• 2026-10-26 #XCB-5710
  Fixed incorrect navigation via MMY links when using 2-level MMY. #QSL-Make

• 2026-10-22 #XCB-5702
  Fixed an "Allowed memory size exhausted" error on category pages caused by unbounded growth of the Product Stickers cache. #QSL-ProductStickers

• 2026-10-28 #XCB-5714
  Fixed a security vulnerability in the QSL/WordPress add-on. #QSL-WordPress

• 2026-10-23 #ECOM-10506
  Fixed a security vulnerability related to the PayPal partner access token. #XPay-XPaymentsCloud