WooCommerce 3.4.1 is available. ~61 commits made it into this release and the full changelog is below.
* Fix - Fix webhook admin filtering URLs. #20236 * Fix - Add missing wp_unslash calls to product data meta box to prevent quote characters being escaped on save. #20235 * Fix - Display price filter widget in LTR mode on RTL sites. #20221 * Fix - Refactor WC_Coupon constructor to allow for passing in coupon objects. #20193 * Fix - Path field in advanced CSV importer was broken due to an esc_url call. #20191 * Fix - Prevent shipping method instances trying to save settings on non-instance screens. #20217 * Fix - Wrapper function to get full mysql version string with mariadb handling. #20231 * Fix - woocommerce_pagination had some extra white space. #20214 * Fix - If a file size cannot be read, ignore range headers to prevent offsite downloads being 0kb. #20205 * Fix - Allow HTML when using `wc_attribute_label()`. #20202 * Fix - Update address-i18n.js to prevent appending multiple "(optional)" labels. #20195 * Fix - Check plugin properties exist when listening to auto_update_plugin hook. #20234 * Fix - Add extra checks in `get_canonical_package_rate_ids` to prevent notices. #20237 * Fix - Fix infinite loop with importing tax rates. #20253 * Fix - Echo attribute label for "empty" default option. #20256 * Fix - Fix download sample tax rates URL format. #20272 * Fix - Product properties should not be accessed directly PHP notice when calling `wc_get_product_attachment_props`. #20282 * Fix - If flexslider is disabled, gallery images also need to trigger photoswipe on click. #20290 * Fix - Product import file uploads on windows servers. #20273 * Fix - Fix variation attribute selection via the cart page/query string. #20293 * Fix - Add greater specificity to required styling in 2017 theme. #20296 * Enhancement - Export legacy paypal meta data in personal data exporter. #20200 * Enhancement - Improve performance of `wc_update_340_states` update routine to help prevent timeouts. #20241 * Dev - Remove red styling for PHP notice if using > 5.6. #20294 * Dev - Add an action hook after printing the cart item name. #20190 * Localization - Use "payment tokens" terminology in exports. #20197
Download the latest release of WooCommerce here or venture over to Dashboard → Updates to update your plugins from WordPress.
As usual, if you spot any other issues in WooCommerce core please log them in detail on Github, and to disclose a security issue to our team, please submit a report via HackerOne here. Comments on this post are closed.