Astra Pro v4.13.11 WordPress Theme

What’s New (Changelog) in Astra Pro v4.13.11

2026-10-15 - v4.13.11
* New: Site Builder - Custom layouts using the Hooks layout can now be placed on multiple predefined and custom hooks at once, so the same content no longer needs a separate layout for each hook. (https://wpastra.com/docs/custom-layout-hooks/)
* Improvement: Sticky Header - The Sticky Logo Width option is now available with the Shrink effect, so the shrunk size of the site logo can be adjusted.
* Improvement: Version Control - Rollback dropdowns now remain visible but inactive when no previous versions are available, with a tooltip explaining why.
* Improvement: Mega Menu - Submenu toggle arrows now name their menu item for screen readers, and Disable Link mega menus now open on click.
* Improvement: WooCommerce - Improved compatibility with YITH Pre-Order. Out-of-stock products offered as pre-orders now add to the cart with Slide In Cart, Redirect to Cart/Checkout and Quick View.
* Improvement: WooCommerce - Modern Checkout fields are slightly taller, and the Country and State dropdowns now align and show their label like other fields.
* Fix: WooCommerce - Adding a product to the cart with the Single Product Slide In Cart action no longer locks page scrolling when the header Cart Click Action is set to Cart Page.
* Fix: WooCommerce - Grouped products failed to add to cart with AJAX add to cart actions such as Slide In Cart when child products had large IDs.
* Fix: Sticky Header - The site logo now resizes smoothly with the rest of the header when the Shrink effect is enabled.
* Fix: Customizer - Blog and archive post titles now update live in the preview when the Body or Headings font family is changed.
* Fix: Page Headers - Background image URLs with more than one query parameter, such as CDN or signed image URLs, now load with all their parameters.
* Security: WooCommerce - Logging in from the Modern Checkout page on an HTTPS site now keeps the login session cookies secure.
* Security: WooCommerce - The Modern Checkout email check no longer reveals whether an account exists when the Modern Checkout layout is not in use or checkout login and account creation are turned off.
* Security: Site Builder - The [astra_custom_layout] shortcode now renders only Site Builder layouts the visitor is allowed to see, and code editor snippets can no longer be changed through custom fields.
* Security: Site Builder - Comments shown through Custom Layouts no longer process shortcodes, and Auto Load Previous Post now only loads pages from your own website. (Props - savphill / Patchstack)
* Security: Page Headers - Only administrators can now manage Page Headers, and their color, size and image settings are validated before use. Existing Page Headers keep working.
* Security: Updated the bundled DOMPurify sanitizer library to 3.4.17, which includes upstream fixes for several HTML sanitization bypasses (CVE-2026-0540).