We’re currently running XStore 9.7.11 with XStore Core 5.7.11 and WooCommerce 11.2.2.
After updating WooCommerce, we identified two outdated theme overrides:
1. Mini-cart
-File: woocommerce/cart/mini-cart.php
-XStore template version: 11.2.0
-WooCommerce version: 11.2.2
-The XStore template delegates item rendering to etheme_cart_items().
-We identified the missing quantity escaping in framework/woo.php, approximately line 2995.
2. Checkout order review
-File: woocommerce/checkout/review-order.php
-XStore template version: 11.2.0
-WooCommerce version: 11.2.2
-The displayed product quantity at approximately line 114 is missing the esc_html() protection introduced in WooCommerce 11.2.2.
WooCommerce’s relevant upstream change is documented here:
https://github.com/woocommerce/woocommerce/pull/70657/files
We understand this is security-related hardening and have not established that either difference is exploitable on our installation.
Our storefront uses XStore’s native mini-cart functionality alongside FunnelKit Checkout, so we would prefer an official compatibility update rather than modifying the parent theme or introducing custom overrides.
Could you please confirm:
-Whether these differences are already being addressed.
-Whether an official XStore update or Patcher fix is available.
-Whether you recommend any temporary mitigation.
-If possible, when WooCommerce 11.2.2 compatibility will be incorporated.
We would appreciate your guidance, particularly because both components are part of our production checkout experience.
Thank you!
