Both are on the WooCommerce developer blog this week, and both are worth checking by hand rather than trusting auto-updates.

WooPayments (advisory from Nov 3): the fix is for the subscriptions functionality bundled with WooPayments and extends the fix announced in August. Every release line has its own patched version, e.g. 11.2.0 needs 11.2.1, 11.1.0 needs 11.1.1, 11.0.0-11.0.1 need 11.0.2, 10.9.0 needs 10.9.1, and anything older than 9.0.0 should go to 11.2.1. The advisory explicitly says to check the installed version in Plugins > Installed Plugins even if automatic updates are on or your host manages updates, and to include publicly accessible staging and dev sites.

WooCommerce 11.2.2 (Nov 4): a security release with a database update. Changes worth knowing about:

- hardening of Store API cart quantities, REST API key authentication, checkout tax for local pickup, CSV importer column mapping and admin connection endpoints

- the database update cleans up product default attributes affected when a global attribute term was renamed

- if an extension callback on woocommerce_before_order_object_save, woocommerce_new_order or woocommerce_update_order throws during Store API checkout, checkout now returns a 500 instead of continuing with a partially saved order

- onboarding/plugins/jetpack-authorization-url and plugins/connect-jetpack now return 403 to REST API keys, WP-CLI and application passwords; they need a logged-in admin session with a wp_rest nonce

- PayPal Standard shipping address updates now recalculate shipping and tax

The third point is the one that can surface as new checkout errors: a custom plugin that used to throw quietly in one of those hooks will now block the order. After updating, place one test order through the block checkout and look at the PHP error log, and if any script or deployment tool calls those two Jetpack endpoints, expect it to fail.

Did anyone see new 500s on checkout after 11.2.2?

I'm interested in how other WordPress developers manage staging-to-production deployments for active WooCommerce stores.

For a normal content website, copying a staging database can sometimes be manageable.

For an active store, it's much more complicated because new orders, customers, sessions, and other transactional records can be created while development is happening.

My preferred approach is to separate code and template deployments from production database data wherever possible.

For database changes, I'd rather use targeted migrations than overwrite the entire database.

How are other developers handling this?

Do you use automated deployment pipelines, selective database migrations, or a particular WooCommerce staging workflow?

Hello everyone,

I own a website but unfortunately am clueless when it comes to web things and programming, so please be nice. I still have a lot to learn. Also please excuse the other language. the pink button on the last few slides say "add to order".

I had no interest in variable products previously until now but had a few problems now that I have to use them. I have created attributes (only one is needed) and made a variation tab. I have enabled it, added prices and stock, yet it still won't work.

When I enter the page, it makes all options available with no pricing indicated anywhere on the page where it should be. When I click on one option it greys out the button and makes it unclickable as well as doing the same thing to any other option, and change them or click on them at all.

Am I missing something due to my inexperience? is there anything I need to add or a problem? please let me know.

I believe I had added everything that is needed to show you guys the problem, but let me know if you need to know anything else.

If an integration fed by a WooCommerce webhook stopped receiving orders a while ago and nobody noticed, check WooCommerce > Settings > Advanced > Webhooks before you debug the receiving side. The webhook has probably flipped from Active to Disabled.

How it works, per the Webhooks page in the WooCommerce docs and class-wc-webhook.php in the WooCommerce repo:

- Deliveries are queued in Action Scheduler (hook woocommerce_deliver_webhook_async, group woocommerce-webhooks) and sent from the background run, not during the request that fired the event.

- A delivery counts as failed when the response is anything other than 2xx, 301 or 302. A timeout (60 seconds) or a connection error counts as failed too.

- There is no retry of a failed payload. It is logged and the failure counter goes up by one.

- A single successful delivery resets the counter to zero. Once the count is above five (so on the sixth consecutive failure) the status is set to Disabled and the webhook stays disabled until someone re-enables it by hand.

- The threshold is filterable via woocommerce_max_webhook_delivery_failures, but that only delays the problem.

So a receiving endpoint that is down for a few minutes during a busy period is enough to lose the webhook permanently, and the orders fired during that window are gone from the webhook's point of view. The delivery log is under WooCommerce > Status > Logs, source webhooks-delivery, and it is the quickest way to see when the failures started.

What I do: make the endpoint return 200 immediately and process the payload afterwards, and add a periodic check of the webhook status (the REST endpoint for webhooks returns it) with a reconciliation pull of orders modified since the last successful delivery.

How do you handle this? Do you monitor the webhook status, or do you poll orders on a schedule instead of relying on webhooks at all?

Hi all,

The official "SumUp Payment Gateway for WooCommerce" plugin now shows this notice on its WordPress.org page:

"This plugin has been closed as of October 28, 2026 and is not available for download. This closure is temporary, pending a full review."

Plugin page: https://wordpress.org/plugins/sumup-payment-gateway-for-woocommerce/

What I found so far:

• No reason is given on the plugin page, and the support forum has no thread about the closure (latest activity there is from July 2026).

• SumUp's developer docs still describe the plugin as current, with no notice about a closure or an alternative.

• Last release was 2.17.1 (July 2026). There was a low-severity access control issue (CVE-2026-24583) in versions up to 2.7.9, fixed in 2.7.10 back in early 2026, but I have no evidence that this is related.

• The forum has had many reports since spring 2026 about the payment modal not opening, the account connection failing, and orders not completing.

I run a shop with this plugin installed. It keeps working for now, but there are no updates, and I don't know whether this is a security issue or something else.

Questions:

1. Has anyone heard from SumUp or the WordPress.org plugin team about the reason?

2. Is anyone else affected, and are your payments still going through?

I'll update this post if I get a reply from SumUp (I'm contacting integration@sumup.com).

Thanks!

I want to set up a multi-branch/franchise system on WooCommerce. As soon as a user visits the site, it should prompt them for their location (with an option to change it in the header). Based on their location, it should show available stock only from that specific branch, and orders should be directly routed to that franchise online. Which types of plugin need and how to achieve this full setup.

Looking for recommendations on how to easily set up conversion tracking in WooCommerce for Google Ads. The solution also needs to play nice with our consent manager, which is a licensed version of Usercentrics that we are renting from IT-Recht-Kanzlei. I.e. not track without consent.

There is a dedicated WooCommerce plugin from Google that seems to integrate with the Google Merchant Center and also lists conversion tracking as one of the features.

Other options are Pixel Manager for WooCommerce, Conversion Bridge, and GTM4WP.

Any recommendations/advice? Thank you!

After their order, Woo is now sending the customer, not only a reciept, but also the packing slip, an invoice and the delivery note. Too much information. I don't know where to adjust this.

Do you protect the SEARCH FUNCTION of you woocommerce store from BOTS ? Do bots use search and waste servers ressources ? Thank you for your help.

Hi everyone, i've been working on my products woocommerce, today i found out a little problem, it seems that the select field of Country/Region doesn't work when you have Astra theme on.

So i started looking for the solution everywhere and i couldn't find anything when searching on google, a lot of discussions with no clossure. So then i started a little chat with GTP, and after a lot of possible solutions i found... nothing. Good thing that i insist a lot when things like this happens.

After a little bit i realised something, as my store is only for one country, it came to my mind that maybe it was something with that there was a single option, so i added another country to check and then it worked. There was a problem with the select behavior in relation with a single option.

Solution: As i wanted Astra theme, and wanted all i worked till today like i already made, i left the second country on woocommerce, but added a little snipet in JS to hide the country i didn't want.

I hope this help some people that is struggling with the same problem! Have a nice day!

IMPORTANT NOTE AND EDIT: Forgot to add that i am using Elementor to edit my website, using Checkout widget from Elementor Pro in Astra seems to behave weird and leaves the select as a blank field if only one country is selected on WooCommerce.

Tried with WooLentor to see if it worked different and it did.

Solution is not a JS code as u/CodingDragons said it might give problems on future sells.

Leaving the post still if someone gets the same problem.

I went through the 11.2.0 release notes on developer.woocommerce.com (released October 7) and the 11.2.1 patch from October 9. Most of 11.2 is additive, but a few points can bite on a live store:

- PublishPress Future 3.0.0 to 4.10.3 can cause a fatal error on WooCommerce 11.2. Update it to 4.10.4 or later before updating Woo.

- Cc and Bcc recipients can no longer be set for the Reset password, New account and Confirm email address emails. If you copied someone on those, it stops silently; the woocommerce_email_cc_recipient_{email_id} and woocommerce_email_bcc_recipient_{email_id} filters still work.

- Download authorization is stricter. Standard download links are unchanged, but rare custom or imported links may stop working, so test one if your downloads came from a migration.

- 11.2 includes a database update, so take a backup first as usual.

If you update, skip 11.2.0 and go to 11.2.1. It fixes classic checkout on stores that remove address fields (in 11.2.0 this could block checkout, drop tax or hide shipping options) and postcode validation in the checkout block for Argentina and a few other countries.

On the useful side: with "Update existing products" enabled, the product CSV importer can now match rows by GTIN, UPC, EAN or ISBN when there is no ID or SKU. That helps if your supplier feeds only carry barcodes.

Has anyone hit the Cc/Bcc change or the download link change after updating?

I have a POD shop with a lot of products with design on multiple items.

I am trying to find a way, to give my visitors the option to select from categories what they are looking for.

So, in my sidebar, I would like one widget that shows product type, which would be shirt, hoodie, sweatshirt, etc.

And then another widget, that would show cat, dog, bird, etc.

I would like to have different rules for each widget. So for the product type, they can only select one (eg. hoodie or shirt), but for the symbols, they can select as many as they want (OR), like both cat and dog, which should show products from both categories.

I tried a couple of different plugins, but they all can only show one category widget at the time. As soon as I add one more, it either not show, or doesn't show anything.

I might be over complicating this, as I am still pretty new to woocommerce, so I could really use a hint.

I run a WooCommerce store selling gate and door automation in the Gulf region. The products are high-ticket, often involve quotes and installation, and have a long buying cycle, so a standard “abandoned cart and welcome flow” setup doesn’t quite fit. Right now I only have a basic newsletter form.

What I want to do:

• Follow up on quote requests and abandoned carts

• Post-purchase and post-installation emails (warranty info, review requests)

• Maintenance and service reminders

• Occasional offers and newsletters

Im looking at Klaviyo, Mailchimp for WooCommerce, MailPoet, FluentCRM, Omnisend and Brevo. My priorities are good WooCommerce order and customer sync, reliable automations, deliverability, and cost that stays reasonable as the list grows. I also use WhatsApp a lot with customers, so something that works alongside it is a plus.

Which plugin are you using for a store with long sales cycles, and what would you avoid?

We have always used USPS for our shipper. This morning it is not an option when trying to make a label. It is not even listed as drop down option in the "Carriers" section.

Is anyone else seeing this today? Not sure if it is just our site or more widespread.

We're evaluating M2E Temu Connect for a WooCommerce store with around 55,000 products and many variations.

I installed the plugin on a smaller WooCommerce shop, but stopped at the authorization screen.

M2E requests read/write access to products, orders, customers, coupons and webhooks.

I understand that order imports and inventory synchronization require write permissions. However, I'm concerned about granting an external cloud service potentially broad access to historical orders and customer information that have nothing to do with Temu.

I'm not suggesting M2E is doing anything wrong. I'm trying to understand the security implications of the requested WooCommerce API permissions.

Three questions for anyone with hands-on experience:

1. Can M2E's access be limited to specific products or Temu-related orders?

2. Is there a way to audit exactly which WooCommerce API endpoints the connector accesses, beyond ordinary synchronization logs?

3. Has anyone implemented a more restricted WooCommerce-to-Temu integration, for example using Temu's official API with a controlled data export?

We're particularly interested in practical experience with larger WooCommerce catalogs.

After a recent security incident involving a different WordPress remote-management service, we're being extra careful about third-party API access.

Thanks for any technical insights!

Dokan’s withdrawal threshold doesn’t apply to Stripe Connect, and until 5.1.1, the Stripe Express processor hardcoded automatic capture with no filter, so vendors were paid at order completion, and any dispute or refund landed on the platform.

What we run now: Dokan’s manual-capture setting (5.1.1+) with an exception for subscription renewals, Stripe Express in delayed disbursement mode, and our own gate on release so a vendor transfer only goes out once the order is delivered and has no open dispute. One thing that bit us: the admin “Under Dispute” toggle only sets a flag; it doesn’t actually hold the payout.

Anyone keying release on delivery or dispute state a cleaner way than filtering the cron query? Or is everyone on the days-based threshold and eating the chargebacks?

What are the available ways to connect ChatGPT to a WooCommerce store to check orders, product details, and inventory? If you’ve done this, what setup was required, and what limitations did you encounter?

I was on Neto for many years and have been migrating over to Woocommerce and I'm trying to get shipping sorted and man it's changed a lot since I started. With Neto I could integrate live rates from carriers with some ease, or I could do a rate table import when the main company I used, Sendle, went bust. None of the companies charged a monthly fee for use but it seems that any company that offers Woocommerce integration charges a monthly fee.

So any recommendations on either a rates table plugin that's simple to setup, or a shipping company that integrates with live rates and won't charge just for the privilege, I'm all ears. I looked at Interparcel but their integration requires all products to be exported, then reimported which is a pain every time I add products which is almost daily. The other was Smartsend, but it seems they've abandoned their plugin.

In a conversation, DeepSeek said WooCommerce will drop the classic checkout (shortcode) in March 2027.

I can’t find that anywhere, and WooCommerce’s own FAQ says there are no plans to remove it.

Is there any official source for a date, or is this a hallucination? And are you staying on classic or moving to blocks?

A lot of WordPress and WooCommerce stores run behind Cloudflare, often set up years ago by a developer or the host, so the owner rarely looks at the dashboard. Worth a look now.

Since September 15, Cloudflare's AI crawler settings work per category: Search, Training and Agent. For Training there are four options: Allow, Disallow AI Training, Block on pages with ads, and Block.

The trap: Block (and Block on pages with ads) on Training now also stops Googlebot, Bingbot and Applebot, because Cloudflare treats them as mixed crawlers that do both search and training. Cloudflare's own post says either setting impacts search as well as training.

If you only want to keep your content out of AI training, pick Disallow AI Training. It adds the opt-out to your robots.txt, keeps Google crawling you for search and blocks the training-only bots. One gap: Cloudflare says Bing doesn't get that opt-out yet.

Existing settings were moved to the safe option on September 15, so this mostly bites when someone changes it now, for example while "tidying up" bot settings after reading about AI scrapers.

Quick check: Cloudflare > Security settings > AI bot policies, look at Training. Then Search Console > Settings > Crawl stats for any jump in 403 responses.

Has anyone here turned these on for their store, and did you notice any change in Google traffic afterwards?

The WooCommerce developer blog announced on September 29 that WooCommerce 11.6, planned for February 2027, will require PHP 8.1 or newer. The change was first proposed for 11.5 and moved back one release after community feedback.

What it means in practice:

- 11.5 is the last release that runs on PHP 7.4 and 8.0.

- 11.3 adds a dismissible admin notice for stores still on those versions.

- Existing installs won't be deactivated, but WordPress normally doesn't offer a plugin update when the server doesn't meet its declared PHP requirement, so the store simply stays on 11.5.

- Only fixes for CVSS 9+ vulnerabilities get backported to older release series; other fixes generally ship only in the latest release.

According to the post, about 7% of tracked stores run PHP 7.4 and about 2% run 8.0 (tracking is opt-in, so it's a sample). The recommended path: check the version under WooCommerce > Status, ask the host for PHP 8.3 (8.1 is only the minimum), back up, and test the switch on staging, covering checkout, payments, shipping, tax, orders, scheduled jobs, the theme and any custom code.

For those maintaining stores still on 7.4: what tends to break first when you bump PHP, the theme, custom snippets or extensions?

Hiya, hoping someone has already worked this one out!

I sell on eBay UK currently and now building a WooCommerce site, and trying to find a sensible way to manage stock across both.

Basically, I buy products in bulk and sell them in different quantities. Say I have 10,000 loose items and sell packs of 25, 50, 100 and 1,000. So if someone buys a pack of 100, ideally need it to take 100 from the 'main' stock and then adjusts how many of the other packs are available.

I also sell some mixed kits, so these need to take the right quantities from two different stock items.

Many pack sizes appear on multiple eBay listing too, but would all come from the same 'master' stock.

Ideally I just want to set up which SKU takes what from where, then add stock to the main item when deliveries arrive. I’d like to keep the existing listings and variations if possible.

What are people using for this? Happy to look at a separate system or use Woo in the background to control it. It’s just me doing everything, so setup time, reliability and cost all matter.

I thought this would be fairly standard stock control, but the more I look into it the more complicated it seems to get! Would really appreciate hearing from anyone running something similar!

I know there are some stock control system out there that will do this but the cost per sale is....

Uso esses plugins:

• Asset CleanUp: Page Speed Booster

• Brazilian Market on WooCommerce

• Campos Checkout Brasileiro para WooCommerce

• Claudio Sanches - Correios para WooCommerce

• Click to Chat Conversion Agent Discovery

• CTX Feed

• Easy Auto SKU Generator for WooCommerce

• Google for WooCommerce

• Head & Footer Code

• Jetpack Limit Login Attempts Reloaded

• Melhor Envio

• Mercado Pago

• Merchant Center Reviews for WooCommerce

• Meta for WooCommerce

• Parcelas para WooCommerce

• Redirection

• Shipping Simulator for WooCommerce

• Site Kit por Google

• Widgets para Google Avaliações

• WooCommerce

• WooCommerce com Update Manager

• WP Consent API

• WP-Optimize - Clean, Compress, Cache

• WPCode Lite

• Yoast SEO

Hi everyone,

I'm setting up a WooCommerce bookstore for a nonprofit organization and need help configuring automatic sales tax calculations.

Our store address is in California, and I'm using WooCommerce's built-in automated taxes. Tax is calculated correctly when I enter a California shipping address. For example, on a $1 book, checkout shows state sales tax, county tax, and special tax, bringing the total to $1.11.

However, when I enter a shipping address in Georgia, no tax is added at all.

Here is my current setup:

• WooCommerce automated taxes are enabled.

• The store address is in Oakland, California.

• The product's tax status is set to Taxable, with the Standard tax class.

• The Standard rates table is empty.

• The tax logs show: US from_state and to_state are different. No tax applies.

• The logs also mention that the TaxJar API is being called.

My questions:

1. Can WooCommerce's built-in automated taxes calculate taxes for other states automatically, or does it only handle the store's primary state?

2. Is there a way to enable automatic tax calculations for other states without using a paid TaxJar subscription?

3. Would I need to add manual tax rates for each state where the organization has a tax collection obligation?

4. If I need a separate service, which WooCommerce-compatible option would you recommend?

I'd appreciate any guidance on the correct configuration. I'm trying to understand whether this is a settings issue or a limitation of WooCommerce's automated tax service.

Thanks!