Introduced a new React-based admin interface for the plugin.
Introduced REST API endpoints for all admin data operations, with per-endpoint capability checks.
Melhoria
Facebook Messenger integration entirely, including the settings tab, templates page, and all related JS and CSS.
Added new filters wcap_abandoned_carts_print_columns and wcap_rest_print_row to allow customisation of columns and row data in the Print and CSV export
Correção
Guest carts were not being captured when GDPR was enabled due to a missing nonce in JS params introduced in 10.8.1.
Connector sync was broken since 10.8.1. The appended wcap_nonce pushed checkout links past the 200-character checkout_link DB column limit, preventing connector data from syncing. The checkout_link column has been increased to varchar(320) with an automatic one-time migration for existing sites.
SMS/WhatsApp templates using the {{checkout.link}} merge tag were not being sent since 10.8.1. The appended wcap_nonce pushed checkout links past the 200-character checkout_link DB column limit, preventing links from being saved to the wcap_tiny_urls table. The long_url column type in wcap_tiny_urls has been updated to text with an automatic one-time migration for existing sites.
SMS consent resulted in an invalid token error introduced in 10.8.1.
Security: An unauthenticated authentication bypass was possible due to malleable encryption and a bypassable HMAC in the recovery link validate parameter.
Security: Auto-login could be triggered without a valid recovery signature.
Segurança
Security: An unauthenticated SQL injection via AES-CTR ciphertext forgery in the recovery link validate parameter was possible.
Security: An unauthenticated SQL injection was possible via the guest persistent cart meta_value. Reported by Wordfence.
Admin emails were not sent for logged-in user carts when the user’s email address was not available in the user meta data for registered users.
Security: Added wcap_nonce verification to cart/checkout links in manually resent cart recovery emails (coupon and non-coupon cases), preventing unauthorized triggering of these links.
A fatal error occurred when adding a product to the cart and then visiting the Cart or Checkout pages.
Added AI Reporting Abilities: lets AI assistants (such as Claude, connected via MCP) query abandoned-cart reporting data, top abandoned products, recovered revenue, recovery rates, and template performance.
Improved reliability of API rate-limiting under concurrent requests.
Correção
Security: Resolved an issue where the abandoned/recovered cart REST API endpoints could be accessed without proper authentication under certain conditions.
Resolved an issue where the plugin could unexpectedly deactivate itself on multisite installations where WooCommerce was activated per-site rather than network-wide.
Resolved a fatal error that could occur if the plugin folder was renamed during installation or migration.
Added REST API endpoints to retrieve abandoned and recovered cart data, with support for filtering and pagination.
Correção
Resolved an issue where the Date Filter in the Abandoned Orders table did not display abandoned carts when a predefined date range was selected.
Resolved an issue where GDPR Consent settings could not be saved from the admin panel and the consent message did not appear on the frontend when enabled.
Addressed a compatibility issue with WooCommerce Dynamic Pricing where excessive autoloader calls during price calculations caused high PHP-FPM process usage and temporarily impacted site availability.
Add to Cart popup did not open for variable products when a block-based product template was enabled on single product pages.
Coupon code was not applied via the Add to Cart popup when the product page was built using the AFGolf 2026 block theme.
Versão 10.3.1
1 reforço de segurança
Segurança
Addressed a critical vulnerability in the import API that could allow shop managers to modify arbitrary WordPress options. Implemented strict capability checks and restricted imports to plugin-specific settings only.
Added Import/Export functionality to transfer plugin settings (including email templates, SMS notifications, and configurations) across WooCommerce stores.
Correção
Resolved an issue where the GDPR consent checkbox was not displayed on the Checkout page and appeared only in the pop-up.
Resolved an issue where the Checkout email field became non-editable after page refresh or navigation when using Cart/Checkout blocks.
Addressed a compatibility issue with the Advanced Product Fields Pro plugin that prevented abandoned carts from being captured.
PHP warning triggered when adding a product to the cart.
Added a filter to allow admin notifications for visitor/guest abandoned carts even when no email address was available.
Added WhatsApp integration to send reminder notifications for abandoned carts when a valid phone number is provided.
Added support for the "Double Opt-in" option to confirm customer subscription before adding them via Klaviyo integration.
Updated the folder structure of the plugin to improve maintainability and ease of future development.
Added a hook for displaying a link after the Modal Heading in the Add to Cart popup template.
UI/UX improvements in the backend for ease of use and to improve the overall experience.
Updated the wcap_cart_total filter to include the $cart parameter, enabling customization of abandoned cart email sending based on external conditions.
Correção
License Key page displayed the status as “License Active” even when the license had expired.
Dashboard tab did not show correct data when a custom date range was selected.
Incorrect data was displayed in the “Captured By” column for visitor carts.
Product quantity increased when an email ID was entered in the ATC popup modal while using the Twenty Twenty-Five theme.
Previously applied filters on the Abandoned Orders page persisted when revisiting, showing outdated data.
Addressed a fatal error that occurred when activating the Abandoned Cart Pro plugin on multisite installations.
Corrected a problem where reminder emails were not delivered, even though they were marked as sent in the Edit Abandoned Order popup when using WooCommerce 10.4.
Resolved an issue where PHP deprecated warnings were logged on the Checkout page.
Phone number entered in the Add to Cart popup was not captured in abandoned order data.
Abandoned Cart Dashboard was showing empty or missing data due to incorrect timestamp values being generated.
SMS consent checkbox was not displayed for logged-in users.
GDPR consent checkbox did not appear in the Add to Cart popup modal.
Email styling broke when sending a test email after inserting a template.
Resolved a compatibility error that occurred while activating the license.
The "Modal Heading" & "Modal Text" from Exit Intent Popup were not translated when WPML was active.
The "WCAP" text domain was not displayed in the WPML String Translation domain dropdown.
Resolved a compatibility error that occurred while activating the license.
Corrected Mailjet integration to display separate first/last name fields instead of concatenated full name.
The rules were not saved properly in the email template when more than ten rules were added.
The customer details was not auto-populated on Checkout Block page when accessed from reminder email link.
Incorrect data was shown in the "Captured By" column for visitor carts.
Addressed PHP deprecated notices and warnings in debug log.
WooCommerce email preview displayed raw CSS instead of rendered styles.
Reminder emails not being sent due to a fatal error on the client site.
Unable to modify or update settings due to a JavaScript console error.
Visitor carts were not capturing complete billing and shipping address details.
WooCommerce email template style not applied when "Use WooCommerce Template Style" setting is enabled.
Addressed a styling issue with the Import Template popup in the Abandoned Carts settings in the backend.
The Exit Intent pop-up was not working when either the Furnob Child theme or the Twenty Twenty-Five theme is active.
Trash link was not working on the Abandoned Orders page.
The tracking notice banner did not appear on the admin dashboard after clicking the Reset Tracking button.
"Submit Ticket" text appeared before the plugin version number on the plugin page.
Debug log errors.
Addressed an error occurring when users attempt to log in via the My Account page.
Addressed a styling issue with the Import Template popup in the Abandoned Carts settings in the backend.
Resolved all PHPCS warnings and aligned the code with WordPress Coding Standards to improve quality and maintainability.
Resolved debug log errors.
Resolved an issue where plugin data was not fully removed from the database upon plugin deletion.
Fixed a PHP notice that appeared in the console log during connection to Drip.
Added a message to inform users that data from the Lite version has been successfully migrated to the Pro version after upgrading.
Added a message to inform users that data from the Lite version has been successfully migrated to the Pro version after upgrading.
Segurança
Resolved an arbitrary file upload vulnerability by restricting uploads to image file types only.