Tychesoftwares | Abandoned Cart Pro for WooCommerce Changelog
Every recorded version, newest first, with what changed in each one.
Latest 11.0.0· Oct 27, 202615 versionsSince Nov 2025
2026 · 13 versions
11.0.0
Latest
2 new1 improvement4 fixes1 removed
New
Introduced a new React-based admin interface for the plugin.
Introduced REST API endpoints for all admin data operations, with per-endpoint capability checks.
Improved
Added new filters wcap_abandoned_carts_print_columns and wcap_rest_print_row to allow customisation of columns and row data in the Print and CSV export
Fixed
Guest carts were not being captured when GDPR was enabled due to a missing nonce in JS params introduced in 10.8.1.
Connector sync was broken since 10.8.1. The appended wcap_nonce pushed checkout links past the 200-character checkout_link DB column limit, preventing connector data from syncing. The checkout_link column has been increased to varchar(320) with an automatic one-time migration for existing sites.
SMS/WhatsApp templates using the {{checkout.link}} merge tag were not being sent since 10.8.1. The appended wcap_nonce pushed checkout links past the 200-character checkout_link DB column limit, preventing links from being saved to the wcap_tiny_urls table. The long_url column type in wcap_tiny_urls has been updated to text with an automatic one-time migration for existing sites.
SMS consent resulted in an invalid token error introduced in 10.8.1.
Removed
Facebook Messenger integration entirely, including the settings tab, templates page, and all related JS and CSS.
10.8.1
4 fixes
Fixed
Security: An unauthenticated SQL injection via AES-CTR ciphertext forgery in the recovery link `validate` parameter was possible.
Security: An unauthenticated authentication bypass was possible due to malleable encryption and a bypassable HMAC in the recovery link `validate` parameter.
Security: An unauthenticated SQL injection was possible via the guest persistent cart `meta_value`. Reported by Wordfence.
Security: Auto-login could be triggered without a valid recovery signature.
10.8.0
3 fixes
Fixed
Admin emails were not sent for logged-in user carts when the user’s email address was not available in the user meta data for registered users.
Security: Added wcap_nonce verification to cart/checkout links in manually resent cart recovery emails (coupon and non-coupon cases), preventing unauthorized triggering of these links.
A fatal error occurred when adding a product to the cart and then visiting the Cart or Checkout pages.
10.7.2
1 fix
Fixed
Security: privilege escalation vulnerability in abandoned cart AJAX handlers due to missing capability checks and nonce verification.
10.7.1
1 fix
Fixed
Included the missing vendor directory to resolve the AI Reporting abilities not being registered when the Enable AI Abilities option was turned on.
10.7.0
3 fixes
Fixed
Carts were not abandoned when the Request for Quote (RFQ) plugin was active.
Fatal error when the Store API session handler did not support get_session_cookie.
Abandoned Cart Reminder Emails displayed the base currency instead of the customer-selected currency when using the FOX Currency Switcher plugin.
10.6.0
2 improvements2 fixes
Improved
Added AI Reporting Abilities: lets AI assistants (such as Claude, connected via MCP) query abandoned-cart reporting data — top abandoned products, recovered revenue, recovery rates, and template performance.
Improved reliability of API rate-limiting under concurrent requests.
Fixed
Security: Resolved an issue where the abandoned/recovered cart REST API endpoints could be accessed without proper authentication under certain conditions.
Resolved a fatal error that could occur if the plugin folder was renamed during installation or migration.
10.5.0
1 improvement3 fixes
Improved
Added REST API endpoints to retrieve abandoned and recovered cart data, with support for filtering and pagination.
Fixed
Resolved an issue where the Date Filter in the Abandoned Orders table did not display abandoned carts when a predefined date range was selected.
Resolved an issue where GDPR Consent settings could not be saved from the admin panel and the consent message did not appear on the frontend when enabled.
Addressed a compatibility issue with WooCommerce Dynamic Pricing where excessive autoloader calls during price calculations caused high PHP-FPM process usage and temporarily impacted site availability.
10.4.1
2 fixes
Fixed
Security: critical privilege escalation vulnerability in the abandoned cart recovery auto-login functionality.
Security: privilege escalation in AJAX handlers due to missing capability checks and nonce verification.
10.4.0
2 fixes
Fixed
Add to Cart popup did not open for variable products when a block-based product template was enabled on single product pages.
Coupon code was not applied via the Add to Cart popup when the product page was built using the AFGolf 2026 block theme.
10.3.1
1 fix
Fixed
Addressed a critical vulnerability in the import API that could allow shop managers to modify arbitrary WordPress options. Implemented strict capability checks and restricted imports to plugin-specific settings only.
10.3.0
1 new4 fixes
New
Added Import/Export functionality to transfer plugin settings (including email templates, SMS notifications, and configurations) across WooCommerce stores.
Fixed
Resolved an issue where the GDPR consent checkbox was not displayed on the Checkout page and appeared only in the pop-up.
Resolved an issue where the Checkout email field became non-editable after page refresh or navigation when using Cart/Checkout blocks.
Addressed a compatibility issue with the Advanced Product Fields Pro plugin that prevented abandoned carts from being captured.
PHP warning triggered when adding a product to the cart.
10.2.0
1 improvement4 fixes
Improved
Added a filter to allow admin notifications for visitor/guest abandoned carts even when no email address was available.
Fixed
Dashboard tab did not show correct data when a custom date range was selected.
Incorrect data was displayed in the “Captured By” column for visitor carts.
Product quantity increased when an email ID was entered in the ATC popup modal while using the Twenty Twenty-Five theme.
Previously applied filters on the Abandoned Orders page persisted when revisiting, showing outdated data.
2025 · 2 versions
10.1.0
3 fixes
Fixed
Addressed a fatal error that occurred when activating the Abandoned Cart Pro plugin on multisite installations.
Corrected a problem where reminder emails were not delivered, even though they were marked as sent in the Edit Abandoned Order popup when using WooCommerce 10.4.
Resolved an issue where PHP deprecated warnings were logged on the Checkout page.
10.0.0
5 fixes
Fixed
Phone number entered in the Add to Cart popup was not captured in abandoned order data.
Abandoned Cart Dashboard was showing empty or missing data due to incorrect timestamp values being generated.
SMS consent checkbox was not displayed for logged-in users.
GDPR consent checkbox did not appear in the Add to Cart popup modal.
Email styling broke when sending a test email after inserting a template.
Changelog published by the developer, in their original language.
