Filtered eCommerce news

Action neededShopify · Changelog· Yesterday

Custom apps built for your store need a security setting before New Year

What they said

“Leaked tokens can be used from any network location.”

In plain English

If an agency or freelancer built a custom app for your store, it now needs an IP allowlist: a list of the only networks allowed to use it to reach your store's data. New installs need one from 20 November 2026, and existing apps from 1 January 2027.

For founders, developers
51 days leftWhy it matters
What to do
  1. 1List your custom apps
  2. 2Ask whoever built them to set an allowlist
  3. 3Get existing apps done before 1 January 2027
Don’t miss

Latest

Newest first · Last update 11 hours ago
Action neededShopify

AI shopping assistants: a Shopify tool is being retired in January

AI agents can look up a store's policies and FAQs (delivery, returns and so on) through a Shopify tool. That tool is being replaced by a new one called ask_business, which gives back a written answer. The old one stops being supported after 15 January 2027.

Yesterday · For developers65 days left
Action neededWooCommerce

Update WooCommerce now: 11.2.2 is a security release

WooCommerce 11.2.2 fixes several security problems, including making admin pages more secure. WooCommerce says to update as soon as possible. Some of the fixes came from an AI security scan of WooCommerce's code.

8 days ago · For founders, developers
Action neededAdobe Commerce

Magento and Adobe Commerce stores need October's security patch

Adobe released a critical security update for Adobe Commerce and Magento Open Source on 13 October 2026. Stores also need a separate hotfix released in September for another serious flaw. Adobe recommends changing your store's encryption keys and passwords as part of the fix.

13 Oct · For founders, developers