Filtered eCommerce news

Action neededShopify · Changelog· 4 days ago

Custom apps built for your store need a security setting before New Year

What they said

“Leaked tokens can be used from any network location.”

In plain English

If an agency or freelancer built a custom app for your store, it now needs an IP allowlist: a list of the only networks allowed to use it to reach your store's data. New installs need one from 20 November 2026, and existing apps from 1 January 2027.

For founders, developers
48 days leftWhy it matters

Latest

Newest first · Last update yesterday
Action neededWooCommerce

WooPayments security update: check your version and update

WooCommerce has released a security update for WooPayments, fixing an issue in the subscriptions features built into the plugin. Every recent version has a matching fix, such as 11.2.0 to 11.2.1. Anything older than 9.0.0 should go to 11.2.1.

12 days ago · For founders, developers
Action neededShopify

AI shopping assistants: a Shopify tool is being retired in January

AI agents can look up a store's policies and FAQs (delivery, returns and so on) through a Shopify tool called search_shop_policies_and_faqs. It's being replaced by a new tool called ask_business, which replies with a written answer. Shopify will maintain the old tool until 15 January 2027.

4 days ago · For developers62 days left
Action neededUK law

The CMA reminds online shops: mandatory delivery fees must be in the price you show

Under the UK's drip pricing rules, if delivery is a fee every customer has to pay, it must be included in the price you show. In an open letter on 2 November 2026, the CMA reminded online shops that this applies everywhere a price appears, from ads and product pages to the basket and checkout.

13 days ago · For founders, marketers, developers
Action neededAdobe Commerce

Adobe Commerce Cloud stores on old versions face being taken offline

Adobe has set deadlines for Adobe Commerce on Cloud stores running old software. PHP 8.1 or older, Redis 5 or older and some other outdated services must be upgraded by 31 May 2027. Stores on Commerce 2.4.4 or 2.4.5 must upgrade or move to Adobe's SaaS version by 1 June 2027. Miss them and Adobe may switch your storefront off.

14 Oct · For founders, developers198 days left
Action neededUK law

New UK subscription rules start on 1 January 2027

New UK rules for subscriptions start on 1 January 2027, brought forward from spring 2027. They cover auto-renewing subscriptions sold to UK consumers, including product subscriptions like refills and boxes. Businesses will need to give clearer information before sign-up, send reminders before renewals, and let customers cancel easily.

9 Aug · For founders, developers48 days left
Action neededWooCommerce

Update WooCommerce now: 11.2.2 is a security release

WooCommerce 11.2.2 is a security update that tightens several areas, including the Store API, REST API key checks and two admin pages that now need an administrator to be logged in. It also stops checkout going to payment if an order fails to save. WooCommerce says to update as soon as possible.

11 days ago · For founders, developers
Action neededAdobe Commerce

Adobe Commerce and Magento Open Source stores: install the July security patch

On 27 October 2026, the US cybersecurity agency (CISA) added a Magento flaw nicknamed "PolyShell" to its list of issues known to be used in real attacks. It affects Adobe Commerce and Magento Open Source stores that haven't installed recent security updates. Adobe released the fix in its July 2026 security update.

27 Oct · For founders, developers
Action neededAdobe Commerce

Magento and Adobe Commerce stores need October's security patch

Adobe released a security update for Adobe Commerce and Magento Open Source on 13 October 2026, covering versions 2.4.4 to 2.4.9. A separate hotfix for another issue isn't included in the October patch and has to be applied on its own.

13 Oct · For founders, developers
Action neededShopify

Shopify is moving shipping settings into Markets, and every store moves by July 2027

Shopify is moving where you set up shipping. Instead of shipping profiles, shipping options will live inside Markets, so you manage where you sell and how you ship in one place. Stores could opt in from 1 October 2026, existing stores are being moved over as their apps become compatible, and it applies to every store from 1 July 2027.

7 Jul · For founders, ops, developers229 days left