FYIWooCommerce · News· 6 days ago
What they said
“Now our default is to give security fixes their own releases.”
WooCommerce is changing how it handles security. Serious fixes now come out in their own quick updates instead of waiting for the next big release. From WooCommerce 11.2, extension makers can mark a security update as required. Connected stores with an active subscription then install it within about a day, even if automatic updates are turned off.
Latest
Newest first · Last update yesterdayAction neededUK law
Under the UK's drip pricing rules, if delivery is a fee every customer has to pay, it must be included in the price you show. In an open letter on 2 November 2026, the CMA reminded online shops that this applies everywhere a price appears, from ads and product pages to the basket and checkout.
13 days ago · For founders, marketers, developers
Action neededAdobe Commerce
On 27 October 2026, the US cybersecurity agency (CISA) added a Magento flaw nicknamed "PolyShell" to its list of issues known to be used in real attacks. It affects Adobe Commerce and Magento Open Source stores that haven't installed recent security updates. Adobe released the fix in its July 2026 security update.
27 Oct · For founders, developers
Action neededUK law
New UK rules for subscriptions start on 1 January 2027, brought forward from spring 2027. They cover auto-renewing subscriptions sold to UK consumers, including product subscriptions like refills and boxes. Businesses will need to give clearer information before sign-up, send reminders before renewals, and let customers cancel easily.
9 Aug · For founders, developers48 days left