Action neededShopify
If an agency or freelancer built a custom app for your store, it now needs an IP allowlist: a list of the only networks allowed to use it to reach your store's data. New installs need one from 20 November 2026, and existing apps from 1 January 2027.
4 days ago · For founders, developers48 days left
Action neededWooCommerce
WooCommerce 11.2.2 is a security update that tightens several areas, including the Store API, REST API key checks and two admin pages that now need an administrator to be logged in. It also stops checkout going to payment if an order fails to save. WooCommerce says to update as soon as possible.
11 days ago · For founders, developers
Action neededEU customs
Since 1 November 2026, the EU charges a €2 handling fee on each line of an order sent from outside the EU to an EU shopper. It comes on top of the €3 customs duty per line on parcels worth up to €150, which has applied since 1 July 2026, plus VAT. Royal Mail now also needs product identifier data for parcels to the EU.
1 Nov · For founders, ops
Action neededAdobe Commerce
Adobe has set deadlines for Adobe Commerce on Cloud stores running old software. PHP 8.1 or older, Redis 5 or older and some other outdated services must be upgraded by 31 May 2027. Stores on Commerce 2.4.4 or 2.4.5 must upgrade or move to Adobe's SaaS version by 1 June 2027. Miss them and Adobe may switch your storefront off.
14 Oct · For founders, developers198 days left
Action neededGoogle
From 31 January 2027, Google wants every product image in Merchant Center to be at least 500 x 500 pixels. Until then the old minimums still work: 100 x 100, or 250 x 250 for clothing. Google has been showing warnings on smaller images since July 2026.
21 Aug · For founders, marketers, ops78 days left
Action neededWooCommerce
WooCommerce has fixed security issues in its Stripe Gateway plugin. Version 10.9.0 could store new customers' account passwords in plain text in some cases. Update to 11.2.0, or 11.1.2 if you need to stay on 11.1.x.
4 days ago · For founders, developers, ops
Action neededWooCommerce
WooCommerce has released a security update for WooPayments, fixing an issue in the subscriptions features built into the plugin. Every recent version has a matching fix, such as 11.2.0 to 11.2.1. Anything older than 9.0.0 should go to 11.2.1.
12 days ago · For founders, developers
Action neededAdobe Commerce
On 27 October 2026, the US cybersecurity agency (CISA) added a Magento flaw nicknamed "PolyShell" to its list of issues known to be used in real attacks. It affects Adobe Commerce and Magento Open Source stores that haven't installed recent security updates. Adobe released the fix in its July 2026 security update.
27 Oct · For founders, developers
Action neededAdobe Commerce
Adobe released a security update for Adobe Commerce and Magento Open Source on 13 October 2026, covering versions 2.4.4 to 2.4.9. A separate hotfix for another issue isn't included in the October patch and has to be applied on its own.
13 Oct · For founders, developers
Action neededUK law
New UK rules for subscriptions start on 1 January 2027, brought forward from spring 2027. They cover auto-renewing subscriptions sold to UK consumers, including product subscriptions like refills and boxes. Businesses will need to give clearer information before sign-up, send reminders before renewals, and let customers cancel easily.
9 Aug · For founders, developers48 days left
Action neededShopify
AI agents can look up a store's policies and FAQs (delivery, returns and so on) through a Shopify tool called search_shop_policies_and_faqs. It's being replaced by a new tool called ask_business, which replies with a written answer. Shopify will maintain the old tool until 15 January 2027.
4 days ago · For developers62 days left
Action neededUK law
Under the UK's drip pricing rules, if delivery is a fee every customer has to pay, it must be included in the price you show. In an open letter on 2 November 2026, the CMA reminded online shops that this applies everywhere a price appears, from ads and product pages to the basket and checkout.
13 days ago · For founders, marketers, developers
Action neededWooCommerce
The PHP project released fixes for two critical security issues on 21 October 2026. WooCommerce is telling store owners to update PHP on their servers straight away. No WooCommerce or WordPress update is needed.
21 Oct · For founders, developers
Action neededWooCommerce
The WooCommerce PHP version requirement is going up: WooCommerce 11.6, planned for February 2027, will need PHP 8.1 or newer. Stores on PHP 7.4 or 8.0 can keep updating up to version 11.5, and WooCommerce 11.3 now shows a warning in your admin if your store is affected.
29 Sept · For founders, developers
Action neededShopify
Shopify is moving where you set up shipping. Instead of shipping profiles, shipping options will live inside Markets, so you manage where you sell and how you ship in one place. Stores could opt in from 1 October 2026, existing stores are being moved over as their apps become compatible, and it applies to every store from 1 July 2027.
7 Jul · For founders, ops, developers229 days left