Skip to content

v2.14.0 - Security Release

Choose a tag to compare

@ekapopbus ekapopbus released this 24 Dec 14:33
· 26 commits to master since this release

🔒 Security Release 2.14.0

Release Date: December 23, 2025

Security Improvements

  • Improve access control for payment callback/status endpoints - Enhanced security for public-facing payment processing endpoints to prevent unauthorized access
  • Harden sensitive data handling - Prevent sensitive credentials from being logged in request payloads

Compatibility

  • Tested up to: WordPress 6.9
  • Requires: WordPress 4.9+, WooCommerce 8.0+, PHP 8.0+

Installation

Download the plugin and upload to your WordPress installation, or update via the WordPress.org plugin repository.

Important Notes

This is a security release and all users are encouraged to update immediately. The update maintains full backward compatibility with existing payment flows for credit cards, QR codes (PromptPay), and installment payments.

Full Changelog

See CHANGELOG.txt for complete version history.