Skip to content

v1.0.0 - Storefront Extensions Release

Choose a tag to compare

@ackm04 ackm04 released this 01 Aug 10:21
· 36 commits to main since this release

⚠️ Superseded — do not download from this release

Use v1.1.0 instead.

The archives attached below were built on 2026-08-01 and predate every security
fix since, including:

  • a storefront XSS in the WooCommerce plugin's quote modal
  • the WooCommerce API key being printed into the settings page HTML
  • an admin XSS in the OpenCart extension's test-connection result
  • OpenCart's test() action having no permission check, so any administrator
    could spend the store's API key
  • WooCommerce order sync running a synchronous 20-second HTTP POST inside
    checkout
    , while the readme promised it never blocked checkout

They are left attached only so existing links do not 404. Nothing here should be
installed on a live store.


Initial public release of Tack B2B eCommerce extensions for WooCommerce, Magento 2, OpenCart, PrestaShop, Shopware, ZenCart, Squarespace, and Wix.