v1.0.0 - Storefront Extensions Release
⚠️ Superseded — do not download from this releaseUse v1.1.0 instead.
The archives attached below were built on 2026-08-01 and predate every security
fix since, including:
- a storefront XSS in the WooCommerce plugin's quote modal
- the WooCommerce API key being printed into the settings page HTML
- an admin XSS in the OpenCart extension's test-connection result
- OpenCart's
test()action having no permission check, so any administrator
could spend the store's API key- WooCommerce order sync running a synchronous 20-second HTTP POST inside
checkout, while the readme promised it never blocked checkoutThey are left attached only so existing links do not 404. Nothing here should be
installed on a live store.
Initial public release of Tack B2B eCommerce extensions for WooCommerce, Magento 2, OpenCart, PrestaShop, Shopware, ZenCart, Squarespace, and Wix.