* UPDATE: Corrected automatic user login flow after account creation by replacing wp_set_current_user() and wp_set_auth_cookie() with wp_signon().
* UPDATE: Added username existence check to avoid conflicts when generating usernames from email addresses.
* UPDATE: Sanitized $_POST[‘apple-token-redsys’] input variable.
* UPDATE: Secured wp_remote_*() calls with host validation to prevent SSRF vulnerabilities.
* UPDATE: Added permission_callback checks for REST endpoints using referer validation to avoid public access.
* UPDATE: Enabled CURLOPT_SSL_VERIFYHOST = 2 and CURLOPT_SSL_VERIFYPEER = 1 in Redsys API library to enforce proper SSL certificate validation and prevent MITM attacks.
* UPDATE: Justified use of wp_redirect() for external OAuth flow with proper comment.
* UPDATE: Escaped dynamic CSS output for safe rendering.

* Update: Improvement made in Buy Again test email on WooCommerce email settings.
* Dev: Bump WooCommerce “tested up to” version 9.9.5.
* Dev: Bump WordPress “tested up to” version 6.8.1.
* Fix: Fatal error thrown on product page when the previous order is deleted.

* New – Free Gift mode that allows waiving the shipping cost is supported.
* New – Added REST API endpoints support to full CRUD operation for Free Gift rule(s) and Master Log.
* Dev – Bump WooCommerce “tested up to” version 9.9.5.
* Update – Modified REST API response key names for Free Gift rule(s).
* Fix – Free Gift is not awarded when the coupon code is applied with case discrepancies.

* Add – Added support for Express Checkout Buttons