WooCommerce Redsys Gateway Version 30.3.1 Changelog

Here’s what’s changed in WooCommerce Redsys Gateway Version 30.3.1

  
* SECURITY Medium: Fixed an authenticated account takeover vulnerability that could allow an attacker to assume any user account, including administrators.
* SECURITY Low: Fixed unauthenticated access to order status and user data.
* FIX: PayGold link generated from admin order metabox was never saved correctly due to an impossible response code condition in send_paygold_link(). The function now uses the same validation logic as the checkout flow (response code 9998).
* FIX: Fixed undefined $description variable in paygold_metabox_save() when sending a PayGold link from the order edit screen.
* FIX: Custom notification domain (redsys_url_notify) was broken by check_url() prepending home_url() to URLs that already had a different domain. check_url() now detects absolute URLs and preserves them as-is.
* FIX: get_notify_home_url() now automatically adds https:// when the custom notification domain is saved without a scheme.
* FIX: PHP 8.3+ compatibility — Fixed deprecated warnings for passing null/false to string functions (trim, strlen) from get_option() calls in get_txnid(), get_token_type(), and connect_standard_imap().
* FIX: PHP 8.3+ compatibility — Fixed add_submenu_page(null,...) in setup guide causing strpos()/str_replace() deprecation warnings.
  

View the full WooCommerce Redsys Gateway Changelog

(No Ratings Yet)

Loading...