Withdrawal Button – Easy Return vs Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)

Withdrawal Button - EasyReturn is a WooCommerce plugin that allows you to add a withdrawal button fully compliant with the requirements of Directive 2023/2673. The plugin enables your customers to easily withdraw from a purchase directly in the store - no paper forms, no manual return handling, and no confusion. Trusted by 2,200+ e-commerce stores Behind the plugin is a team of returns logistics experts who have implemented solutions in over 2,200 e-commerce stores, including brands such as Decathlon, Media Markt, Tchibo, Tatuum, and Kazar. This experience translates into: proven, real-world workflows features used by thousands of e-commerce stores a solution designed for everyday operations Easy Return transforms a legal obligation into an intuitive and user-friendly experience that: increases customer trust, reduces inquiries to customer support, allows you to maintain full control over returns. Key plugin features required by EU Directive 2023/2673 📝 Withdrawal Button – allows customers to quickly and easily start the withdrawal process. ✅ Two-step withdrawal process with decision confirmation - provides an extra confirmation step to minimize the risk of accidental withdrawal submissions. 👤 Guest support without login - allows customers to make a withdrawal for purchases made as a guest, without logging in or having an account, using just the order number and email address. 📦 Full and partial withdrawals - allows withdrawing from the entire order or selected products, according to the user’s needs. 📧 Automatic confirmation of withdrawal submission - immediately notifies both the customer and the store by email that the withdrawal request has been received. Withdrawal Button - EasyReturn: For the store: instantly adapts your store to the requirements of EU Directive 2023/2673 in a seamless and integrated way – the entire withdrawal process takes place within the store, without any additional external tools. For the consumer: convenient and intuitive withdrawal from a purchase, including without logging in, providing an excellent customer experience. Withdrawal Button – EasyReturn makes the withdrawal process simple, secure, and customer-friendly, while giving you full control over returns and ensuring legal compliance. Designed for real-world store operations Full range of features of the Withdrawal Button – EasyReturn plugin 👁️ Visibility of the withdrawal feature in compliance with Directive 2023/2673 The plugin automatically adds a withdrawal button in key locations – on the order details page, in the footer, and on the return policy page you specify – ensuring it is always easily accessible to the customer. This keeps the process legally compliant and improves user convenience. ℹ️ Informational widget – fewer customer support inquiries A simple visual step-by-step widget shows how the withdrawal and return process works in your store. You can place it on any store page – it provides customers with all necessary information, clears up doubts, and reduces the workload of your customer support team. 🎨 Customizable withdrawal button to match your store’s style Both the button and the widget can be fully personalized to maintain consistency with your store’s layout. For quick installation and immediate effect, ready-made universal buttons are also available that fit most layouts. ✉️ Full customization of customer email content You can fully customize the messages sent to customers when a withdrawal is submitted – from content to design. This ensures communication aligns with your brand, and the customer receives a clear, professional notification. 🔄 Automatic order updates Once a withdrawal is submitted, the order status in WooCommerce is updated automatically. This guarantees full control and orderliness in your system without extra effort. 📅 Configurable withdrawal period Allows you to set the timeframe in which a customer can exercise their right to withdraw, either more restrictive or consumer-friendly, depending on your store policy. 🛍️ Withdrawal without leaving the store interface The withdrawal form works within your domain – the customer is not redirected to external pages, increasing security and ensuring a consistent customer experience. ↩️ Full and partial withdrawals Intuitive handling of withdrawals from the entire order or selected products, making it easier to correctly process refunds, including shipping costs. 📝 Custom return reasons Add your own personalized return reasons that best suit your store and products. This helps customers choose the right option and provides you with valuable data on return causes, supporting store optimization. 🛡️ Logging IP addresses and User-Agents for withdrawals Each withdrawal is automatically logged with the customer’s IP address and device information (User-Agent), giving you complete access to customer data for analysis and security purposes. 📦 Shipment module (available in selected countries) Through integration with a returns shipment module (available in selected countries), your customers gain a convenient and cost-effective way to return products, while you gain predictability and control over returns – from submission to delivery back to your store or warehouse. 🔒 Privacy Withdrawal data is stored locally in your store’s database and is not sent to external servers, supporting GDPR compliance and giving you full control over customer data. External Services This plugin communicates with the Easy Return API for the purposes described below. All communication uses HTTPS. Service provider: Easy Return — https://easyreturn.eu Privacy policy: https://easyreturn.eu/plugin-privacy-policy Production: api.easyreturn.eu 1. Store Registration What is sent: Upon your explicit consent (granted via the “Allow and register” button in plugin settings), the following store data is transmitted once to api.easyreturn.eu: Store name, phone number, address (street, city, postal code, state, country) Administrator e-mail address Site domain and WordPress version When: Only when you click “Allow and register”. No data is sent without your approval. Why: Required to activate the Easy Return service and link your store to the return-management platform. 2. Shipment Options What is sent: Your store’s plugin ID (an anonymous UUID generated locally), domain and country code. When: Each time a customer submits a return request. Results are cached for 24 hours. Why: To retrieve the available shipping methods for your store in the Easy Return platform. 3. Return Draft Submission What is sent: When a customer submits a return request, the following data is transmitted to api.easyreturn.eu: Plugin ID (anonymous UUID) Return ID and WooCommerce order ID / order number Customer billing data: full name, e-mail address, phone number, address (city, postal code, state, country) When: Each time a customer submits a return request. Why: Required to create a return draft in the Easy Return platform and initiate the carrier process.

Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate. Really simple, Effective and Performant WordPress Security Really Simple Security is the most lightweight and easy-to-use security plugin for WordPress. It secures your WordPress website with SSL certificate generation, including proper 301 https redirection and SSL enforcement, scanning for possible vulnerabilities, Login Protection and implementing essential WordPress hardening features. We believe that security should have the absolute minimum effect on website performance, user experience and maintainability. Therefore, Really Simple Security is: Lightweight: Every security feature is developed with a modular approach and with performance in mind. Disabled features won’t load any redundant code. Easy-to-use: 1-minute configuration with short onboarding setup. Security Features Easy SSL Migration Migrates your website to HTTPS and enforces SSL in just one click. 301 redirect via PHP or .htaccess Secure cookies Let’s Encrypt: Install an SSL Certificate if your hosting provider supports manual installation. Server Health Check: Your server configuration is every bit as important for your website security. WordPress Hardening Tweak your configuration and keep WordPress fortified and safe by tackling potential weaknesses. Prevent code execution in the uploads folder Prevent login feedback and disable user enumeration Disable XML-RPC Disable directory browsing Username restrictions (block ‘admin’ and public names) and much more.. Vulnerability Detection Get notified when plugins, themes or WP core contain vulnerabilities and need appropriate action. Login Protection Allow or enforce Two-Factor Authentication (2FA) for specific user roles. Users receive a two-factor code via Email. Improve Security with Really Simple Security Pro Protect your site with all essential security features by upgrading to Really Simple Security Pro. Advanced SSL enforcement Mixed Content Scan & Fixer. Detect files that are requested over HTTP and fix them to HTTPS, both Front- and Back-end. Enable HTTP Strict Transport Security and configure your site for the HSTS Preload list. Firewall Really Simple Security Pro includes a performant and efficient WordPress firewall, to stop bots, crawlers and bad actors with IP and username blocks. 404 blocking – Blocks crawlers as they trigger unusual numbers of 404 errors. Region blocking – Only allow/block access to your site from specific regions. Automated and customisable Firewall rules. IP blocklist and allowlist. Security Headers Security headers protect your site visitors against the risk of clickjacking, cross-site-forgery attacks, stealing login credentials and malware. Independent of your Server Configuration, works on Apache, LiteSpeed, NGINX, etc. Protect your website visitors with X-XSS Protection, X-Content-Type-Options, X-Frame-Options, a Referrer Policy and CORS headers. Automatically generate your WordPress-tailored Content Security Policy. Vulnerability Measures When a vulnerability is detected in a plugin, theme or WordPress core you will get notified accordingly. With Vulnerability Measures, you can configure simple but effective measures to make sure that a critical vulnerability won’t remain unattended. Force update: An update process will be tried multiple times until it can be assumed development of a theme or plugin is abandoned. You will be notified during these steps. Quarantine: When a plugin or theme can’t be updated to solve a vulnerability, Really Simple Security can quarantine the plugin. Advanced Site Hardening Choose a custom login URL Automated File Permissions check and fixer Rename and randomize your database prefix Change the debug.log file location to a non-public folder Disable application passwords Control admin creation Disable HTTP methods, reducing HTTP requests Login Protection Secure your website’s login process and user accounts with powerful security measures. Two-Step verification (Email login) 2FA (two factor authentication) with TOTP Passwordless login with passkey login Enforce strong passwords and frequent password change Limit Login Attempts With Limit Login Attempts you can configure a threshold to temporarily or permanently block IP addresses or (non-existing) usernames. You can also throw a CAPTCHA after a failed login (hCaptcha or Google reCaptcha) Access Control Restrict access to your site for specific regions. Add specific IP addresses or IP ranges to the Blocklist or Allowlist. Useful Links Documentation Security Definitions Translate Really Simple Security Issues & pull requests Feature requests Love Really Simple Security? If you want to support the continuing development of this plugin, please consider buying Really Simple Security Pro, which includes some excellent security features and premium support. About Really Simple Plugins Our mission is to make complex WordPress requirements really easy. Really Simple Security is developed by Really Simple Plugins. For generating SSL certificates, Really Simple Security uses the le acme2 PHP Let’s Encrypt client library, thanks to ‘fbett’ for providing it. Vulnerability Detection uses WP Vulnerability, an open-source initiative by Javier Casares. Want to join as a collaborator? We’re on GitHub as well!