PayPlus Payment Gateway
PayPlus Payment Gateway for WooCommerce Accept debit and credit cards on your WooCommerce store in a secure way with the ability to design your own payment page and add high functionalities to it. SSL is not required. Supported PHP Versions: This plugin is compatible with PHP versions from 7.4 up to 8.3. Before installation: You need your account credentials. For that, you have to contact PayPlus and to join the service. Plugin Disclaimer: PayPlus does not accept liability for any damage, loss, cost (including legal costs), expenses, indirect losses or consequential damage of any kind which may be suffered or incurred by the user from the use of this service. It is important to know that this plugin relies on third-party services. However, the third-party so mentioned is the PayPlus core engine at their servers – the providers of this plugin. By being a payment processor, just like many of its kind, it must send some transaction details to the third-party server (itself) for token generation and transaction logging statistics and connecting to invoices. It is this transfer back and forth of data between your WooCommerce and the PayPlus servers that we would like to bring to your attention clearly and plainly. The main links to PayPlus, its terms and conditions, and privacy policy are as listed: – Home Page: https://www.payplus.co.il – Plugin Instruction page: https://www.payplus.co.il/wordpress – Terms and Conditions: https://www.payplus.co.il/privacy The above records, the transaction details, are not treated as belonging to PayPlus and are never used for any other purposes. The external files referenced by this plugin, due to WordPress policy recommendations, are all included in the plugin directory. 8.3.1 – 14-10-2026 Tweak – New advanced option “Prevent duplicate payment records” (on for new installs, off for existing stores) – success note, payment row and saved token are created once. Tweak – New advanced option “Skip repeated payment checks” (on for new installs, off for existing stores) – fewer PayPlus and Invoice+ calls. Tweak – Invoice+: reason logged when a document is not created, with an order note and popup for a PayPlus method without PayPlus payment. Tweak – Subscription support shown only for the main PayPlus, Embedded, Google Pay and Apple Pay gateways. Fix – Blocks checkout shows PayPlus and Embedded for subscription carts when “Accept manual renewals” is off. 8.3.0 – 07-10-2026 Tweak – Improved order locking between the return URL and the PayPlus callback – payment complete runs once per order. Tweak – Shorter payment method change note and more payment-complete log details. Tweak – Error code 4 (terminal type 6) translated: “Declined – the transaction was not approved”. 8.2.9 – 05-10-2026 Security – Fixed critical payment bypass: a forged request to the payment return URL could mark an unpaid order as Processing. Orders are now updated only after PayPlus confirms the transaction server-side, the return must match a payment page created for that order, and a transaction of one order can no longer be used to mark another order paid. (Reported by VF Israel / VFC security scan) Fix – The woocommerce_payment_complete hook is now sent on every PayPlus success path (return URL, POST return, double-check, Hosted Fields, saved card) when “Payment Completed” is on, including orders where the customer returned before the callback. Status changes and emails are unchanged; the hook is sent once per order. Tweak – New payplus_payment_complete log showing which process sent woocommerce_payment_complete, or why it was not sent. Feature – Payment page “POST” return mode (redirect, iframe, popup) is now supported: the order is confirmed with PayPlus and updated the same as GET. Fix – The order payment method updates to the method actually used on the payment page (e.g. opened as bit, paid by credit card). Fix – Invoice+: wire / bank transfers are documented as bank transfer with the account number; the order metabox shows “Account” for bank transfers. Fix – Invoice+: PayPal orders are no longer blocked by the PayPlus Authorization setting and are matched by the “do not create” list. 8.2.8 – 23-09-2026 Fix – Invoice+: the payment callback (payplusIpn) no longer creates a document when Invoice Creation Mode is Manual. Automatic callers cannot issue a document in Manual mode; the order-page create action still can. Fix – Hosted Fields: Payment complete, New order, and Processing order emails are sent once. The browser completion and the PayPlus callback no longer both mark the order paid. Other payment methods are unchanged. 8.2.7 – 23-09-2026 Fix – Invoice+: Manual invoice creation mode is now properly respected. Invoices are no longer auto-created when mode is set to Manual in callback/IPN, cron runner, validator, and other automatic paths. 8.2.6 – 18-09-2026 Security – Fixed CVSS 6.5 Broken Access Control vulnerability: merchant PayPlus API secret key is no longer exposed in WooCommerce Blocks frontend payment data or Store API checkout response. (Reported by mamgad via Patchstack) Security – Unauthenticated webhook endpoint now requires manage_woocommerce capability after HMAC verification, preventing gateway settings manipulation via leaked credentials. Security – Callback hash comparison changed from === to hash_equals() for constant-time verification, preventing timing attacks. Security – Debug endpoint callback_response_hash now requires manage_woocommerce capability (only active when WP_DEBUG_LOG is enabled). Fix – Blocks support class now correctly selects dev_secret_key in sandbox mode instead of always using live production secret. 8.2.5 – 14-09-2026 Fix – Hosted Fields (PayPlus Embedded): no longer uses a generic customer or the wrong order id. Fix – Invoice+: Multipass and other club/alternative methods are no longer shown as “Other” on documents. Fix – Invoice+: callback and redirect no longer create a second document or duplicate invoice fields. Fix – PayPlus order custom fields are saved once when callback and success URL run together (no stacked HPOS rows). Tweak – Optional “Prevent duplicate payment complete” setting (default off) to stop double Payment complete notes and New order / Processing emails. Fix – Express Checkout Google Pay is off by default and stays off unless Active page UID Google Pay is set. Tweak – Tested up to WordPress 7.1. Feature – Apple Pay: optional setting to hide the standalone checkout option while keeping Apple Pay available on the main PayPlus payment page. Feature – Partners Dev Mode: optional “Block unpaid $0 orders from session desync” (shown only when Enable partners dev mode is on; default off). Fix – Classic $0 / PW Gift Card thank-you now empties the cart. 8.2.4 – 10-08-2026 Feature – New “Open payment page in website language” option: when enabled, the payment page uses the storefront language; when disabled, previous locale behavior is unchanged. Fix – Blocks: payment method initialize no longer boots all WooCommerce gateways on every page; payment method icons restored. Fix – Blocks checkout: payment payload is built once for the selected method instead of once per registered PayPlus method. Fix – Classic checkout: Place Order button no longer flickers when switching methods unless J5 Weight Estimate refresh is required. Fix – Callback/IPN: more reliable order status updates when multiple success responses arrive for the same payment. Tweak – Ensure WooCommerce is active before loading PayPlus payment gateways. 8.2.3 – 08-07-2026 Feature – New “Show loader during iframe payment & redirect” option: displays a processing spinner over the iframe when payment is submitted, then a full-screen redirect loader when order completes. Fix – Classic checkout: reopening an iframe popup/same-page payment after closing without paying no longer falls back to redirect mode (duplicate payment page fix now correctly returns the cached link for inline modes). Fix – Blocks checkout: processing loader, if activated, no longer appears immediately when the iframe opens; it now correctly waits for the user’s payment submission. Fix – Cron: payment_complete() now fires while the order is still pending (matching regular callback behavior), ensuring the “Payment complete” order note is recorded. 8.2.2 – 24-06-2026 Security – Hosted payment and order completion AJAX handlers now verify order ownership before acting. Prevents unauthenticated metadata tampering and order-key disclosure. (Reported by Pedro Pinho and kevin @OPCIA via WPScan/Automattic) Fix – Checkout: “Place Order” button no longer flickers when switching payment methods. Fix – Cron: when “Payment Completed” is enabled, cron-recovered orders now correctly fire the woocommerce_payment_complete hook. 8.2.1 – 10-06-2026 Fix – Payment page: prevented duplicate payment page creation per order by saving the meta fields the existing duplicate-prevention guard relies on. Eliminates duplicate PRUID entries. 8.2.0 – 07-06-2026 Fix – Cron: when “Exclude manually cancelled orders from cron” checkbox is enabled, orders cancelled by an admin or shop manager are now excluded from cron instead of deleting payment data. Fix – Cron: order status change hook registers only once, preventing duplicate order notes. Works for admins and shop managers via admin, AJAX, or REST. Fix – Cron: minimum order age reduced to 10 minutes for faster processing. Tweak – Settings: cancel checkbox relabeled to “Exclude manually cancelled orders from cron”. 8.1.9 – 03-06-2026 Fix – Blocks checkout: validation errors no longer show a persistent PayPlus error popup; WooCommerce native inline notices are used instead. Fix – Blocks checkout: corrected set_payment_details calls to pass arrays instead of strings, preventing PHP foreach warnings. Fix – Hosted Fields: card number field now shows a green checkmark when card brand is detected. Fix – Hosted Fields: lock and CVV icons now use inline data URIs, eliminating CORS errors on local/dev environments. Fix – SEO: noindex meta tag for error page no longer incorrectly applied to other pages. 8.1.8 – 19-05-2026 Feature – Invoice+ Documents: Added POS EMV to the “Do not create documents” exclusion list. Fix – Invoice+ Documents: POS EMV exclusion now works correctly (POS EMV orders are detected via transaction meta). Fix – Invoice+ Documents: Payment method detection now uses alternative_method_name (bit, apple-pay, google-pay) when available. Fix – Invoice+ Documents: Payment query is now HPOS-compatible (queries correct meta table on High-Performance Order Storage sites) – Fix for docs that came out as other instead of payment app. Fix – Payment meta is now fully stored before order save, preventing race conditions with automatic invoice creation hooks. 8.1.7 – 05-05-2026 Fix – Resolved WC_Order_Item_Coupon::offsetGet deprecation notice (since WooCommerce 4.4.0) when coupons are applied at checkout. Feature – Refund fee: Option to automatic 5% or 100 NIS (whichever is lower) refund fee for PayPlus refunds. Feature – POS Only Mode option for dedicated POS terminal setups. Fix – Hide PayPlus Gateway checkbox now works reliably for all checkout types (Classic and Blocks), regardless of Hosted Fields or EMV configuration. Fix – Hosted Fields: resolved duplicate rendering issues on Blocks checkout. Fix – Subscriptions: token now correctly retrieved from subscription or parent order (ON ALL CASES). Fix – Blocks checkout: payment errors now display correctly to frontend users. Fix – Cron job no longer fires at order creation, only at scheduled intervals. Tweak – Optimized user_has_cap filter: now registers only once and only in admin, eliminating ~200ms overhead on every frontend request. 8.1.6 – 18-03-2026 Fix – PayPlus payment gateway now displays correctly in the WooCommerce Blocks checkout page editor (resolved “payment methods not supported” message). Feature – Blocks checkout: closing a payment page (iframe/popup) or re-selecting a payment method no longer requires a full page reload. Fix – Blocks checkout: PayPlus Embedded (hosted fields) no longer requires a full page reload on payment failure or when coupons/gift cards change. Fix – Order status polling now stops correctly when a payment page is closed or the cart total changes (both Classic and Blocks checkout). Feature – J5 Weight Estimate: added a configurable percentage-based cart fee (5%–20%) for Authorization (J5) mode, visible only when a PayPlus gateway is selected. Feature – J5 Weight Estimate: customizable fee name and optional description message displayed below the fee line. Feature – New option to prevent double rendering of the payment page iframe on the receipt page (common with Elementor or other page builders). Tweak – Removed TV power-down effect feature. 8.1.5 – 15-03-2026 Feature – Added VAT selection prompt for partial refunds, allowing admins to choose whether the refunded amount includes VAT or is VAT-exempt. Fix – Resolved an issue where saved payment tokens could override the PayPlus Embedded selection, causing the checkout to revert to a previously saved card instead of using newly entered card details. Fix – Fixed token saving failure when the optional “Name for Invoice” or “Alternative ID/VAT” fields were filled during PayPlus Embedded checkout. Feature – PRUID history tracking: all payment page request UIDs are now stored with timestamps, enabling recovery of orders where the UID changed. The “Get PayPlus Data” button shows a selection popup with a “Try All” option. Feature – Optional order total display inside PayPlus Embedded payment form for both Classic and Blocks checkout, with automatic updates on coupon/shipping changes. Tweak – Reduced checkout order-status polling frequency to prevent excessive server load on slower sites. Fix – Fixed Hebrew character corruption (appearing as raw Unicode escapes) in PayPlus API payloads for certain server configurations. Tweak – PRUID history is now used by the cron job and the Orders Validator for more reliable order status recovery. Fix – Fixed expiry field order in PayPlus Embedded for LTR locales. Fix – The “Include Apple Pay Script” setting now correctly loads the Apple Pay script on Blocks checkout for all iframe display modes. 8.1.4 – 10-03-2026 Fix – Fixed an issue where redirect URLs after payment could be malformed (& converted to &), potentially causing broken thank-you page loads or missing order details. See changelog for all versions.
TablePress – Tables in WordPress made easy
Boost your website with feature-rich tables that your visitors will love! TablePress is the most popular and highest-rated WordPress table plugin. Easily create, edit, and manage beautiful and modern data tables, from simple price lists to searchable directories, product and model tables, inventories, schedules, and research datasets. Add live sorting, pagination, searching, and other interactive features that help visitors find what they’re looking for on any device. Use any type of data and enrich your tables with images, links, and even math formulas. Import and export tables from/to Excel, CSV, HTML, and JSON files or URLs, including spreadsheet data from Google Sheets, Excel Online, and files stored on Dropbox or OneDrive. Embed tables into posts, pages, or other site areas using the block editor, an Elementor widget, or Shortcodes. All with no coding knowledge needed! Even more great features for you and your site’s visitors and priority email support are available with a Premium license plan of TablePress. Go check them out! Common use cases TablePress will handle a wide range of tables, from simple price lists to searchable directories and large datasets. Popular examples include: Product and model tables Service and price lists Directories and listings Schedules and timetables Participant and member lists Inventories and collections Comparison tables Research and statistical data Accessible and SEO-friendly tables TablePress creates accessible HTML tables whose content can be searched by visitors, WordPress search, and search engines alike. Interactive features like sorting, filtering, and pagination include accessibility enhancements for screen readers and other assistive technologies. This makes it easy for visitors to find relevant information, whether they are browsing a large directory, searching a product table, or using your site’s search function. More information Visit tablepress.org for more information, take a look at example tables, or try TablePress on a free test site. For latest news, follow @TablePress on Twitter/X or subscribe to the TablePress Newsletter. How to use TablePress After installing the plugin, you can create and manage tables on the “TablePress” screen in the WordPress Dashboard. To insert a table into a post or page, add a “TablePress table” block in the block editor or a widget in the Elementor page builder and select the desired table or use Shortcodes with other page builders. Beginner-friendly step-by-step tutorials, guides, and how-tos show how to achieve common and popular tasks with TablePress. You can find examples for common styling changes via “Custom CSS” code on the TablePress FAQ page. You may also add features like sorting, pagination, searching, filtering, alternating row colors, row highlighting, and more by enabling the corresponding options on a table’s “Edit” screen. Premium features Need additional functionality for larger tables or advanced use cases? Premium license plans for TablePress add features such as: Options for responsive tables Advanced filtering and search Fixed table headers and columns Automatic periodic imports Custom styling options And much more Priority email support is also included. Check out the details on the TablePress website.
