Findalo

Changelog

1.4.0

• Security: the add-to-cart endpoint (/wp-json/findalo/v1/addtocart) now requires the standard REST nonce (X-WP-Nonce). The widget obtains it from the private navigation context (never from cacheable HTML) and sends it with every add; requests without it are refused.
• Change: all admin and storefront JavaScript is enqueued through the WordPress API (admin_enqueue_scripts, wp_enqueue_scripts, wp_add_inline_script); no inline <script> tags are printed by the plugin.
• Change: every setting has its own sanitizer (origin URLs must be absolute http(s) URLs, the widget switch is strictly on/off, tenant and token are restricted to their alphabets), and the General and Advanced tabs save through separate option groups — saving one no longer resets the other.
• Change: admin notices only appear on the Dashboard, the Plugins list and the WooCommerce screens, and every one of them can be dismissed.
• Change: the sales-data export is a plain form (no JavaScript).
• Removed: load_plugin_textdomain() — WordPress.org serves the translations.

1.3.9

• Preparation for the WordPress.org directory: license changed to GPLv2 or later, “External services” and privacy-policy text, escaping and sanitization fixes reported by Plugin Check, the plugin no longer ships its own updater: every install, including those downloaded from the Findalo panel, now receives updates from WordPress.org, cURL push replaced by the WordPress HTTP API, the setup-wizard logo is now bundled with the plugin.
• New: navigation context (window.FINDALO_CTX) for the widget — page type, ids, locale and currency in the page; cart and customer context served privately via ?wc-ajax=findalo_context, never in cacheable HTML.

1.3.8

• Change: official Findalo logo in the setup-wizard header.

1.3.7

• Change: purchase contract v2 — the plugin pushes the full order (order id, total, currency and line items) to window.findaloQ on the “thank you” page; attribution, de-duplication and sending are handled by the widget.

1.3.6

• Fix: add-to-cart from the widget could still fail with a generic error on stores where a third-party plugin’s add-to-cart hook throws before WooCommerce records the item (observed with Facebook for WooCommerce on the second item, in a REST context) — the earlier recovery only helped when the item had already been added. The widget now retries the add with that hook chain temporarily neutralized so a broken third-party plugin can no longer cost you the sale. The normal add path is unchanged. If this triggers, check/update the offending plugin, as it also breaks add-to-cart on your normal storefront.

1.3.5

• Fix: add-to-cart from the widget could still fail on stores where a third-party plugin hooks WooCommerce’s add-to-cart action and errors (observed with Facebook for WooCommerce throwing on the second item). WooCommerce adds the item before firing that hook, so the widget now recovers the item and saves the cart even when such a hook fails — the sale is no longer lost. If this happens, check/update the offending plugin, as it can also affect your normal storefront.

1.3.4

• Fix: add-to-cart from the widget could fail with a generic error on multilingual stores (WPML / WooCommerce Multilingual) when the cart already had items — the item was actually added but a totals-recalculation error rolled the response back. The cart total is now computed defensively so the item is never lost, and error responses carry a diagnostic detail.

1.3.3

• New: “Sales data” tab — export your sales history as a CSV (order id, product id, quantity, date) and import it in your Findalo panel to seed “Best sellers” and “Frequently bought together” with real data from day one. Confirmed orders only; no personal data is included.

1.3.2

• Fix: on multilingual stores (WPML / Polylang) each product was indexed once per language, so results showed every product twice with translations mixed together. Each translation group is now collapsed to a single multilingual entry keyed to the store’s default language. Single-language stores are unaffected.

1.2.5

• Fix: size/color filters no longer match products whose variation is out of stock. Variation attribute values are now excluded from the search facets when every variation carrying that value is out of stock — matching the widget, which already hides sold-out options under the product card. Stores that do not track per-variation stock are unaffected.

1.2.2

• Change: the trigger selector is now managed from your Findalo panel — removed the field from the module so it can be tuned per-store without a plugin update.

1.2.1

• Change: recommendations are now managed entirely from the Findalo panel — removed the in-module recommendation toggles and the auto-mounted storefront slots.

1.2.0

• New: one-click “Connect with Findalo” button (authorize from your panel, no copy-paste) with a manual-connect fallback.
• New: “Verify connection” button that confirms Findalo is receiving your catalog.
• New: “Widget texts” tab — customize the ~50 widget UI strings per language; shipped translations for ES/EN/FR/IT/PT/DE/NL.
• New: purchase attribution so sales that started from a search are credited.
• New: add-to-cart, shopper-prices and orders endpoints powering the widget cart and recommendations.
• New: EAN / UPC / ISBN / MPN feed fields (native WC GTIN + common plugin meta).
• Improved: SEO meta now falls back across Yoast, Rank Math, SEOPress and AIOSEO.
• Reaches feature parity with the PrestaShop module.

1.1.0

• New: guided setup wizard on first activation (connect → widget → publish).
• New: store-wide admin notices — not configured, last push failed, update available.
• New: version-migration framework so upgrades reconcile safely without re-activation.
• New: “Disconnect” action and a recent-sync-activity log on the Status tab.
• Fix: plugin version was reported inconsistently (header vs. internal constant).

1.0.0

• Initial release: catalog sync (status, feed, push) and storefront widget loader.