Title: Polski for WooCommerce
Author: Mariusz Szatkowski
Published: May 29, 2026
Last modified: May 29, 2026
---
Search plugins
# Polski for WooCommerce
By [Mariusz Szatkowski](https://profiles.wordpress.org/motylanogha/)
[Download](https://downloads.wordpress.org/plugin/polski.1.17.0.zip)
* [Details](https://wordpress.org/plugins/polski/#description)
* [Reviews](https://wordpress.org/plugins/polski/#reviews)
* [Installation](https://wordpress.org/plugins/polski/#installation)
* [Development](https://wordpress.org/plugins/polski/#developers)
[Support](https://wordpress.org/support/plugin/polski/)
## Description
**Polski for WooCommerce** is a free, all-in-one toolkit that adapts your WooCommerce
store to the Polish market and EU e-commerce practices. It bundles product safety
information (GPSR), 30-day lowest price history (Omnibus), GDPR consent, the right
of withdrawal, unit prices, KSeF-ready invoicing hooks, and a full set of storefront
features into one modular plugin – so you can replace a stack of single-purpose
plugins with one.
Built for Polish online stores, dropshippers, and agencies, it keeps the most common
Polish and EU requirements in one place and lets you turn each module on or off
as you need it.
This plugin helps you configure store workflows related to Polish and EU market
practices. It does not provide legal advice or guarantee compliance. Always review
your setup for your own business, products, and obligations.
#### Documentation and useful links
* **Documentation** – https://polski.wppoland.com/
* **Plugin page (Polish)** – https://wppoland.com/pl/polski/
* **Plugin page (English)** – https://wppoland.com/en/polski/
#### Why Polski for WooCommerce?
* **Broad module set** – GPSR-related product fields, Omnibus price history, consent
checkboxes, withdrawal requests, product data, and storefront modules in one
plugin
* **Built for Polish stores** – Focused on WooCommerce setups that sell in Poland
* **Free and open source** – Core product, checkout, and storefront tools included
* **Modern codebase** – PHP 8.1+, React admin panel, REST API, WP-CLI support
* **Block-ready** – Full WooCommerce Blocks checkout and cart compatibility
* **HPOS compatible** – Works with WooCommerce High-Performance Order Storage
#### Recent Tools Added
* **Store health monitor** – Passive background monitoring of front-end fatal errors,
the checkout failure rate, and sales anomalies, with email and webhook alerts
and a status dashboard
* **GPSR-related product fields** – Manufacturer, importer, EU responsible person,
product identifiers, safety warnings, and instructions with bulk CSV import or
export
* **Withdrawal request flow** – My Account withdrawal action with confirmation
page, request logging, email confirmation, and audit trail
* **DSA report tools** – Contact point settings, illegal content report form via
shortcode [polski_dsa_report], admin report management page, and email notifications
* **KSeF integration hooks** – NIP-based order flagging, action hooks for invoice
plugin integration, and order list status column
* **Security incidents** – Incident log for vulnerabilities, breaches, payment
failures, third-party outages, and internal follow-up with CSV export
* **Product sustainability fields** – Eco claim basis, certificate link, and expiry
date fields
* **Verified purchase badge** – Green badge on product reviews from customers who
actually purchased the product
#### Checkout and Consent
* **Consent checkboxes** – Configurable consent checkboxes at checkout, registration,
and reviews with full audit trail
* **Omnibus price history** – Automatic 30-day lowest price display on sale products
* **Right of withdrawal** – Withdrawal and return request flow with email confirmations
* **Double opt-in** – Email verification for customer registration (GDPR best practice)
* **Store pages** – Attach terms, privacy policy, and revocation content to WooCommerce
emails
* **Dispute resolution** – ODR platform notice for your imprint/terms page
* **Consent audit trail** – Logging of customer consents with timestamps, IP, and
context
#### Product Display (Shopmarks)
* **Unit prices** – Display price per kg, litre, metre, or any custom unit
* **Delivery times** – Show estimated delivery times on product pages and listings
* **Tax notices** – Display gross/net price information and VAT rate
* **Price display** – Customize how prices appear across your entire shop
#### Storefront Features
* **Wishlist** – Save favorite products for later
* **Product compare** – Side-by-side product comparison
* **Waitlist** – Back-in-stock email notifications
* **Quick view** – Lightbox product preview from listings
* **Gallery zoom** – Enhanced product image zoom
* **Featured video** – Display product videos on the product page
* **Product slider** – Carousel display for product collections
* **Infinite scroll** – Load more products automatically on archive pages
* **Product tab manager** – Customize product page tabs
* **AJAX product filters** – Dynamic product filtering without page reload
* **AJAX search** – Live product search
* **Product badges** – Sale, new, featured, and custom badges
* **Promotional popups** – Targeted popup campaigns
#### Food and Grocery
* **Food product information** – Ingredients, nutrition facts, and allergen declarations
* **Optional food labelling fields** – Configure origin, distributor, alcohol,
and nutrition display where needed
#### Admin and Developer Tools
* **Modern React admin panel** – Module management with per-module settings pages
* **REST API** – Full API for settings, checkboxes, legal pages, withdrawals, and
search
* **WP-CLI commands** – Manage Polski from the command line
* **CSV import/export** – Bulk product data management including GPSR and green
claim fields
* **Shortcodes** – Embed notices, withdrawal forms, GPSR info, DSA report form,
and more
* **Database migrations** – Safe, versioned schema updates
* **Integration hooks** – KSeF action hooks, filters, and compatibility with popular
plugins
* **Expanded audit scope** – Includes DPA registry, DSA, KSeF-ready, anti-greenwashing,
verified reviews, and security incident coverage
* **Incident logging** – Record store-side security incidents and export them for
internal reviews
### Getting Started
Follow these steps to configure the plugin for a Polish store. Always consult a
qualified lawyer for your specific situation:
1. **Verify Legal Pages**: Go to **Polski > Modules** and ensure **Legal Pages** is
active. Go to its settings and select your Terms, Privacy Policy, and Withdrawal
pages.
2. **Configure Checkboxes**: Go to **Polski > Modules > Legal Checkboxes** (ensure
it’s active) and enable the required checkboxes for checkout (Terms, Privacy, Withdrawal).
3. **Set VAT Rates**: Ensure you have correct Polish VAT rates (23%, 8%, 5%, 0%) configured
in **WooCommerce > Settings > Tax**.
4. **Unit Prices**: For products sold by weight or volume, enter the unit pricing
data in the **Polski** tab within the product editor.
5. **Omnibus**: The plugin tracks the lowest price from the last 30 days once a product
goes on sale. Review the output and adjust the display in **Polski > Modules >
Omnibus**.
6. **GPSR**: If you sell physical goods, fill in the Manufacturer and Responsible
Person details in the **Polski** tab of your products and review which information
should appear on the product page.
### Configuration
The plugin is modular. You can enable or disable features based on your needs:
* **Product information**: GPSR fields, unit prices, delivery times, and food data.
* **Checkout and consent**: consent checkboxes, withdrawal flows, and legal page
tools.
* **Storefront**: Wishlist, Compare, Search, Filters, and Badges.
Each active module with configuration options will appear as a sub-menu under **
Polski** or have a “Settings” link on the Modules page.
### External Services
#### GUS REGON API (Polish Central Statistical Office)
When the NIP Lookup module is enabled, this plugin connects to the GUS REGON public
registry to retrieve company data based on the NIP (tax ID) entered by the user.
This connection is made only when the user explicitly triggers a lookup.
* Data sent: NIP number
* Service URL: [https://wyszukiwarkaregon.stat.gov.pl/](https://wyszukiwarkaregon.stat.gov.pl/)
* Service terms: [https://api.stat.gov.pl/Home/RegulaminBIR](https://api.stat.gov.pl/Home/RegulaminBIR)
* Service privacy policy: [https://bip.stat.gov.pl/](https://bip.stat.gov.pl/)
#### Google OAuth
When the Social Login module is enabled and Google login is configured, customers
who click **Continue with Google** are redirected to Google for authentication.
The plugin exchanges the authorization code for an access token and retrieves profile
data so the customer can sign in or create an account.
* Data sent: redirect URI, client ID, authorization code, and access token for
profile retrieval
* Data received: Google account ID, email address, full name, first name, and last
name
* Service URL: [https://accounts.google.com/](https://accounts.google.com/)
* Service terms: [https://policies.google.com/terms](https://policies.google.com/terms)
* Service privacy policy: [https://policies.google.com/privacy](https://policies.google.com/privacy)
#### Facebook OAuth
When the Social Login module is enabled and Facebook login is configured, customers
who click **Continue with Facebook** are redirected to Facebook for authentication.
The plugin exchanges the authorization code for an access token and retrieves profile
data so the customer can sign in or create an account.
* Data sent: redirect URI, app ID, authorization code, and access token for profile
retrieval
* Data received: Facebook account ID, email address, full name, first name, and
last name
* Service URL: [https://www.facebook.com/](https://www.facebook.com/)
* Service terms: [https://www.facebook.com/legal/terms](https://www.facebook.com/legal/terms)
* Service privacy policy: [https://www.facebook.com/privacy/policy/](https://www.facebook.com/privacy/policy/)
#### Google Tag Manager / Google Analytics
When the DataLayer module is enabled and a GTM container ID or GA4 measurement ID
is configured, the plugin loads Google Tag Manager or Google Analytics scripts on
the storefront and pushes ecommerce events based on visitor activity.
* Data sent: page views and ecommerce event data such as product IDs, product names,
prices, cart actions, checkout events, and order totals, depending on your configuration
* Service URL: [https://www.googletagmanager.com/](https://www.googletagmanager.com/)
* Service terms: [https://policies.google.com/terms](https://policies.google.com/terms)
* Service privacy policy: [https://policies.google.com/privacy](https://policies.google.com/privacy)
Admin feedback and deactivation feedback are stored locally in WordPress and are
not sent to an external service.
### Disclaimer
THIS PLUGIN IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,
INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR
PURPOSE AND NONINFRINGEMENT.
WPPoland (wppoland.com) shall not be liable for any direct, indirect, incidental,
special, consequential or exemplary damages, including but not limited to damages
for loss of profits, goodwill, data, or other intangible losses, resulting from
the use or inability to use this plugin.
This plugin provides technical tools and templates for WooCommerce stores. It does
not constitute legal advice and does not guarantee compliance. Review all generated
texts and settings before using them in production. Always test in a development
or staging environment before deploying to a live store.
WPPoland bears no responsibility for any legal, financial, regulatory, or other
consequences arising from the use of this plugin. By installing and activating this
plugin, you acknowledge that you do so entirely at your own risk.
## Blocks
This plugin provides 4 blocks.
* Copyright notice
* Polski — withdrawal lookup
* Polski — Annex I(A) information
* Polski — Annex I(B) form template
## Installation
#### Automatic Installation
1. Go to **Plugins > Add New** in your WordPress admin.
2. Search for **Polski for WooCommerce**.
3. Click **Install Now** and then **Activate**.
4. Navigate to the new **Polski** menu item in your sidebar.
#### Manual Installation
1. Download the plugin ZIP file from the WordPress.org repository.
2. In your WordPress admin, go to **Plugins > Add New > Upload Plugin**.
3. Choose the ZIP file and click **Install Now**.
4. Click **Activate Plugin**.
## FAQ
### Is Polski for WooCommerce free?
Yes. Polski for WooCommerce is free and open source under GPLv2 or later.
### Does Polski support GPSR (General Product Safety Regulation)?
Yes. Polski includes 8 dedicated product fields for GPSR-related data, bulk CSV
import or export, a status column in the product list, and product page display
tools. You should review which fields and presentation are appropriate for your
own products and obligations.
### Does it support customer withdrawal requests (EU Directive 2023/2673)?
Yes. Polski adds a withdrawal action directly in My Account > Orders for eligible
orders. The customer opens a confirmation page, submits the request, then receives
confirmation and the request is logged in the audit trail.
### Is Polski ready for KSeF?
Polski can flag orders that may require KSeF invoicing based on NIP in billing data
and provides action hooks (`polski/ksef/invoice_ready`, `polski/ksef/is_required`)
for invoice plugin integration. A KSeF status column appears in the orders list.
### Does Polski support GDPR for Polish shops?
Yes. Polski includes configurable consent checkboxes, consent logging, double opt-
in registration, and related data-handling tools that can support GDPR workflows.
Review the configuration for your own store and obligations.
### Does it support the Omnibus Directive (EU Directive 2019/2161)?
Yes. Polski tracks and displays the lowest price from the last 30 days on sale products.
Review the output and pricing workflow for your own store before relying on it in
production.
### Does Polski work with WooCommerce Blocks checkout?
Yes. Polski fully supports both the classic and block-based checkout and cart.
### Does Polski work with HPOS (High-Performance Order Storage)?
Yes. Polski declares full compatibility with WooCommerce HPOS (Custom Order Tables).
### Where can I report bugs or suggest features?
Please use the WordPress.org support forum for support and feature suggestions.
### Is there a simple feedback form for non-technical users?
Yes. The plugin admin includes a simple feedback form that stores messages locally
in WordPress. Do not include passwords, licence keys, or customer personal data
in that form.
### What is the difference between deactivation and uninstall?
Deactivating Polski keeps your settings and stored data. Uninstalling removes the
plugin files. Plugin data is deleted only if the remove-data-on-uninstall setting
is enabled.
## Reviews
There are no reviews for this plugin.
## Contributors & Developers
“Polski for WooCommerce” is open source software. The following people have contributed
to this plugin.
Contributors
* [ Mariusz Szatkowski ](https://profiles.wordpress.org/motylanogha/)
[Translate “Polski for WooCommerce” into your language.](https://translate.wordpress.org/projects/wp-plugins/polski)
### Interested in development?
[Browse the code](https://plugins.trac.wordpress.org/browser/polski/), check out
the [SVN repository](https://plugins.svn.wordpress.org/polski/), or subscribe to
the [development log](https://plugins.trac.wordpress.org/log/polski/) by [RSS](https://plugins.trac.wordpress.org/log/polski/?limit=100&mode=stop_on_copy&format=rss).
## Changelog
#### 1.17.0
* Store health monitor: new optional module (off by default) for continuous, passive
monitoring of store operations. Three sensors run every 5 minutes via WP-Cron:
front-end fatal errors (`shutdown` handler, storefront only), the checkout failure
rate (observes `woocommerce_checkout_order_processed`, the Store API equivalent,
and `woocommerce_order_status_failed` over a rolling 2-hour window), and a sales
anomaly check (previous full hour vs the typical order count for the same weekday/
hour over the past 8 weeks, evaluated at most once per hour). No synthetic orders
are ever placed. Alerts go out by email and optional JSON webhook (Slack/Discord-
compatible) with a configurable cooldown; a hard outage also records an entry
in the security incident log when that module is enabled. Health dashboard under
Reports & Tools with a manual “Run check now”, an admin notice when status is
not OK, and a read-only REST endpoint `GET /polski/v1/store-health`. Block checkout
is covered through the Store API hook. Settings: alert email/webhook, failure-
rate threshold and minimum sample, sales anomaly threshold, and alert cooldown.
#### 1.15.0
* B2B fields: optional “Potrzebuję faktury VAT” toggle, separate from the existing“
Buying as a company” checkbox. Polish e-commerce convention treats invoice-need
as orthogonal to company-vs-consumer (paragon vs faktura), so the field is its
own opt-in. Saves to `_polski_needs_invoice` order meta. Wired through both classic
checkout and the WC 8.6+ additional-fields API. New setting `polski_b2b.show_needs_invoice_toggle`(
default off).
* Compare: sticky bottom drawer (`polski_compare.show_sticky_bar`, default off)
showing thumbnails of compared products with a “Porównaj (N)” CTA and a clear-
all button. Hidden on the compare page itself; auto-suppressed when the list
is empty. Mobile-responsive CSS.
* Compare: new shortcode `[polski_compare_count]` for the header counter, with `
template`, `class`, and `hide_when_empty` attributes. Renders an anchor to the
compare page with a `data-polski-compare-count` attribute that the existing AJAX
layer can update live.
* AJAX filters: named presets. `[polski_filters preset="b2b"]` shortcode argument
loads overrides from the new `polski_filter_presets` option (`[name => array<
setting, value>]`); the inner array is merged over the global filter settings
before render. Archives can map to a preset via the `polski/filters/archive_preset`
filter. Per-preset runtime tweaks via `polski/filters/preset` (preset, name).
#### 1.14.1
* B2B fields: full IBAN validation. `B2BCheckoutService::isPlausibleIban()` now
performs the ISO 13616 mod-97 checksum and a country-code length lookup (PL=28,
DE=22, GB=22, FR=27, IT=27, plus 25 more EU/CH/GB markets). Replaces the previous
structural-only sanity check.
* DSA: per-IP rate limiting on the report submission handler. Default 5 reports
per hour per IP; window and limit are filterable via `polski/dsa/rate_limit_window_seconds`
and `polski/dsa/rate_limit_max_attempts`. Source IP is filterable via `polski/
dsa/rate_limit_ip` for sites behind a reverse proxy.
* Code quality: tighter Plugin Check compliance in pre-existing modules. CRA `IncidentRepository`
now uses `%i` placeholders instead of interpolated `{$table}` queries; `FilterService`
documents the read-only GET-based filter context with a scoped `phpcs:disable`/`
enable` block instead of leaving a Recommended warning open; `CRAIncidentsPage`
adds `wp_unslash()` + `sanitize_key()` before passing `$_POST['kind']` and `$
_POST['severity']` to `IncidentKind::tryFrom()` and `Severity::tryFrom()`; `templates/
forms/ajax-filters.php` sanitises single-string `$_GET[$key]` reads.
#### 1.14.0
* B2B checkout fields: Block-checkout support via `woocommerce_register_additional_checkout_field`(
WC 8.6+). NIP, REGON, and IBAN now appear in both classic and Block checkouts
from a single registration. Values written by the WC additional-fields API are
mirrored to legacy `_billing_nip`, `_billing_regon`, `_billing_iban` order meta
on save (`woocommerce_set_additional_field_value`) so the existing KSeF and invoice
modules pick them up unchanged. The classic-only `woocommerce_billing_fields`
path is automatically skipped when the modern API is available, preventing duplicate
billing rows. Stores on WC < 8.6 continue to use the classic-only path with the
company toggle.
* DSA module: per-product report widget. Optional collapsible “Zgłoś nielegalne
treści (DSA)” section on single product pages with the report form prefilled
with the product permalink and human-readable name. The form posts to the existing`
polski_dsa_report` admin-post handler, so reports flow into the same admin queue
as shortcode submissions. Configurable position (after product summary or in
product meta block). New filter `polski/dsa/product_widget_enabled`. Defaults`
polski_dsa.product_widget_enabled` (off) and `polski_dsa.product_widget_position`(`
after_summary`).
* DSA module: defaults populated for `polski_dsa` (`contact_email`, `form_title`,`
form_intro`, plus the new widget keys) so admins see seeded values on first activation
instead of empty strings.
#### 1.13.0
* New module: B2B checkout fields. Adds an optional “Buying as a company” toggle
plus NIP, REGON, and IBAN fields to WooCommerce classic checkout, with conditional
show/hide tied to the toggle. NIP is validated on submit using the official Polish
checksum algorithm and saved to standard `_billing_nip` meta so the existing
KSeF and invoice modules pick it up without changes. REGON accepts 9- or 14-digit
numbers; IBAN passes a structural sanity check (country prefix + 13-32 alphanumeric
body, length 15-34). Settings group `polski_b2b` (`enabled`, `show_company_toggle`,`
nip`, `regon`, `iban`). New static utility `Polski\Util\NipValidator` (`isValid`,`
normalize`, `format`). When polski-pro’s NipValidator is active, free skips its
own NIP registration to avoid a duplicate field.
#### 1.12.0
* AI Feed: `/llms.txt` manifest at the site root following the open standard at
https://llmstxt.org. AI agents that look for the well-known file at `/llms.txt`
now get a Markdown index of the site – title, description, legal pages with `?
output_format=md` links, the WooCommerce shop page, and the top product categories.
Filters: `polski/ai_feed/llms_txt_enabled`, `polski/ai_feed/llms_txt_sections`,`
polski/ai_feed/llms_txt_category_limit`. Setting `polski_ai_feed.llms_txt_enabled`(
default `true`).
#### 1.11.0
* New module: AI Feed. Serves singular posts, pages, and WooCommerce products as
Markdown via content negotiation so AI agents and LLM crawlers can ingest store
content without scraping HTML. Triggered by `Accept: text/markdown` header or`?
output_format=md` query argument. Adds `` to single views for discovery and a “View AI Version” row action on the Posts,
Pages, and Products list screens.
* AI Feed: product Markdown enriched with Polish-market data – SKU, GTIN/EAN, gross/
regular/sale price, currency, tax class, Omnibus lowest price (last 30 days),
delivery time, stock quantity and availability, weight, dimensions, brand, manufacturer,
GPSR responsible person, and product categories. Front matter exposes the same
fields as YAML for structured ingestion.
* AI Feed: filters `polski/ai_feed/enabled`, `polski/ai_feed/post_types`, `polski/
ai_feed/post_markdown`, `polski/ai_feed/product_markdown`, `polski/ai_feed/product_facts`,`
polski/ai_feed/password_required`. Settings group `polski_ai_feed` (`enabled`,`
post_types`). Default post types: `post`, `page`, `product`.
#### 1.10.0
* New module: OSS observer. Tracks the EU intra-community €10,000 B2C delivery
threshold by integrating with the standalone One Stop Shop plugin. One-click
install + activation directly from the module row. WooCommerce admin note prompts
install when the observer is toggled on without the external plugin present.
Exposes the filter `polski_tax_oss_enabled` so polski-pro and third-party code
can branch tax logic on OSS state.
* Modules page: redesigned as a WP list-table (Name / Enabled / Description / Edit)
with MoSCoW-prioritised grouping – Legal & Compliance, Tax & Pricing, Checkout&
Orders, Content & Trust, Advanced & Tools. Pencil icon opens a dedicated settings
subpage per bucket (`admin.php?page=polski-group-#polski-module-`)
registered dynamically for every module with settings, enabled or not.
* Setup wizard: rewritten as a 5-step guided flow (Company > Legal > Tax & OSS
> Checkout > Finish). Each step uses toggle rows with inline description panels;
optional steps have Skip Step + Continue; OSS toggle on the Tax step triggers
One Stop Shop plugin install on Finish.
* Dashboard: “Relaunch setup wizard” button for merchants who want to rerun the
guided setup after completion.
#### 1.9.1
* Compliance checklist: Accessibility (WCAG) section – 9 heuristic rules scanned
against the static homepage HTML (html lang, skip link, h1, viewport meta, main
landmark, search role, focus outline, autoplay sound, missing img alt). REST:`
GET /polski/v1/compliance/accessibility`.
* Compliance checklist: Cookie banner now includes a push-notification prompt detector–
flags `Notification.requestPermission`, `PushManager.subscribe` and common third-
party push SDKs triggered without user interaction.
* New module: RODO training documentation generator. Admin page `Polski > RODO
training docs` downloads three printable HTML templates (training logbook, principles
summary, data-breach response playbook). Pre-branded with shop data from the
setup wizard.
#### 1.9.0
* New module: Complaint template generator. Ready-to-print complaint form (formularz
reklamacyjny) auto-populated with seller data. Admin page `Polski > Complaint
template` with preview + download as standalone HTML. `[polski_complaint_template]`
shortcode to embed on customer pages.
* New module: Copyright / license notice helpers. `[polski_copyright]` shortcode
+ `polski/copyright` block with year, owner and optional license. `[polski_image_credit]`
shortcode for per-image credits with source link and license.
#### 1.8.2
* New module: Business identification. Renders the shop’s business data (name,
address, NIP, REGON, email, phone) as a `[polski_business_info]` shortcode and
a dynamic Gutenberg block `polski/business-info`. Reads values set in the setup
wizard (`polski_general` option). Block and inline formats with configurable
separator.
#### 1.8.1
* New module: SBOM generator. Emits a CycloneDX 1.4 JSON document listing PHP (
composer.lock) and JS (package-lock.json) dependencies plus plugin metadata.
Admin page `Polski > SBOM` with one-click download for FREE and (when installed)
PRO. Content-Type `application/vnd.cyclonedx+json` — ready for Dependency-Track/
Trivy.
#### 1.8.0
* New module: CRA incident reporting. Records actively-exploited vulnerabilities
and security incidents with a CRA Article 14 early-warning deadline (24h for
incidents/exploits, 72h for near misses). Admin page `Polski > CRA incidents`
to record, dispatch (webhook + email) and mark resolved. JSON export per ENISA
SRP draft schema. Hourly cron checks for deadlines approaching. Action hooks `
polski_cra_incident_recorded` and `polski_cra_incident_deadline_approaching`.
Migration 2.1.0 creates `polski_cra_incidents`.
#### 1.7.2
* Site audit: four new dark-pattern checks. Forced account creation (EU Directive
2023/2673), stale/fake sale countdowns (products still on-sale after date_to
passed), misleading “from” price on variable products with >50% min/max spread,
false urgency via oversized low-stock threshold (>5).
#### 1.7.1
* Compliance checklist: added Cookie banner (active consent) section. Scans the
homepage HTML with a 1h transient cache and reports 9 rules (banner presence,
Accept, Reject with equal prominence, granular settings, Analytics/Marketing
categories, privacy-policy link, withdrawal hint, implied-consent phrase trap).
* REST API: `GET /polski/v1/compliance/cookie-banner?url=` returns the cookie-banner
checklist as JSON.
* 5 new unit tests.
#### 1.7.0
* New module: Compliance checklist for Privacy Policy (RODO Art. 13) and Regulamin(
Ustawa o swiadczeniu uslug / Ustawa o prawach konsumenta). Structural heuristic
scanner with 17 + 15 rules, severity levels (Required/Recommended/Optional),
and a WP-admin checklist page showing score and per-element pass/fail.
* REST API: `GET /polski/v1/compliance/page/{privacy|terms}` returns the full checklist
as JSON.
* Admin: new submenu Polski > Compliance checklist.
* 12 unit tests covering normalization (HTML + diacritic strip), rule evaluation,
score math and default rule sets.
#### 1.6.3
* Fixed: Added per-line `phpcs:ignore` annotations with justifications on all `
$wpdb` custom-table calls (repositories, Migrator, DSAService, uninstall.php)
* Fixed: Added `phpcs:ignore` annotations on `meta_key` / `meta_value` / `meta_query`/`
tax_query` lookups in service classes (ExpertReview, DoubleOptIn, SocialLogin,
ReviewRequest, Faq)
* Fixed: Added `phpcs:ignore` on WooCommerce email header/footer `do_action()`
invocations in email templates
* Result: Plugin Check now reports 0 errors and 0 warnings on the built release
package
#### 1.6.2
* Fixed: Softened plugin description and FAQ wording to avoid implying legal compliance
or legal guarantees
* Fixed: Documented Google OAuth, Facebook OAuth, and Google Tag Manager / Google
Analytics in External Services
* Fixed: Removed broken GitHub support links from the admin sidebar and deactivation
modal
* Fixed: Hardened remaining `$_GET` and `$_POST` handling in admin and storefront
flows
* Fixed: Replaced internal `wp_redirect()` calls with `wp_safe_redirect()` where
the target stays on-site
* Fixed: Removed HEREDOC usage from review request emails for better Plugin Check
compatibility
* Fixed: Replaced all remaining inline `