Title: PureCart Author: Aminul Islam Published: July 16, 2026 Last modified: July 16, 2026 --- Search plugins ![](https://s.w.org/plugins/geopattern-icon/purecart.svg) # PureCart By [Aminul Islam](https://profiles.wordpress.org/theaminuldev/) [Download](https://downloads.wordpress.org/plugin/purecart.1.0.1.zip) * [Details](https://wordpress.org/plugins/purecart/#description) * [Reviews](https://wordpress.org/plugins/purecart/#reviews) * [Installation](https://wordpress.org/plugins/purecart/#installation) * [Development](https://wordpress.org/plugins/purecart/#developers) [Support](https://wordpress.org/support/plugin/purecart/) ## Description **PureCart for WooCommerce** adds three purpose-built product types to WooCommerce and the complete infrastructure to sell them: * **PureCart Plugin** — WordPress plugins, themes, and any downloadable software. Delivers a license key and a signed, expiring download token on purchase. * **PureCart SaaS** — Hosted software and web applications. Triggers signed webhook provisioning and delivers a unique API key to the customer. * **PureCart Bundle** — Product bundles. One purchase delivers multiple license keys and download files. #### Core Features **Secure Downloads** — Every file is streamed through PHP using signed, expiring tokens. No direct file URL is ever exposed. Works for any file format: ZIPs, PDFs, executables, design assets. **Software Licensing** — Cryptographically secure license keys with configurable site limits (single, multi, unlimited, lifetime). Full REST API for runtime activation and deactivation by the customer’s application. **SaaS Provisioning** — Webhook-based account creation at checkout. API key delivery. HMAC-SHA256 signed payloads. Suspend and reactivate accounts directly from WooCommerce orders. **Customer Dashboard** — My Account tabs for licenses, downloads, and API keys. Customers self-manage their purchases without contacting support. **Subscription Billing** — Recurring billing via Action Scheduler. Dunning for failed payments. **HPOS Compatible** — Full compatibility with WooCommerce High Performance Order Storage. #### Plugin Auto-Update Server (Separate Add-On) A self-hosted update server that lets your customers receive plugin updates through the standard WordPress updater is available as a **separate add-on**, distributed outside WordPress.org. This keeps the core plugin fully free and unrestricted while giving you the option to add update delivery when your business needs it. #### For Developers * REST API under `/wp-json/purecart/v1/` * PSR-4 namespace: `PureCart\` * Action Scheduler for all background jobs — no raw WP-Cron * HMAC-SHA256 signed webhooks (`X-PureCart-Webhook`, `X-PureCart-Sig` headers) #### Requirements * WordPress 6.0 or higher * WooCommerce 9.8 or higher * PHP 8.1 or higher ### External Services PureCart does not send data to any third-party service. Everything runs entirely on your own WordPress installation. The sections below explain what data moves between your site and your customers. #### License Activation & Deactivation API When a customer activates or deactivates a license key on a domain, their WordPress site calls: * **Endpoint:** `https://yoursite.com/wp-json/purecart/v1/license/activate` and`/ deactivate` * **Data received:** license key, domain name, environment type (production / staging/ local), and the connecting IP address. * **Data stored:** activation record in your own database. Nothing is sent to any third party. #### Secure File Downloads (digital files, ZIPs, PDFs, any format) When a customer downloads a purchased file — whether it is a plugin ZIP, a PDF, an ebook, a design asset, or any other digital product — the file is streamed directly from your server through a signed, expiring token URL. No direct file path is ever exposed, and no external service is involved. * **Data logged per download:** download token ID, IP address, and timestamp. Stored in your own database only. #### SaaS Provisioning Webhook When you sell a SaaS product, PureCart fires a signed webhook to the URL you configure in **PureCart Settings SaaS Webhook URL**. This is your own endpoint (or a service you control, such as your application’s provisioning API). * **Data sent:** event name (`provision`, `suspend`, or `activate`), API key, plan name, and WordPress user ID. * **Security:** every payload is signed with HMAC-SHA256 using the secret you set in Settings (`X-PureCart-Sig` header). * **No data is sent to WordPress.org or any other third party.** You control the destination URL entirely. Ensure that whatever endpoint receives this webhook has its own Privacy Policy covering the data it processes. ## Installation 1. Go to **Plugins Add New** and search for **PureCart for WooCommerce**. 2. Click **Install Now**, then **Activate**. 3. Go to **PureCart Settings** to configure. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “PureCart” is open source software. The following people have contributed to this plugin. Contributors * [ Aminul Islam ](https://profiles.wordpress.org/theaminuldev/) * [ mostakimmim123 ](https://profiles.wordpress.org/mostakimmim123/) * [ Nayeem M. Muzahid ](https://profiles.wordpress.org/nym02/) [Translate “PureCart” into your language.](https://translate.wordpress.org/projects/wp-plugins/purecart) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/purecart/), check out the [SVN repository](https://plugins.svn.wordpress.org/purecart/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/purecart/) by [RSS](https://plugins.trac.wordpress.org/log/purecart/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### PureCart/v1.0.1 – 2026-07-16 * Compliance: Removed the self-hosted update server from the WordPress.org version. * Refactor: Moved the PSR-4 autoloader into a dedicated `Autoloader` class. * Fix: Corrected `$_SERVER['HTTP_USER_AGENT']` sanitization and added missing PHPDoc comments. * Docs: Added `External Services` documentation and a `CONTRIBUTING.md` guide. * Build: Updated Tailwind CSS v4, TypeScript, PostCSS, and distribution configuration. #### PureCart/v1.0.0 – 2026-06-16 * Initial release. ## Meta * Version **1.0.1** * Last updated **8 hours ago** * Active installations **Fewer than 10** * WordPress version ** 6.0 or higher ** * Tested up to **7.0.1** * PHP version ** 8.1 or higher ** * Tags * [digital downloads](https://wordpress.org/plugins/tags/digital-downloads/)[license keys](https://wordpress.org/plugins/tags/license-keys/) [saas](https://wordpress.org/plugins/tags/saas/)[software licensing](https://wordpress.org/plugins/tags/software-licensing/) [woocommerce](https://wordpress.org/plugins/tags/woocommerce/) * [Advanced View](https://wordpress.org/plugins/purecart/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/purecart/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/purecart/reviews/) ## Contributors * [ Aminul Islam ](https://profiles.wordpress.org/theaminuldev/) * [ mostakimmim123 ](https://profiles.wordpress.org/mostakimmim123/) * [ Nayeem M. Muzahid ](https://profiles.wordpress.org/nym02/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/purecart/)