{"id":364875,"date":"2026-09-08T13:11:48","date_gmt":"2026-09-08T13:11:48","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/cachesafe-for-woocommerce\/"},"modified":"2026-09-08T13:11:20","modified_gmt":"2026-09-08T13:11:20","slug":"cachesafe-for-woocommerce","status":"publish","type":"plugin","link":"https:\/\/wordpress.org\/plugins\/cachesafe-for-woocommerce\/","author":23549143,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"1.0.1","stable_tag":"1.0.1","tested":"7.1","requires":"6.9","requires_php":"7.4","requires_plugins":null,"header_name":"CacheSafe for WooCommerce","header_author":"Cobalt Branch Labs","header_description":"Diagnostic evidence plugin that proves WooCommerce cart\/session isolation across caching stacks. Free v1.0 manual scans with local-only evidence.","assets_banners_color":"334675","last_updated":"2026-09-08 13:11:20","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"","header_author_uri":"https:\/\/cobaltbranchlabs.com","rating":0,"author_block_rating":0,"active_installs":0,"downloads":37,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.0.1":{"tag":"1.0.1","author":"bananasaging","date":"2026-09-08 13:11:20","revision":3686678}},"upgrade_notice":{"1.0.1":"

Includes unminified front-end source and build tooling in the plugin package for public source access.<\/p>","1.0.0":"

First public free release with complete manual scan workflow. Review Settings for test product ID before scanning.<\/p>"},"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3686673,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3686673,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3686673,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3686673,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.1"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3686673,"resolution":"1","location":"assets","locale":"","width":3436,"height":1854},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3686673,"resolution":"2","location":"assets","locale":"","width":3436,"height":1664},"screenshot-3.png":{"filename":"screenshot-3.png","revision":3686673,"resolution":"3","location":"assets","locale":"","width":3436,"height":2064}},"screenshots":{"1":"CacheSafe overview and scan summary","2":"Live scan progress with stage timeline","3":"Findings with sanitized evidence drawer"}},"plugin_section":[],"plugin_tags":[146,3047,600,14950,286],"plugin_category":[45,52,54],"plugin_contributors":[276392],"plugin_business_model":[],"class_list":["post-364875","plugin","type-plugin","status-publish","hentry","plugin_tags-cache","plugin_tags-cart","plugin_tags-security","plugin_tags-session","plugin_tags-woocommerce","plugin_category-ecommerce","plugin_category-performance","plugin_category-security-and-spam-protection","plugin_contributors-bananasaging","plugin_committers-bananasaging"],"banners":{"banner":"https:\/\/ps.w.org\/cachesafe-for-woocommerce\/assets\/banner-772x250.png?rev=3686673","banner_2x":"https:\/\/ps.w.org\/cachesafe-for-woocommerce\/assets\/banner-1544x500.png?rev=3686673","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/cachesafe-for-woocommerce\/assets\/icon-128x128.png?rev=3686673","icon_2x":"https:\/\/ps.w.org\/cachesafe-for-woocommerce\/assets\/icon-256x256.png?rev=3686673","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/cachesafe-for-woocommerce\/assets\/screenshot-1.png?rev=3686673","caption":"CacheSafe overview and scan summary"},{"src":"https:\/\/ps.w.org\/cachesafe-for-woocommerce\/assets\/screenshot-2.png?rev=3686673","caption":"Live scan progress with stage timeline"},{"src":"https:\/\/ps.w.org\/cachesafe-for-woocommerce\/assets\/screenshot-3.png?rev=3686673","caption":"Findings with sanitized evidence drawer"}],"raw_content":"\n

CacheSafe for WooCommerce is a diagnostic evidence plugin by Cobalt Branch Labs<\/strong>. It runs controlled anonymous cart sessions through your store's public WooCommerce surfaces and reports whether cache behavior, cookies, headers, and Store API responses preserve customer isolation.<\/p>\n\n

Free v1.0<\/strong> includes manual scans, sanitized findings, provider-aware remediation guidance, WP-CLI, and local-only evidence. No telemetry, no accounts, no automatic cache changes.<\/p>\n\n

What it does<\/h4>\n\n
    \n
  • Preflight checks<\/strong> \u2014 WooCommerce pages, loopback reachability, Store API, test product, runner health, perspective<\/li>\n
  • Manual staged scans<\/strong> \u2014 Store API Cart-Token A\/B isolation plus classic cookie\/add-to-cart flow where supported<\/li>\n
  • 16 safety checks (CS-101\u2013116)<\/strong> \u2014 headers, Set-Cookie, session isolation, replay, cleanup, perspective<\/li>\n
  • Sanitized reports<\/strong> \u2014 copy or download JSON, text, or HTML without cookie values, tokens, or raw bodies<\/li>\n
  • Provider guidance<\/strong> \u2014 evidence-linked remediation for generic stacks and common cache\/CDN plugins<\/li>\n
  • WP-CLI<\/strong> \u2014 wp cachesafe preflight<\/code>, scan<\/code>, status<\/code>, report<\/code>, cancel<\/code>, cleanup<\/code>, purge<\/code><\/li>\n
  • Retention<\/strong> \u2014 keeps the last five completed scans within 30 days (configurable shorter); automatic daily purge<\/li>\n<\/ul>\n\n

    What it does not do<\/h4>\n\n
      \n
    • Place orders, process payments, or call checkout write endpoints<\/li>\n
    • Change cache, CDN, DNS, or host settings automatically<\/li>\n
    • Send telemetry or require an account<\/li>\n
    • Show a numeric \"safety score\"<\/li>\n<\/ul>\n\n

      Admin<\/h4>\n\n

      WooCommerce \u2192 CacheSafe<\/strong> with tabs for Overview, Preflight, Live scan, Results, History, Settings, and Tools.<\/p>\n\n

      Privacy<\/h4>\n\n

      All scan evidence stays on your WordPress site. CacheSafe does not phone home. Reports are sanitized to exclude cookie values, Cart-Tokens, nonces, Authorization headers, raw bodies, secrets, and customer PII. Retention is bounded and configurable; uninstall can remove plugin-owned data when enabled in Settings.<\/p>\n\n

      Development<\/h3>\n\n

      Unminified JavaScript and CSS live in assets\/src\/<\/code>. Built admin assets are written to assets\/build\/<\/code> via @wordpress\/scripts<\/code>.<\/p>\n\n

      To regenerate the compiled files from this plugin directory:<\/p>\n\n

        \n
      1. npm install<\/code><\/li>\n

      2. npm run build<\/code><\/p>\n\n

        package.json and webpack.config.js<\/code> ship with the plugin so the build can be reproduced without a separate repository.<\/p><\/li>\n<\/ol>\n\n\n

          \n
        1. Upload the cachesafe-for-woocommerce<\/code> folder to \/wp-content\/plugins\/<\/code>, or install the ZIP via Plugins \u2192 Add New \u2192 Upload Plugin<\/strong>.<\/li>\n
        2. Activate the plugin through the Plugins screen.<\/li>\n
        3. Ensure WooCommerce is active and configure a test product ID<\/strong> under CacheSafe \u2192 Settings.<\/li>\n
        4. Run Preflight<\/strong>, then start a scan from Live scan<\/strong> or WP-CLI.<\/li>\n<\/ol>\n\n\n
          \n

          Does this place test orders?<\/h3><\/dt>\n

          No. CacheSafe only creates ephemeral anonymous carts using an approved simple product. It never completes checkout or captures customer PII.<\/p><\/dd>\n

          Is this a cache optimizer?<\/h3><\/dt>\n

          No. It is an evidence-led auditor, not a performance plugin. It does not change cache provider settings for you.<\/p><\/dd>\n

          Does it work without WP-Cron?<\/h3><\/dt>\n

          Yes. The Live scan tab advances scans while you watch; Action Scheduler is used when available but is not required for manual scans.<\/p><\/dd>\n

          How long is scan history kept?<\/h3><\/dt>\n

          By default, the last five completed scans within 30 days. Failed or cancelled scans are purged sooner. You can purge manually from Tools or WP-CLI.<\/p><\/dd>\n

          Will this slow down my storefront?<\/h3><\/dt>\n

          Scans are admin-triggered and budget-limited (default \u226430 HTTP requests, short timeouts). They are not continuous background traffic.<\/p><\/dd>\n

          Where can I get support?<\/h3><\/dt>\n

          Use the WordPress.org support forum for this plugin after it is published, or contact Cobalt Branch Labs through the Author URI listed on the plugin page.<\/p><\/dd>\n\n<\/dl>\n\n\n

          1.0.1<\/h4>\n\n
            \n
          • Ship unminified assets\/src<\/code> plus build tooling in the distributable package for Guideline 4 source access<\/li>\n
          • List WordPress.org username bananasaging in Contributors<\/li>\n<\/ul>\n\n

            1.0.0<\/h4>\n\n
              \n
            • Free v1.0 release: full manual scan pipeline, 16 checks, admin UI, WP-CLI, sanitized reports<\/li>\n
            • Store API and classic cookie A\/B session isolation in live scans<\/li>\n
            • Automatic retention purge (daily cron + after scan completion)<\/li>\n
            • Provider-aware remediation catalog (Cloudflare, LiteSpeed, WP Rocket, WP Super Cache, W3 Total Cache, host-cache)<\/li>\n
            • Request-budget accounting and duplicate-finding fixes for live polling<\/li>\n<\/ul>\n\n

              0.1.0-alpha.0<\/h4>\n\n
                \n
              • Early lab scaffold and quality toolchain<\/li>\n<\/ul>","raw_excerpt":"Prove that WooCommerce cart and customer sessions stay isolated across your real caching stack \u2014 without placing an order.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/364875","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=364875"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/bananasaging"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=364875"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=364875"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=364875"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=364875"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=364875"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=364875"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}