{"id":381552,"date":"2026-10-13T20:09:21","date_gmt":"2026-10-13T20:09:21","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/sanbar-express-fiscal-check-br\/"},"modified":"2026-10-13T20:09:00","modified_gmt":"2026-10-13T20:09:00","slug":"sanbar-express-fiscal-check-br","status":"publish","type":"plugin","link":"https:\/\/wordpress.org\/plugins\/sanbar-express-fiscal-check-br\/","author":23471565,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"1.0","stable_tag":"1.0","tested":"7.1.3","requires":"6.0","requires_php":"7.4","requires_plugins":null,"header_name":"SanBar EXPress Fiscal Check-BR","header_author":"SanBar (Sandro Barboza)","header_description":"Confer\u00eancia de dados fiscais de produtos WooCommerce para MEI e Simples Nacional \u2014 diagn\u00f3stico, corre\u00e7\u00e3o guiada e alertas por cor.","assets_banners_color":"2d0d06","last_updated":"2026-10-13 20:09:00","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"https:\/\/software.sanbazar.com.br","header_author_uri":"https:\/\/profiles.wordpress.org\/sanbazar\/","rating":0,"author_block_rating":0,"active_installs":0,"downloads":73,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.0":{"tag":"1.0","author":"sanbazar","date":"2026-10-13 20:09:00","revision":3744843}},"upgrade_notice":[],"ratings":[],"assets_icons":{"icon-256x256.png":{"filename":"icon-256x256.png","revision":3744843,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-772x250.png":{"filename":"banner-772x250.png","revision":3744843,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3744843,"resolution":"1","location":"assets","locale":"","width":1868,"height":829},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3744843,"resolution":"2","location":"assets","locale":"","width":940,"height":719},"screenshot-3.png":{"filename":"screenshot-3.png","revision":3744843,"resolution":"3","location":"assets","locale":"","width":1108,"height":807},"screenshot-4.png":{"filename":"screenshot-4.png","revision":3744843,"resolution":"4","location":"assets","locale":"","width":1154,"height":725}},"screenshots":[]},"plugin_section":[],"plugin_tags":[229694,238588,286568,286569,286],"plugin_category":[45],"plugin_contributors":[267603],"plugin_business_model":[],"class_list":["post-381552","plugin","type-plugin","status-publish","hentry","plugin_tags-fiscal","plugin_tags-mei","plugin_tags-nf-e","plugin_tags-simples-nacional","plugin_tags-woocommerce","plugin_category-ecommerce","plugin_contributors-sanbazar","plugin_committers-sanbazar"],"banners":{"banner":"https:\/\/ps.w.org\/sanbar-express-fiscal-check-br\/assets\/banner-772x250.png?rev=3744843","banner_2x":false,"banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/sanbar-express-fiscal-check-br\/assets\/icon-256x256.png?rev=3744843","icon_2x":"https:\/\/ps.w.org\/sanbar-express-fiscal-check-br\/assets\/icon-256x256.png?rev=3744843","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/sanbar-express-fiscal-check-br\/assets\/screenshot-1.png?rev=3744843","caption":""},{"src":"https:\/\/ps.w.org\/sanbar-express-fiscal-check-br\/assets\/screenshot-2.png?rev=3744843","caption":""},{"src":"https:\/\/ps.w.org\/sanbar-express-fiscal-check-br\/assets\/screenshot-3.png?rev=3744843","caption":""},{"src":"https:\/\/ps.w.org\/sanbar-express-fiscal-check-br\/assets\/screenshot-4.png?rev=3744843","caption":""}],"raw_content":"<!--section=description-->\n<p><strong>SanBar EXPress Fiscal Check-BR<\/strong> checks the fiscal data of your WooCommerce products before the invoice is issued, to avoid SEFAZ rejections. Made for store owners who are not tax specialists: every problem is explained in plain Portuguese, with a button to fix it.<\/p>\n\n<p>Focused on <strong>MEI (CRT 4)<\/strong> and <strong>Simples Nacional (CRT 1)<\/strong>. It never blocks product editing \u2014 it only shows colors and tells you what to fix.<\/p>\n\n<p><strong>This is the free edition.<\/strong> Features marked <em>(Plus Only)<\/em> below are part of the Plus edition and are listed so you know what it adds.<\/p>\n\n<h4>Features<\/h4>\n\n<ul>\n<li><strong>Color status per product<\/strong> \u2014 \u26aa no data, \ud83d\udd34 error, \ud83d\udfe1 attention, \ud83d\udfe2 ok<\/li>\n<li><strong>Diagnosis per product<\/strong> \u2014 what is wrong, why, and how to fix it, with one-click fixes<\/li>\n<li><strong>\"Como sair\u00e1 na nota\" (how it will appear on the invoice)<\/strong> \u2014 the CSOSN and CFOP the product gets as MEI and as Simples Nacional<\/li>\n<li><strong>Automatic or manual<\/strong> \u2014 CSOSN\/CFOP for each regime calculated from the product data, or set by you; when the store changes regime, automatic products adjust by themselves<\/li>\n<li><strong>Catalog check in batches<\/strong> \u2014 checks the whole catalog, 50 products at a time, with a background first check and progress indicator<\/li>\n<li><strong>Official tables<\/strong> \u2014 checks that the NCM exists and is current (Siscomex table, refreshed monthly) and suggests the CEST of the NCM (ICMS Agreement 142\/2018); revoked CEST codes are flagged with what to do<\/li>\n<li><strong>NCM search by description<\/strong> (\"Procurar NCM pela descri\u00e7\u00e3o\") \u2014 suggests NCMs already used by similar products in your catalog and searches the official NCM table<\/li>\n<li><strong>Filters<\/strong> \u2014 by status, category (parent \u203a child tree), search, 25 or 50 products per page<\/li>\n<li><strong>Works on its own<\/strong> \u2014 writes to the standard product fiscal fields, so any invoicing plugin can use them<\/li>\n<li><strong>\"Corrigir todos iguais\" (fix all alike)<\/strong> \u2014 solves repeated problems in many products at once, in batches (Plus Only)<\/li>\n<li><strong>GTIN lookup<\/strong> \u2014 by barcode (GTIN field, or SKU when it is a valid barcode): <strong>SEFAZ<\/strong> Centralized GTIN Registry (official, with your A1 certificate, saved once for the site: sent here or in SanBar EXPress NF-e &amp; PDV) and <strong>Cosmos<\/strong> (optional, paid API), cross-checked, with the NCM checked against the official table (Plus Only)<\/li>\n<li><strong>XML Import \u21c4 Fiscal Check tabs and \"Conferir fiscal\" right after creating drafts<\/strong> \u2014 see Integration below (Plus Only)<\/li>\n<\/ul>\n\n<h4>Integration with the SanBar Suite<\/h4>\n\n<p>Works on its own, and connects (without depending on them) with:<\/p>\n\n<ul>\n<li><strong>SanBar EXPress NF-e &amp; PDV<\/strong> \u2014 uses the tax regime (CRT) configured in the invoicing plugin, and the site certificate (shared vault) for the SEFAZ GTIN lookup. If no certificate is saved yet, the Plus edition lets you send it here.<\/li>\n<li><strong>SanBar EXPress NF-e XML Import<\/strong> \u2014 re-checks a product whenever purchase-invoice data is applied to it. With both plugins in Plus: tabs to switch between the two screens, and a <strong>\"\ud83d\udd0e Conferir fiscal (N)\"<\/strong> button right after creating drafts that opens Fiscal Check filtered to those products, then <strong>\"Abrir no Store Manager\"<\/strong> with the same products (Plus Only)<\/li>\n<li><strong>SanBar EXPress Store Manager (Plus)<\/strong> \u2014 Fiscal Check button in the <strong>Integrations<\/strong> menu, colored fiscal buttons in the grid and in the variations window, fiscal data carried in its backup\/sync. Inside the Store Manager window the whole flow XML Import \u2192 Fiscal Check \u2192 grid filter happens without leaving the screen<\/li>\n<li><strong>Cosmos token<\/strong> \u2014 the same token is shared with the Store Manager image search<\/li>\n<\/ul>\n\n<h4>More from sanbazar<\/h4>\n\n<p>Other plugins and tools by the author are listed at <a href=\"https:\/\/software.sanbazar.com.br\">software.sanbazar.com.br<\/a>.<\/p>\n\n<h4>Permissions<\/h4>\n\n<ul>\n<li>Viewing and checking products requires the <code>edit_products<\/code> capability.<\/li>\n<li>Saving corrections to a product requires <code>edit_product<\/code> for that product.<\/li>\n<li>Settings (regime, tables, Cosmos token) require <code>manage_woocommerce<\/code>.<\/li>\n<\/ul>\n\n<h3>External services<\/h3>\n\n<ul>\n<li><strong>Portal \u00danico Siscomex<\/strong> (Brazilian federal government) \u2014 <code>https:\/\/portalunico.siscomex.gov.br\/classif\/api\/publico\/nomenclatura\/download\/json<\/code> \u2014 downloads the public current NCM table once a month (WP-Cron) and when you click \"Atualizar tabela NCM agora\". No store or product data is sent. Terms: https:\/\/www.gov.br\/pt-br\/termos-de-uso<\/li>\n<li><strong>SEFAZ Centralized GTIN Registry (SVRS)<\/strong> (Plus Only) \u2014 <code>https:\/\/dfe-servico.svrs.rs.gov.br\/ws\/ccgConsGTIN\/ccgConsGTIN.asmx<\/code> \u2014 only when you click \"Buscar dados (SEFAZ)\" in a diagnosis. The query is signed with your A1 certificate (the site certificate, sent here or in SanBar EXPress NF-e &amp; PDV) and sends the barcode and the CNPJ of the certificate. No product data other than the barcode is sent. Results are cached for up to 30 days.<\/li>\n<li><strong>Cosmos (Bluesoft)<\/strong> (Plus Only) \u2014 optional, requires a paid Cosmos API plan. Only when you click \"Buscar dados (Cosmos)\" and a token is saved: sends the barcode and your token to <code>https:\/\/cosmos.bluesoft.com.br\/api\/gtins\/<\/code>. Terms: https:\/\/cosmos.bluesoft.com.br<\/li>\n<\/ul>\n\n<!--section=installation-->\n<ol>\n<li>Upload the <code>sanbar-express-fiscal-check-br<\/code> folder to <code>\/wp-content\/plugins\/<\/code>, <strong>or<\/strong> install via Plugins \u2192 Add New \u2192 Upload.<\/li>\n<li>Activate the plugin (WooCommerce must be active).<\/li>\n<li>Go to <strong>SB Softwares \u2192 EXP Fiscal Check-Br<\/strong> (or <strong>SB EXP Fiscal Check<\/strong>, without the SB Softwares Hub).<\/li>\n<li>Without SanBar EXPress NF-e &amp; PDV, choose your regime (MEI or Simples Nacional) in \u2699 Settings.<\/li>\n<\/ol>\n\n<!--section=faq-->\n<dl>\n<dt id=\"which%20tax%20regimes%20are%20supported%3F\"><h3>Which tax regimes are supported?<\/h3><\/dt>\n<dd><p>MEI (CRT 4) and Simples Nacional (CRT 1). The Normal regime is not checked in this version.<\/p><\/dd>\n<dt id=\"does%20it%20change%20my%20products%20by%20itself%3F\"><h3>Does it change my products by itself?<\/h3><\/dt>\n<dd><p>Only the CSOSN\/CFOP of products in automatic mode, following your regime. Everything else changes only when you click a fix and save.<\/p><\/dd>\n<dt id=\"where%20do%20the%20ncm%20and%20cest%20tables%20come%20from%3F\"><h3>Where do the NCM and CEST tables come from?<\/h3><\/dt>\n<dd><ul>\n<li><strong>NCM<\/strong> \u2014 the current official table, downloaded from Portal \u00danico Siscomex (Receita Federal) and refreshed once a month.<\/li>\n<li><strong>CEST<\/strong> \u2014 built from the official text of ICMS Agreement 142\/2018 (CONFAZ) and shipped with the plugin.<\/li>\n<\/ul><\/dd>\n<dt id=\"does%20the%20plugin%20modify%20my%20data%20on%20uninstall%3F\"><h3>Does the plugin modify my data on uninstall?<\/h3><\/dt>\n<dd><p>Only its own data: its settings and its own <code>_sbfcbr_*<\/code> product meta (per-regime profiles and check status). The standard fiscal fields of your products (NCM, CEST, CSOSN, CFOP\u2026) are never touched on uninstall. The digital certificate (Plus edition) is not removed either: see the next question.<\/p><\/dd>\n<dt id=\"where%20is%20my%20digital%20certificate%20kept%2C%20and%20what%20happens%20to%20it%20when%20i%20delete%20a%20plugin%3F\"><h3>Where is my digital certificate kept, and what happens to it when I delete a plugin?<\/h3><\/dt>\n<dd><p><em>Plus edition.<\/em> There is one A1 certificate per site, kept in the site vault (the option <code>sanbar_certificado<\/code>) and shared with SanBar EXPress NF-e &amp; PDV. Both plugins read and write the same one:<\/p>\n\n<ul>\n<li>If the vault is empty, you can send the certificate here (\u2699 Settings \u2192 GTIN search) or in NF-e &amp; PDV. If it already has a certificate, this plugin shows it and does <strong>not<\/strong> offer the upload. To replace it, remove the current one first (\"Remover certificado\") and send the new one.<\/li>\n<li>It is stored in the database, encrypted: the .pfx file and its password are sealed together with libsodium (authenticated encryption), using a key derived from your site's security keys (the salts in <code>wp-config.php<\/code>). Anything altered in the database is refused. They are never shown, logged or sent anywhere except to SEFAZ in the GTIN lookup. If you change the site's security keys the certificate can no longer be opened: the plugin says so and you send it again.<\/li>\n<li>It works with NF-e &amp; PDV active, deactivated or not installed.<\/li>\n<li><strong>Deleting this plugin does not remove the certificate<\/strong>: it stays in the vault, because NF-e &amp; PDV may still use it and whether to remove it is your choice. To remove it, click \"Remover certificado\" <em>before<\/em> deleting the plugin, or remove the option <code>sanbar_certificado<\/code> (and <code>nfbr_certificado<\/code> or <code>sbfcbr_cert<\/code>, if they still exist) from the <code>{prefix}options<\/code> table of the database.<\/li>\n<li>Fiscal documents are not involved: this plugin does not store invoices. NF-e &amp; PDV keeps those on purpose, as explained in its own readme (Ajuste SINIEF 07\/05, cl\u00e1usula d\u00e9cima; C\u00f3digo Tribut\u00e1rio Nacional, art. 195, par\u00e1grafo \u00fanico).<\/li>\n<\/ul><\/dd>\n<dt id=\"my%20certificate%20is%20old%20or%20the%20upload%20fails.%20what%20can%20i%20do%3F\"><h3>My certificate is old or the upload fails. What can I do?<\/h3><\/dt>\n<dd><p><em>Plus edition.<\/em> Some older A1 certificates (.pfx) use RC2\/3DES encryption that current servers (OpenSSL 3) cannot read. This plugin then tries to convert the file by itself (see the next question). If the server does not allow it, convert it on your computer and upload the new file. There is also a \"?\" help next to the upload with these steps:<\/p>\n\n<ul>\n<li><code>openssl pkcs12 -legacy -in old.pfx -nodes -out temp.pem<\/code><\/li>\n<li><code>openssl pkcs12 -export -in temp.pem -out new.pfx<\/code><\/li>\n<li><code>rm temp.pem<\/code><\/li>\n<\/ul>\n\n<p>Run them in this order. The first asks for the old file's password; the second asks you to choose a password for the new file (type it twice; it can be the same). <code>temp.pem<\/code> holds your private key without protection, so delete it right away (on the Windows Command Prompt use <code>del temp.pem<\/code>). If you get \"unknown option -legacy\", your OpenSSL is old: remove <code>-legacy<\/code>. On Windows, Git for Windows includes OpenSSL in Git Bash. You can also ask your certificate authority to re-issue or export the A1 in the new format. Keep the original file, and never send the certificate or its password by e-mail or chat.<\/p><\/dd>\n<dt id=\"does%20the%20plugin%20run%20commands%20on%20my%20server%3F\"><h3>Does the plugin run commands on my server?<\/h3><\/dt>\n<dd><p><em>Plus edition.<\/em> Only one, and only in the case above: when you upload an old-format certificate, this plugin runs the server's <code>openssl<\/code> program (PHP <code>exec<\/code>) to re-encode the file you just sent.<\/p>\n\n<ul>\n<li>The program is looked up in fixed, standard paths; nothing from the request goes into the command, and every argument goes through <code>escapeshellarg<\/code>.<\/li>\n<li>The password is passed through a file, never on the command line.<\/li>\n<li>The four temporary files are created with permission 0600 (owner only) before any content is written, and are always deleted afterwards. One of them holds the private key unprotected, which is why this matters.<\/li>\n<li>It never runs at any other time. If <code>exec<\/code> is disabled or <code>openssl<\/code> is missing, nothing runs and you are told how to convert the file yourself.<\/li>\n<\/ul><\/dd>\n<dt id=\"which%20libraries%20are%20bundled%3F\"><h3>Which libraries are bundled?<\/h3><\/dt>\n<dd><p>The Plus edition bundles NFePHP <code>sped-common<\/code> 5.1.17 and <code>sped-gtin<\/code> 1.1.2 (LGPL-3.0-or-later \/ GPL-3.0-or-later \/ MIT) and <code>psr\/log<\/code> 3.0.2 (MIT), in <code>plus\/lib\/<\/code>, only to query the GTIN registry and read the certificate. If NF-e &amp; PDV is active, its own copy of the same libraries is used instead.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>1.0<\/h4>\n\n<ul>\n<li>Initial release.<\/li>\n<\/ul>","raw_excerpt":"Fiscal data check for WooCommerce products (MEI and Simples Nacional, Brazil) \u2014 plain-language diagnosis, guided fixes and color alerts.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/381552","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=381552"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/sanbazar"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=381552"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=381552"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=381552"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=381552"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=381552"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=381552"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}