Security: Fixed critical vulnerability where payload was decoded before HMAC signature verification. Now authenticates requests before processing data.
Security: Removed logging of decoded untrusted data to prevent potential log injection attacks.
Security: Implemented sensitive data redaction in logs. OAuth tokens, access tokens, and customer PII (account numbers, VPA, UPI transaction IDs) are now masked.
Security: API response bodies now logged only on failures (non-200 status codes) to minimize sensitive data exposure.
Bug Fix: Resolved issue where empty customer details fields (email, phone, name) were sent as empty arrays causing payment request failures.
Bug Fix: Optional fields (customerDetails, prefillUserLoginDetails) are now only included in API requests when valid data exists.
Improvement: Enhanced error handling with proper JSON validation after signature verification.
Version 3.0.4
Added enhanced status check polling to resolve instagram browser issue.
Version 3.0.3
Minor bug fixes
Version 3.0.2
Updated readme with latest integration instructions.
Version 3.0.1
Added support for V2 of the Payment Gateway APIs from PhonePe, introducing multiple new features such as payment retries and token-based security.
Version 2.0.11
Ensured seamless rendering of PhonePe Payment Solutions within WooCommerce’s new wc block-based checkout, resolving issues that rendering PhonePe PG in payment options. Enhance your customers’ checkout experience with this compatibility update.
Version 2.0.10
Added FRA (Fraud Risk Assessment) granular error messages to order notes for WooCommerce merchants, enhancing transparency and facilitating smoother transaction management.
Version 2.0.9
Merchants can customize Payment page open mode either Open on top of the current page or Redirect to a full-length payment page
BugFix: Check status button
Version 2.0.8
BugFix: IFrame on WooCommerce Checkout was aligned to bottom left
Order notes by the payment gateway are prefixed with PhonePe Payment solution
Version 2.0.7
Previous versions added in plugin
Version 2.0.6
Added CTA links to phonepe business dashboard
Hosted all image assets to phonepe CDN reducing filesize of plugin
Added step 4 in Refund education
Version 2.0.5
Merchant support email id updated
UAT environment support added
Version 2.0.4
Refund education prompt added
Improvisation in redirection after payment
Version 2.0.3
Merchant troubleshooting journey features added
Added transaction id in order notes
BugFix: handling for error codes fixed
Order once marked completed will not be modified by plugin in any case
