PayHelm: Export, Reports & Analytics for WooCommerce

Instantly add advanced eCommerce analytics and reporting to your website with absolutely no coding or custom development needed.

Install, activate and leave it to do the rest. We will automatically create a PayHelm account using your store configuration. Full store analytics require WooCommerce. Without it, PayHelm site tools remain available in WordPress admin.

1.1.17 - 2026-09-16

• Look up a page by slug/path on the PayHelm pages endpoint, so a page URL resolves to its id

1.1.16 - 2026-09-14

• HMAC-only reconnect iframe payload; deliver private_key/api_token via parent postMessage (PayHelm origin check)

1.1.15 - 2026-09-14

• Reconnect flow for private_key mismatch after reinstall

1.1.14 - 2026-09-08

• WordPress-only (no WooCommerce): load the link-site iframe so PayHelm can claim the store without WooCommerce OAuth

1.1.13 - 2026-09-08

• WordPress-only (no WooCommerce): do not force the onboard iframe that auto-starts wc-auth; pass store_less in the iframe payload

1.1.12 - 2026-09-08

• Fix install/auth redirect loop: stop esc_url() from rewriting the iframe store_url host (broke HMAC verify → 400 → wc-auth loop)
• Defer PayHelm register_store until admin load when WooCommerce is available (activation no longer registers store_less without keys)
• Re-register keyless / store_less installs once WooCommerce is available (gated on missing key_id, not /authorize; rotation only via needs_keys)
• Detect WooCommerce with WC() and plugins_loaded priority 20

1.1.11 - 2026-09-03

• QIT: Tested up to WordPress 7.1 and WooCommerce 11.1
• Align the text domain with the wordpress.org slug (payhelm-for-woocommerce)
• Stop calling load_plugin_textdomain(); WordPress.org loads translations automatically

1.1.10 - 2026-08-31

• Woo Excellence Verified / QIT: declare HPOS compatibility; refresh WC tested up to 10.9 and plugin headers
• Remove manual Woo: readme header (injected on Woo deploy); normalize Requires PHP to 7.4
• Harden QIT security/plugin-check: DirectDatabaseQuery/PreparedSQL ignores for Woo REST key table, drop uninstall error_log, fix pixel URL string interpolation, enqueue pixel in footer
• Add offline QIT Playwright E2E smoke package under tests/e2e (storefront + admin menu)

1.1.9 - 2026-08-07

• Replace the PayHelm admin menu icon with the current PayHelm logo (monochrome inline SVG, sized and color-matched to the other admin menu icons)

1.1.8 - 2026-08-05

• Run PayHelm site tools (AI page/post/media/theme/CSS editing, pixel) on a WordPress site without WooCommerce installed
• Tell PayHelm when the site is store-less (store_less in the /secure registration) so it does not ask for WooCommerce REST keys the site can never provision, which previously re-registered the plugin on every admin page load

1.1.7 - 2026-08-05

• Expose front-page resolution in the /settings endpoint (show_on_front, page_on_front, page_for_posts, shop_page_id, resolved front_page) so PayHelm's AI can find and safely edit the homepage without a manual page-ID lookup

1.1.6 - 2026-08-04

• Woo QIT marketplace compliance: add missing i18n text domains, prefix bootstrap functions, hoist the missing-WooCommerce notice out of a nested function
• Replace cURL in uninstall with the WordPress HTTP API (wp_remote_request) and wrap uninstall logic to avoid global scope pollution
• Read the WCPay account option via get_option() instead of a direct database query
• Align the plugin header name with readme.txt ("... for WooCommerce")

1.1.5 - 2026-08-04

• Allow AI-authored blocks in page/post/template content (e.g. product carousels) without the CSS leaking as visible text
• Fix published Additional CSS encoding ">" to ">" (child-combinator selectors now work)
• Add custom CSS reset with one-level undo
• Add basic SEO: per-entity title tag + meta description (no SEO plugin needed)
• Expand the AI site-editing endpoints

1.1.4 - 2026-07-23

• Fix: reconnect now rotates the WooCommerce REST key and re-registers when PayHelm has no consumer key/secret on record (needs_keys), so product operations work after delete-reinstall
• Allow clipboard access in the embedded PayHelm app iframe (wp-admin)

1.1.3 - 2026-07-22

• Security: send uninstall credentials in a signed request body instead of the URL query string (prevents secret leakage via server/proxy logs)

1.1.2 - 2026-07-22

• Add /media endpoint for AI image upload to the WordPress media library (SSRF-guarded, content-type validated, 10MB limit)

1.1.1 - 2026-07-20

• Fix admin iframe login failing to authenticate ("No app token detected") by signing the login payload with a timestamped HMAC

1.1.0 - 2026-06-29

• Auto-provision REST API keys on activation — no second OAuth step
• WordPress site proxy API for AI (posts, pages, settings, pixel, templates)
• Signed PayHelm registration and security hardening

1.0.10 - 2026-05-20

• Declare compatibility with WordPress 7.0

1.0.9 - 2025-02-26

• Version bump and deployment prep

1.0.8 - 2025-04-21

• Update

1.0.7 - 2023-09-19

• Bugfixes

1.0.6 - 2023-05-01

• Bugfixes

1.0.5 - 2023-05-01

• Bugfixes

1.0.4 - 2023-05-01

• Bugfixes

1.0.3 - 2023-05-01

• Bugfixes

1.0.2 - 2023-05-01

• Update

1.0.1 - 2023-05-01

• Update

1.0.0 - 2023-01-27

• First Release