The development of this version cost 1,050 euros. The accumulated cost for this year is 10,550 euros. The accumulated cost since the first version is 209,280 euros, but the cost for you is only the license of 79€.
New version 30.4.0 of the Redsys plugin for WooCommerce from WooCommerce.com.
30.4.0
New:
- New subscriptions section in the Advanced Settings of Redsys to configure credentials and behavior of subscription renewal payments.
Security:
- [High] Added the missing cryptographic signature verification in successful_request() for 9 payment gateways: Apple Pay, Bizum Checkout, Bizum Redirect, Google Pay Checkout, Google Pay Redirect, Direct Debit, MasterPass, PayGold, and Bank Transfer. Without this check, payment notifications could be forged to complete orders without a real payment.
Fixed:
- Renewal orders of SUMO Subscriptions were failing because sumo_save_subscription_payment_info() was called with 'payment_method' => 'insite' instead of 'redsys' in the redirect gateway callback. This caused SUMO to set the incorrect payment method in renewal orders, triggering the wrong gateway filter and using incorrect credentials.
- YITH WooCommerce Subscriptions were being prematurely canceled on failed renewals for the Redsys Redirect, InSite, Apple Pay Checkout, and Google Pay Checkout gateways. The 'no token / expired card' path in doing_scheduled_subscription_payment() (class-wc-gateway-redsys.php and class-wc-gateway-insite-redsys.php) called ywsbs_register_failed_payment() and then returned false, causing the YITH wrapper renew_yith_subscription() to call it again. The double increment of failed_attempts canceled subscriptions after 1–2 actual failures instead of the 3 configured retries. Apple Pay and Google Pay Checkout are also fixed as they delegate to the main Redsys manager.
