| 1 |
=== Welcart e-Commerce === |
| 2 |
Contributors: uscnanbu, welcart |
| 3 |
Tags: Welcart, e-Commerce, shopping, cart, store |
| 4 |
Requires at least: 5.6 |
| 5 |
Tested up to: 7.0 |
| 6 |
Requires PHP: 7.4 |
| 7 |
Stable tag: 2.11.35 |
| 8 |
License: GPLv2 or later |
| 9 |
License URI: https://www.gnu.org/licenses/gpl-2.0.html |
| 10 |
|
| 11 |
Welcart is a free WordPress e-commerce plugin with the top market share in Japan. |
| 12 |
|
| 13 |
== Description == |
| 14 |
|
| 15 |
Welcart is a free WordPress e-commerce plugin with the top market share in Japan. It offers extensive features and flexibility to help you build your own online store with ease. Compatible with PHP 7.4 to 8.3. |
| 16 |
|
| 17 |
= SHOPPING CART SYSTEM = |
| 18 |
|
| 19 |
Sell physical products with no limits on the number of items or categories. Manage inventory with SKU codes and configure flexible pricing and shipping options. Additional extension plugins are available to support digital content sales and subscriptions. Over 16 payment services can be added through the official Welcart website. |
| 20 |
|
| 21 |
[Welcart Payment services (Japanese)](https://www.welcart.com/wc-settlement/) |
| 22 |
|
| 23 |
= DESIGN = |
| 24 |
|
| 25 |
A free responsive theme (Welcart Basic) is available, along with premium themes. You can customize the design and layout however you like. |
| 26 |
|
| 27 |
[Welcart Theme downloads (Japanese)](https://www.welcart.com/archives/category/item/itemgenre/template/) |
| 28 |
|
| 29 |
= MANAGING SYSTEM = |
| 30 |
|
| 31 |
Order data is automatically saved and updated in the database. The order list page offers powerful filtering by customer information, date, product type, and more. From the order editing page, you can modify order details, send confirmation emails, download receipt PDFs, and more. |
| 32 |
|
| 33 |
= MEMBERSHIP SYSTEM = |
| 34 |
|
| 35 |
Welcart includes a built-in membership system with no additional plugins required. The member list page supports searching by customer information and purchase history. A point system is also available for members. |
| 36 |
|
| 37 |
== Installation == |
| 38 |
|
| 39 |
= AUTOMATIC INSTALLATION = |
| 40 |
|
| 41 |
In your WordPress admin panel, go to Plugins > Add New, search for "Welcart", and click "Install Now". |
| 42 |
|
| 43 |
= MANUAL INSTALLATION = |
| 44 |
|
| 45 |
Download the plugin ZIP file. Then go to Plugins > Add New > Upload Plugin in your WordPress admin panel, and upload the ZIP file to install. |
| 46 |
|
| 47 |
= ATTENTION = |
| 48 |
|
| 49 |
During activation, Welcart writes data to tables such as postmeta, options, and terms. If you are installing on an existing site, backing up your data beforehand is strongly recommended. Welcart is not liable for any damages resulting from the use of this plugin. All operations are performed at the user's own risk. |
| 50 |
|
| 51 |
= RECOMMENDED ENVIRONMENT = |
| 52 |
|
| 53 |
- WordPress 5.6 or greater |
| 54 |
- PHP 7.4 or greater |
| 55 |
- MySQL 5.5 or greater |
| 56 |
- Own domain with SSL (shared SSL is not recommended) |
| 57 |
|
| 58 |
[Server Requirements (Japanese)](https://www.welcart.com/wc-condition/) |
| 59 |
|
| 60 |
== Frequently Asked Questions == |
| 61 |
|
| 62 |
Please see [Welcart Forum (Japanese)](https://www.welcart.com/community/forums). |
| 63 |
|
| 64 |
== Screenshots == |
| 65 |
|
| 66 |
1. Item List page on the admin screen |
| 67 |
2. Editing orders page on the admin screen |
| 68 |
3. Top page (Free official theme 'Welcart Basic') |
| 69 |
|
| 70 |
== Changelog == |
| 71 |
|
| 72 |
8 Sep 2026 |
| 73 |
= V2.11.35 = |
| 74 |
----------- |
| 75 |
* This is a security-only release for the V2.11 series. V2.12.2 already contains these fixes, so there is no need to update if you are running V2.12.x. |
| 76 |
* Security enhancement (PHP Object Injection). Replaced maybe_unserialize() with an object-free equivalent throughout the plugin, and sanitized serialized values sent from the front end before they are stored. Extensions that call maybe_unserialize() on order or member data need the same change. This also covers paths that were not included in the original report. Thanks to daroo for the report. |
| 77 |
* Security enhancement (Cross-Site Scripting). Escaped custom order field names and values on the order data editing page. Thanks to Afifudin Maarif for the report. |
| 78 |
* Security enhancement (Cross-Site Scripting). Sanitized the product name, SKU and option fields when they are saved. |
| 79 |
* Security enhancement (Session Fixation). The session ID is now regenerated on every member login path. The complete fix requires the removal of the uscesid parameter, which is available in V2.12.1 and later. Thanks to bRpsd for the report. |
| 80 |
|
| 81 |
7 Aug 2026 |
| 82 |
= V2.11.34 = |
| 83 |
----------- |
| 84 |
* Security enhancement (Cross-Site Scripting). Escaped the product name at every remaining output site, including ones not covered by the original report. Thanks to Yaswanth Reddy Sunkara for the report. |
| 85 |
* Security enhancement (Cross-Site Scripting). Escaped customer-supplied item option names and values in HTML order emails. |
| 86 |
|
| 87 |
5 Aug 2026 |
| 88 |
= V2.11.33 = |
| 89 |
----------- |
| 90 |
* Security enhancement (Cross-Site Scripting). Follow-up to V2.11.32. Thanks to Yaswanth Reddy Sunkara for the report. |
| 91 |
* Security enhancement (Payment Notification Spoofing). Thanks to Pedro Pinho for the report. |
| 92 |
|
| 93 |
30 Jul 2026 |
| 94 |
= V2.11.32 = |
| 95 |
----------- |
| 96 |
* Security enhancement (Cross-Site Scripting). Thanks to Yaswanth Reddy Sunkara for the report. |
| 97 |
* Security enhancement (Cross-Site Scripting). Thanks to K. Sorrachat for the report. |
| 98 |
* Security enhancement (SQL Injection). Thanks to Yaswanth Reddy Sunkara for the report. |
| 99 |
* Added an action hook that fires when a member login attempt fails. |
| 100 |
* Fixed the width of the quantity field on the order data editing page. |
| 101 |
* Fixed PHP errors. |
| 102 |
|
| 103 |
2 Jul 2026 |
| 104 |
= V2.11.31 = |
| 105 |
----------- |
| 106 |
* [e-SCOTT / WelcartPay] Fixed a bug that caused an error with the product name in online payment collection transactions. |
| 107 |
* Fixed a bug in the filtering of the "Order List CSV" and "Order Details List CSV" exported from the legacy order list. |
| 108 |
* Fixed translation file issues. |
| 109 |
* Fixed PHP errors. |
| 110 |
|
| 111 |
30 Jun 2026 |
| 112 |
= V2.11.30 = |
| 113 |
----------- |
| 114 |
* [Zeus] Updated the mobile phone number validation for Buy Now Pay Later payment. |
| 115 |
* [Paidy] Fixed parameters. |
| 116 |
* Updated the Japan Post tracking URL. |
| 117 |
* Changed the order list and member list downloads in the admin screen to allow selective export. |
| 118 |
* Fixed translation file issues. |
| 119 |
* Fixed PHP errors. |
| 120 |
|
| 121 |
For older versions, please see the [Changelog Archive (Japanese)](https://www.welcart.com/about/changelog/). |
| 122 |
|
