Nearly every CubeCart vulnerability fixed this year requires an existing admin session. Two-factor authentication is the control that breaks that chain, and it takes five minutes per account.
Stop pasting tracking snippets into skin templates where upgrades destroy them. One container, managed from a web interface, with purchase tracking and Consent Mode v2 built in.
CubeCart now includes a genuine 3D bin packer that works out which boxes an order actually needs, rather than quoting shipping on total weight alone.
Tax rounding, coupon tax and gift certificate handling were rewritten across four releases. Some of your figures have legitimately changed, and you need to know which.
WP-Cron is not a cron job. It runs on visitor page requests, so a page cache and a CDN can silently stop your scheduled posts, backups and WooCommerce renewals. How to fix it properly, in the right order.
An XML sitemap hands search engines a list of your pages. It takes minutes to set up, it is easy to break silently, and on a shop with a deep catalogue it is the difference between pages being found and ignored.
Flat rates subsidise heavy orders and overcharge light ones. All In One Shipping calculates from weight, subtotal and item count, with postcode zones capable enough to handle the Scottish Highlands properly.
Around 70 percent of baskets are abandoned. CubeCart can email those shoppers, but the feature is off by default and, before 6.7.6, could email customers who had already paid.
CubeCart 6.6.0 shipped around ninety changes in a single release: a REST API, two factor authentication, abandoned cart recovery, 3D box packing, a rewritten tax engine and a full security audit. Everything that changed, and why you should not run 6.6.0 itself.
We first wrote about the end of passwords in 2013 and the candidates all failed. Passkeys are different, because the browser and operating system makers built it in themselves. How they work, and where they still fall short.