CubeCart 6.7.0 added a full sales reporting suite, asynchronous email with open tracking, and an audit log. It also removed the in-app database backup tool and the cookie consent banner.
Six relevance improvements, a graceful fallback when the cluster is down, and a quiet failure mode where the indexer reports success but indexes almost nothing.
Most of the 404s in Search Console want leaving alone. Which ones actually matter, what to do with discontinued products, and why a soft 404 is the one genuinely worth fixing.
CubeCart now hashes passwords with Argon2id and migrates existing accounts transparently on login. Why memory-hard hashing matters, and the hosting requirement that could mean you are not getting it.
CubeCart 6.6.3 upgraded password hashing to Argon2id with transparent migration, overhauled the admin dashboard and made six improvements to Elasticsearch relevance.
You can now see which extensions are installed, which are disabled, which hooks they own and which scheduled tasks they run. Plus a twice-yearly routine worth adopting.
Hooks are why you can customise CubeCart and still upgrade. The hook editor, extension ownership in the registry, and a Smarty security policy that changed four times.
CubeCart’s REST API covers nine resources with Bearer token authentication and per-key rate limiting. What you can build with it, how authentication works, and the one version you must not run it on.
If a CubeCart feature seems to fire erratically or not at all, this is almost certainly why. Setting up a real cron entry is the single most useful thing most stores are missing.
Categories and products can now be restricted to specific customer groups, with bulk group pricing tools. Trade and retail from one store, without a plugin.