A reCAPTCHA v2 install stopped a WooCommerce shop’s registration spam and about 15% of its real conversions with it. Turnstile, magic links and a honeypot field did the job without locking customers out.
We shipped a Quick Reorder button for a WooCommerce client and the conversion rate never moved. The problem was the metric, not the button. TARS breaks feature success into target audience, adoption, retention and satisfaction.
WooCommerce 10.4 makes the Interactivity API mini cart the default, lazy-loads two REST namespaces, and takes HPOS caching out of experimental. Here is what to test before you update.
WooCommerce 10.4.3 patches guest order data exposure in the Store API, throttles HPOS sync-on-read during heavy jobs, and restores the cart undo link that 10.4.2 broke.
A client’s REST API times kept swinging between 200ms and 400ms on the same call, and the queries were fine. The cost was registering the wc-analytics namespace on every request, which WooCommerce 10.4 now skips.
A client’s customer opened their account dashboard and saw a stranger’s guest order. It was not the cache. GHSL-2025-129 affects WooCommerce 8.1 through 10.4.2, and Automattic backported the fix across 23 releases.
A client moved to a high-end unmanaged VPS and ended up with a six-second WooCommerce store. The specs were never the problem, the server stack was. Notes on what a WordPress hosting environment handles for you that a generic one leaves on your desk.
A VAT fix hardcoded into a core file vanished on the next WooCommerce update. Thin docs are how that happens. Includes the hook-based way to add a cart fee, and what the December office hours cover.
A WooCommerce shop doing 500 orders a day broke at 2 AM under a stack of decoration plugins and a 14-second LCP. Which holiday plugins are worth keeping, and how to limit where their scripts load.
A client’s store slowed to a crawl right after someone clicked update to WooCommerce 10.4. Here is what the release actually changes in the REST API, the Store API and the block editor, and which custom code you should review first.