Black Friday: 79% off every plugin Shop the sale →

Release Notes

Updated November 5, 2026 2 min read

1.0.2#

Security

  • Repeated wrong attempts against one order number no longer lock the real customer out of that order: failed lookups now count per visitor address only, so nobody can block a customer from tracking their own order.
  • Carrier lines on WooCommerce → Order Tracking → Carrier tracking links and the generic link template are checked on save: only full http:// or https:// web addresses are accepted, and rejected lines are listed in a notice instead of silently producing no link.

Changed

  • Uninstalling the plugin now also removes its license activation state and update checks from the site (other Technoleet plugins are unaffected).
  • Settings screen shows "Settings saved" and validation notices after saving.

Fixed

  • The tracking form no longer shows "Your session has expired" to customers on sites with page caching (WP Rocket, LiteSpeed, host caches): anonymous lookups are protected by the rate limiter and the order number + billing email match, and the form token is only required for logged-in users.
  • Phone numbers that contain non-ASCII characters (for example a non-breaking space or a full-width "+") are masked correctly on the tracking result instead of showing garbled characters.

Releases are distributed through technoleet.dev and delivered to licensed sites by the built-in updater.

1.0.0 – 29 October 2026#

First commercial release.

New

  • Licensing and updates through technoleet.dev: a WooCommerce → Order Tracking License screen to activate and deactivate the license key, daily background re-checks with a 14-day offline grace period, and plugin updates served from the store while the license is valid.
  • Settings screen under WooCommerce → Order Tracking: a customer-facing label, remark and optional ETA for every registered order status; a choice of which fields the tracking result shows; carrier tracking URL templates plus a generic fallback template.
  • Tracking number and carrier fields on the order edit screen (HPOS-compatible order meta), rendered on the tracking result as a link to the carrier’s tracking page.
  • leet_ot_tracking_info filter for tracking data from other sources.
  • Default remarks for every WooCommerce core status, including pending, failed and refunded.
  • Uninstall routine removing the settings option and failed-lookup counters.
  • Translations load from the languages/ folder, with a shipped .pot template.

Improved

  • Rate limiting is keyed on the connection address (forwarded headers only when LEET_OT_TRUST_PROXY is set) and additionally per order number, so forged headers cannot bypass it.
  • Stylesheet uses CSS custom properties with no fixed heights or font sizes, so it follows the active theme.
  • Slug, main file and text domain are leet-order-tracking, so the plugin cannot be confused with or overwritten by other order tracking plugins.
  • Update URI header so WordPress never offers updates for this plugin from another source.
Was this article helpful?