Changelog Pro

== Changelog ==

= 1.58.4 = 16.03.2026

Tweak: Fixed Google Tag Gateway proxy causing Apache AH00124 internal redirect loops on some hosting configurations — proxy now follows Google FPS redirects server-side and uses absolute URLs in Location headers to prevent Apache from misinterpreting relative paths as internal redirects
Tweak: Improved Facebook CAPI purchase events to always include client_ip_address, even when advanced matching is disabled
Tweak: Switched client IP detection from IPv6-only endpoint testing to dual-stack only, eliminating ERR_NAME_NOT_RESOLVED console errors for IPv4-only users while preserving IPv6 detection via browser happy eyeballs (RFC 8305)
Tweak: Changed IP service detection to race all configured services concurrently instead of only the first three, improving speed and reliability
Fix: Fixed S2S purchase events sending server-side user agent and IP address (e.g. "WordPress/6.x" UA and payment gateway IP) instead of the real customer's browser data for orders placed via express checkout (Apple Pay, Google Pay, Stripe Link) — added Store API checkout hook and server-side context detection with WooCommerce order data fallback for both user agent and IP
Fix: Fixed SSP daily sync flooding on stores where Action Scheduler actions are externally deleted — recurring cron now always schedules for the next future 3:15 AM, preventing immediate re-execution on every heartbeat
Fix: Fixed Reddit CAPI session identifiers never being captured — added missing set_identifiers_on_session() call
Fix: Fixed PHP 8.5 deprecation warnings in the standalone Google Tag Gateway proxy breaking GA4 tracking — replaced deprecated $http_response_header with http_get_last_response_headers() (PHP 8.4+) with backward-compatible fallback, and conditionally skipped no-op curl_close() on PHP 8.0+

= 1.58.3 = 10.03.2026

Fix: Fixed SSP config sync backlog purge not clearing all stale Action Scheduler actions — replaced per-action cancel with nuclear unschedule-all and re-register approach

= 1.58.2 = 10.03.2026

Tweak: Improved WP Rocket's Delay JavaScript breaking purchase tracking when PMW lazy loading is active — now excludes all PMW scripts from WP Rocket optimization instead of only the lazy loader
Tweak: Added SSP sync source tracking — each sync now logs where it was initiated (settings change, daily cron, manual, SSP callback) for easier debugging
Fix: Fixed SSP config sync flooding caused by Action Scheduler backlog — added deduplication, 60-second cooldown, and self-healing purge of stale queued actions (both legacy daily_sync and settings_changed hooks)

= 1.58.1 = 10.03.2026

New: Added support for WooCommerce's built-in Cost of Goods Sold feature for profit margin calculations (available since WooCommerce 9.5)
Tweak: Improved COGS retrieval to only check active sources, preventing stale data from deactivated plugins
Tweak: Added tiered activation retry for SSP — retries every 10 min for 2 hours, then every 2 hours for a week, then daily until active
Tweak: Removed unused User_Agent class (dead code cleanup)
Tweak: Added client-side blocklist for known proxy origins (Google Translate, Google Cache) to silently drop SSP events that would be rejected due to origin mismatch
Fix: Fixed S2S purchase events sending server-side user agent and IP instead of the real customer's browser data when triggered from webhook, cron, or IPN contexts
Fix: Fixed Reddit CAPI overwriting the customer's real IP address with the webhook request IP in purchase events

= 1.58.0 = 02.03.2026

New: Added multi-domain SSP support via pmw_ssp_additional_domains filter for WordPress installs serving multiple domains without multisite
New: Added unified IP exclusion filter (pmw_ip_exclusion_list) to block specific IPs and CIDR ranges from all tracking — browser pixels, browser-initiated S2S, server-side purchase events, and SSP proxy
New: Declared compatibility with WooCommerce Product Instance Caching (experimental feature in WooCommerce 10.5+)
Tweak: Added support for suppressed Google Ads and GA4 tags in the Google Tag Gateway Proxy
Tweak: Improved S2S payload accuracy for Facebook, TikTok, Pinterest, and Reddit adapters
New: Added SSP sync token domain validation to prevent token reuse across different shops
New: Added SSP disconnect notification to clean up server-side callback data
Fix: Fixed SSP daily sync not running while DNS routing or config status were still pending, preventing SSP from becoming active after initial setup
Tweak: Removed the "Skip server-side events with no destination platforms" setting — empty events are now always skipped
Fix: Fixed Pinterest search event using wrong field name for Conversions API

= 1.57.0 = 24.02.2026

New: Added SSP Purchase Proxy to offload purchase conversion events (S2S) through the SweetCode Cloud proxy
New: Added "Always Send Server-Side Events" setting to keep sending S2S events even when browser-side pixels are blocked
New: Implemented account created event tracking
New: Added Abilities API integration
Tweak: Implement cross-tab session synchronization for improved data consistency
Tweak: Added option to skip empty server-side events to reduce unnecessary S2S traffic
Tweak: Added modern styling and impact indicators to opportunity cards
Tweak: Bumped up WC version compatibility to 10.5
Tweak: Enhanced GTG Proxy: Improved config resilience, reduced unnecessary health check requests, and added periodic config refresh
Tweak: Implemented REST API for saving settings via AJAX; refactored admin tabs and enhance section rendering
Tweak: Update styles for impact badges and add Google Automated Discounts and Customer Reviews opportunities
Tweak: Improved consent revocation handling: S2S pixels now respect real-time consent status changes without requiring a page reload
Fix: Resolved an issue where page_view events were sent server-to-server even when the "Track PageView events server-to-server" setting was disabled.
Fix: Fixed duplicate page_view S2S events being sent when consent was granted via the Consent API

= 1.56.0 = 02.02.2026

New: CrazyEgg pixel
Tweak: Google Tag Gateway Proxy: Improved handling of config file

= 1.55.1 = 29.01.2026

Fix: Fixed the bug which did not save the dismissed button click in the database for the trial notification

= 1.55.0 = 26.01.2026

Tweak: Updated the license expiration warning message
Tweak: Activated an opportunity notification for the Google Tag Gateway Proxy feature
Tweak: Updated pixel registry adapter capabilities for consistency with the decentralized architecture
Tweak: Added filter to control output of cart item data inline script for theme compatibility
Tweak: Refactored the internal event handling system for better maintainability
Tweak: Large refactor which renamed wpm to pmw
Tweak: Enhanced event handling for product variations and improve conditional triggers
Tweak: Enhanced active opportunities notification with impact level breakdown and improved styling
Tweak: Revamped rating notice UI and logic for better user experience
Tweak: Enhanced opportunities header with statistics and dismissal tracking
Tweak: Added backup section styles and improve table row highlighting
Tweak: Updated documentation links to use the new path structure
Tweak: Added Cookie Confirm CMP integration
Tweak: Added support for Beautiful and Responsive Cookie Consent plugin
Tweak: Updated script behavior for tracking on specific pages when Flying Press is active
Tweak: Enhanced race condition protection when renaming temporary config file in GTG_Proxy
Tweak: Improved proxy URL handling based on GTG handler type in Pixel Manager
Tweak: Updated GTG handler detection logic to rely on session cache and remove unnecessary server-side checks
Tweak: Updated GTG proxy config cache handling on activation and improve config file management
Fix: Add back view_cart event listener
Fix: Prevent division by zero for free orders in order value calculation

= 1.54.1 = 15.12.2025

Tweak: Updated Reddit tracking_type values to UPPER_SNAKE_CASE for CAPI v3 compliance
Tweak: Added a missing check for Contentsquare

= 1.54.0 = 15.12.2025

New: Added the Adroll pixel
New: Added the Outbrain pixel
New: Added the Contentsquare pixel
Tweak: Added TikTok Events API opportunity class with availability and card data methods
Tweak: Added scroll event to interaction triggers for script loading
Tweak: Enhanced LinkedIn event adaptation: added conversion types and values for various events
Tweak: Admin UX improvements in the settings page.
Tweak: Refactored opportunity card output: sort by impact level and streamline dismissed opportunities
Tweak: Enhanced client IP address handling
Tweak: Added external object cache detection and enhanced debug info output
Tweak: Enhanced transient handling: add verification for transient storage to improve reliability with external object caches

= 1.53.0 = 09.12.2025

New: Implement Google Tag Gateway Proxy for proxying requests to Google's First-Party Servers
Tweak: Added support for loading deprecated functions with user toggle in settings
Tweak: Simplified documentation link retrieval by removing unnecessary parameters
Tweak: Added notification badges
Tweak: Enhanced Facebook Pixel script loading and user data caching
Tweak: Added multiple enhancement opportunity notifications for various settings
Tweak: Added crossDomain option to AJAX requests
Tweak: Replaced jQuery.ajax with native script loading for improved performance and error handling
Tweak: Removed unused code and files

= 1.52.1 = 03.12.2025

Tweak: Added new documenation links.
Tweak: Updated the GA4 tag ID format.
Tweak: Updated Google tag ID suppression logic in functions.js
Tweak: Implemented public front-end API for third-party integrations with event dispatching and consent context Fix: Fixed server-to-server event processing as not all classes were properly loaded.

= 1.52.0 = 01.12.2025

New: Added Reddit Conversions API support and enhance event handling for S2S events.
Tweak: Removed direct support for processing anonymous hits in Facebook, Pinterest, TikTok, and Snapchat APIs. This can now be achieved with the new event filtering system.
Tweak: Removed several unused files and folders.
Tweak: Bumped up WP version compatibility to 6.9
Tweak: Filter out non-existent or unpublished products from transient data
Tweak: Refactored pixel file structure to unify server-side and browser-side handling, implementing a centralized pixel registry for improved management and automatic detection of active pixels.
Tweak: Added validations for some input data.

= 1.51.1 = 27.11.2025

Fix: Fixed chunk loading compatibility with script optimization plugins (that combine JavaScript) by setting the .js public path dynamically (with an absolute instead of a relative path).
Fix: Disabled the Composer APCU optimization since it caused loading issues on a small subset of servers.

= 1.51.0 = 25.11.2025

New: Event filtering system.
Tweak: Added error handling in the queue runner.
Tweak: Added null and undefined check in visitor permission logic.
Tweak: Updated the documentation links.
Tweak: Bumped up Facebook CAPI API version to v24.0.
Fix: Fixed chunk loading compatibility with script optimization plugins (SiteGround Optimizer, Autoptimize, WP Rocket, etc.) by implementing webpack runtime publicPath configuration.

= 1.50.1 = Release date - 19.11.2025

Fix: Fixed undefined check for visitorAllowed cache.

= 1.50.0 = 16.11.2025

New: Split the tracking library into chunks to only load the necessary code for the active pixels and features.
Tweak: Switched bot detection from IP based to user-agent based for better accuracy, flexibility, and much smaller file size.
Tweak: Added support in the pmw_google_ads_conversion_identifiers filter for multiple labels for the same Google Ads conversion ID.
Tweak: Updated vendor packages.
Tweak: Added filter to take over control of the Reddit tracking pixel in case the Reddit pixel is active in the Pixel Manager and the official Reddit for WooCommerce plugin is also active.

= 1.49.3 = 06.11.2025

Tweak: Replaced Cody widget with Chatbase widget.
Tweak: Added chatbot widget with side panel.
Fix: Fixed product ID validation and filtered unpublished products in get_products_for_datalayer_by_product_ids. (CVE-2025-12545)

= 1.49.2 = 07.10.2025

Tweak: Updated the VWO tracking script to version 2.1.
Tweak: Renamed Twitter to X (Twitter) in the settings.
Tweak: Expanded consent mode regions by adding entries for 11 additional U.S. states.
Tweak: Updated the add-to-cart URL parameter handling to include an optional quantity parameter.
Tweak: Added payment type details to Google Analytics events.
Tweak: Refactored order item price handling for Google Ads cart items to always exclude tax.
Tweak: Automatically detect disabled Google tags after combining Google tags and prevent running a config command for them.
Tweak: Updated vendor packages.
Tweak: Refactored gateway analysis calculations for improved clarity and accuracy.
Tweak: Bumped up WC version compatibility to 10.2
Fix: Moved the GLA activation filter to the init hook. It prevented other Pixel Manager filters from being applied.

= 1.49.1 = 18.06.2025

Tweak: Updated plugin URI to SweetCode site.
Tweak: Removed the deprecated Facebook Microdata output.
Tweak: Automatic options backup on plugin upgrades.
Fix: Fixed edge-case XSS vulnerabilities related to unquoted product ID injection in post-editing scenarios. Exploitation required specific conditions and permissions.
Fix: Fixed the "Show recent log file" link in the logs tab.

= 1.49.0 = 10.06.2025

New: Added support to send PageView events through the s2s protocol for pixels that support it.
New: Added a new queue runner _pmwq for developers who want to run Pixel Manager functions, no matter when the Pixel Manager is loaded.
New: Added a new automatic settings backup feature.
Tweak: Renamed ACR cookie for consistency.
Tweak: Refactored REST route permission callbacks.
Tweak: Added a script attribute to disable autoblocking of the PMW when the Usercentrics CMP is active.
Tweak: Improved GA4 page load time tracking logic and added new performance metrics.
Tweak: Updated Wistia embed script and styling for better integration.
Tweak: Various admin UX improvements.
Tweak: Added a health check for the Google Tag Gateway.
Tweak: Removed some unused code.
Tweak: Added method to convert LTV order values to base currency when the shop uses specific multi-currency plugins.
Tweak: Improved payment gateway retrieval logic.
Tweak: Bumped up WC version compatibility to 9.9

= 1.48.0 = 22.05.2025

New: Support for Google tag gateway for advertisers.
Tweak: Improved processing ot the GA4 data API credentials.
Tweak: Updated the GA4 session ID extraction to the new GS2 format.
Tweak: Many code improvements to reduce Plugin Check warnings and errors.
Tweak: Bumped up WP version compatibility to 6.8
Tweak: Bumped up WC version compatibility to 9.8
Tweak: Added filter to declare WP Consent API compatibility.
Tweak: Removed some cruft.
Tweak: Added console log for Meta (Facebook) custom event tracking.
Tweak: Updated vendor packages.
Tweak: Optimized the show_variation event listener to prevent issues on small subset of themes.
Tweak: Added optional fallback URL for the script loader.
Tweak: Optimized filter loading.
Tweak: Optimized the event script for Google shortcodes.
Tweak: Improved the cache purge logic to also purge transients that cache certain options.
Fix: Fixed a small UX display bug that, in rare cases, would show the pro version demo mode button even if the pro version is active.
Fix: Allow shorter Reddit pixel IDs.
Fix: Removed a possible recursion to prevent a memory overallocation error in some edge cases in class-opportunties.php.
Fix: Fixed the facebook_for_woocommerce_integration_pixel_enabled filter.

= 1.47.1 = 17.04.2025

New: Released the free version of the plugin on the woocommerce.org marketplace.

= 1.47.0 = 31.03.2025

New: Microsoft Ads Consent Mode support
Tweak: Added video documentation for the GA4 data API setup.
Tweak: Cast permission callback return values to prevent semgrep warnings.
Tweak: Added a feature to show the PMW pro features demo in the wp.org playground.
Tweak: Removed some cruft.
Tweak: Added new pmw_options filter that allows to filter the options array before it is used.
Tweak: Added order extra details output that helps with debugging.
Tweak: Improved the loading logic to prevent fatal errors if several versions of the plugin are activated at the same time.
Tweak: Numerous code syntax improvements.
Tweak: Improved variation name output for GA4.
Tweak: Added support fo the new WooCommerce internal brand feature.
Tweak: Improved the update_cart event listener. Fix: Improved the data object when retrieving GA4 attribution data to prevent an invalid argument warning.

= 1.46.1 = 27.01.2025

Tweak: Cast permission_callback input variable into bool.
Tweak: Workaround for a rare Google tracking ID URL bug.
Tweak: Added a safeguard to prevent a fatal error in some edge cases when third-party code changes the data output from a string to an array in prepare_custom_rest_handlers.
Tweak: Bumped up WC version compatibility to 9.6

= 1.46.0 = 09.01.2025

New: Added support for the Cookiefirst CMP.
Tweak: Added safeguard to get_payment_gateways method to prevent a fatal error in some edge cases when a payment gateway is not following the WooCommerce standard.
Tweak: Added data collection placeholder for gateway analysis when the analysis is run when no orders have been processed through the Pixel Manager yet.
Tweak: Bumped up WC version compatibility to 9.5
Tweak: Bumped up WP version compatibility to 6.7
Tweak: Switched gtag.js ID priority from GA4 to Google Ads, as GA4 in rare cases is buggy and returns a 404.
Tweak: Prevent double logging of payment method change.
Tweak: Reactivated the AI support chat bot.

= 1.45.0 = 29.10.2024

New: Added support for the Meta domain verification ID.
Tweak: Allow shop managers to access the settings page.
Tweak: Updated vendor packages.

= Earlier versions = For the changelog of earlier versions, please refer to the changelog in the /changelog-archive/ folder.

Make more money from your ads with high-precision tracking