Tuesday, November 10, 2026
News For Internet Marketers
Utah HB 447 allows online, phone and mail-order sales of cigars and pipe tobacco from January 1, 2027 for sellers that use an independent third-party age verification system, require a 21-or-older adult signature, hold a Tax Commission license and bond, and collect a new remote tobacco tax.
Wordfence and CVE records published in early November 2026 describe order-pay data leaks in FunnelKit Stripe and Paystack, a critical file-upload flaw in payever through 4.8.0, and unverified paid notices in Paymentfor before 1.0.6.
WooCommerce 11.2.2 is a November 4, 2026 security release that stops Store API checkout with a 500 error if an extension callback cannot save the order, and it hardens cart quantities, REST key authentication, payments profile decoding and two admin connection endpoints.
In mid-October 2026, injected JavaScript in Hulk Product Options, Selleasy and Swym Wishlist Plus cancelled some Checkout clicks, sent shoppers to lookalike card pages, then forwarded them to the real Shopify checkout so the order still completed.
A Justice Department final rule published October 27, 2026 and effective November 27 lets federal firearms licensees voluntarily run free NICS checks, with written consent, on employees and on-site contractors who can access firearms, ammunition or manufacturing components.
Authorize.Net lets merchants keep an old transaction or signature key alive for 24 hours or kill it at once. After a WordPress compromise, its documentation points to the immediate cutoff, and the signature key change has to be matched in webhook code so notifications keep arriving.
Hims & Hers Health filed an October 22, 2026 motion to dismiss all nine counts in the FTC, California and Utah lawsuit over ad pixels, customer lists and subscription billing, arguing its privacy policy disclosed advertiser sharing and its plans fall outside ROSCA.
South Dakota began taking retail nicotine license applications on November 1, 2026. SB 221 requires a license for every location and bans online, phone and mail sales by licensed retailers from January 1, 2027, while HB 1220 has limited direct shipping of vapor and pouch products since July 1.
Shopify's October 22, 2026 changelog says checkout now shows payment methods as tiles when a store offers four or fewer, alongside a single Terms and policies footer link and a narrowed link protection feature for online stores.
WooCommerce 11.3, scheduled for the week of November 9, 2026, adds payment method as a column, CSV field and filter in Analytics Orders, backfills older orders in the background, and tightens validation on refunds created through the REST API.
