🎉 FluentCart 1.4.2 - EU Withdrawal Compliance Ready
Most releases follow a roadmap. This one followed a calendar.
On June 19, 2026, a new rule takes effect across Germany and the EU. Every B2C store has to show a clearly visible "Withdraw from contract here" button that any customer can reach without logging in. It is not optional.
Many of you asked for this feature before the deadline. We treated the date as fixed and built toward it. It ships today, one day early. Staying compliant with rules and regulations has always been a priority for us.
Meet FluentCart customer rights, a new add-on that makes your store compliant before the deadline. The hard part of a rule like this is knowing what compliant actually means and getting every detail right. This add-on carries those details so you do not have to read the statute line by line.
Here is what it does:
- A public withdrawal page, no login needed. Works on a phone. The customer enters name, order number, and email, moves through a short two-step flow, and gets a timestamped acknowledgment the moment they confirm.
- No one is ever turned away. Matched orders show a summary. Unmatched ones are still accepted and set aside for you to review by hand, exactly as the law intends.
- Withdrawals that respect real orders. Customers pick which items and quantities to withdraw and see a tax-aware estimated refund before confirming. For subscriptions, they choose to stop now or finish the cycle. Everything reaches you as guidance, nothing is cancelled automatically, so you stay in charge.
On your side, a new Withdrawal Requests page lets you review, accept, decline, and link unmatched declarations to the right order. Setup lives on its own Withdrawal (EU) settings page for button placement, form behavior, exclusions, time windows, and eligible statuses. Four built-in emails cover the full cycle.
Also in 1.4.2: Paddle handles cross-currency orders more accurately, Authorize.net passes full order details to the gateway, the profile page no longer breaks when a cookie banner blocks avatars, plus security hardening.
Small thing I am a little proud of: FluentCart is the first WordPress eCommerce plugin to ship this as a first-party feature. We just like being ready for our users.
Full write-up: https://fluentcart.com/blog/fluentcart-1-4-2/
Get the add-on: one click from Settings → Features and Addons → Plugin Addons, or download manually from here.
If you sell B2C into Germany or the EU, use this feature on your stores.
More cooking 🚀
Thanks for taking care of us in the EU, not only with FluentCart but also all great compliance improvements you’ve added to FluentCRM.
Awesome, thank you :)
❤️🎉
Shahjahan Jewel the "exclude categories" option doesn't seem to work. I have one category "eLearning", and when I type it, it shows me "no data"...
Pierre, Thanks for reporting. I will check
Sarkar Ripon Thank you for the update ! The "problem" is solved :)
Thanks Shahjahan Jewel & Sarkar Ripon you are best.
Thanks for the update, Shahjahan Jewel kindly solve the subscription problem as well. We are not building any platform using fluent cart because of this issue
Maaz Shakir what problem are you facing with subscriptions?
Thanks for building this!
Lighting fast! Congrats!
Great job Shahjahan Jewel ! but there is a mistake in your post : "Germany and the EU" Actually Germany belongs to the EU :)
same for "If you sell B2C into Germany or the EU"
Shahjahan Jewel can you please remove the mandatory first name/last name?
The directive says specifically tha a person should not be asked more than necesarry to identify the order. So Receipt number and email should be enough
bug: This was from a partial withdrawal
Directive says we need to explicitly say what is withdrawn, so it should be a productlist with amount
Natascha Vantuykom and Shahjahan Jewel . Edit: rate limiting is imlemented.
Just a quick addition. In case rate-limiting isn’t already implemented, it’s important that it is implemented before making the suggested change, since it would make it even easier for an attacker to enumerate and cancel orders.
Karl Emil Nikka I did not test yet with an anonymous customer, but I expect that he receives a magic link to the order so it still is secure
Natascha Vantuykom Oh, in that case, never mind. Thanks!
Karl Emil Nikka , Shahjahan Jewel , just tested for anonymous, when adding email and invoice, it just goes to the order, this should be secured with a magic link. Now anyone who knows the email and receipt number can withdraw
Natascha Vantuykom Edit: rate limiting is imlemented.
That’s exactly what worried me. With sequential order numbers and without rate limiting (*), it’s a recipe for misuse.
(* I haven’t checked if rate-limiting is implemented since we’re not using FluentCart ourselves. WPManageNinja has however previously forgot to implement it in FluentCRM.)
"bug: This was from a partial withdrawal"
Natascha Vantuykom We should not send the full list as that is a privacy issue, as that user may not be logged in, so we should not expose the entire order data.
Karl Emil Nikka, we cross-check the order number with the email, so you can't guess both at the same time. I will check the rate limiting.
Shahjahan Jewel Edit: rate limiting is imlemented.
The issue is that the order number is sequential. If an attacker knows the email address of a customer, they can easily enumerate all orders if rate limiting isn’t applied.
Karl Emil Nikka, we already have rate limiting. 5 tries per 15 minutes.
Shahjahan Jewel Excellent! Thank you so much! (I’ve updated my comments.)
Shahjahan Jewel Congrats on the new release (and on 1.5.0 since). Please could you bump the priority of making sure that the user logs in or registers during checkout? It's unneeded friction and optional when selling physical products, but when selling courses, subscriptions or memberships, the user can't access their purchase if they make a mistake in their email address during check out, as they'll never get the confirmation email and the link to access their training. I know the feature is coming (thanks!) as it's saying "Coming soon" in FluentCart settings, but please could you implement this ASAP? It's really crucial for membership sites / online courses that the user can log in / register during checkout. It's a feature of EDD that works very well, as the login /register fields are shown in the checkout page (the user can select a login or register tab) and the order can't progress without the user logging in or registering. Thanks again!