TejCart

<p>TejCart is a shopping cart plugin for WordPress. Sell physical goods, digital downloads, or services with products, cart, checkout, orders, customers, coupons, taxes, and shipping all in one place.</p>
<h4>Features</h4>
<ul>
<li>Simple, variable, digital, grouped, external, and bundle products</li>
<li>AJAX shopping cart with persistent storage for logged-in users</li>
<li>Single-page checkout with guest checkout</li>
<li>Multiple payment options including cards, digital wallets, and Pay Later</li>
<li>Order management with refunds and invoices</li>
<li>Customer accounts with order history</li>
<li>Coupons, taxes, and shipping zones</li>
<li>Transactional emails with template overrides</li>
<li>Digital downloads with secure delivery URLs</li>
<li>CSV import / export</li>
<li>REST API and WP-CLI commands</li>
<li>Gutenberg blocks for cart, checkout, and account pages</li>
</ul>
<h4>Requirements</h4>
<ul>
<li>WordPress 6.3 or later</li>
<li>PHP 8.2 or later</li>
<li>HTTPS enabled</li>
</ul>
<h3>External Services</h3>
<p>TejCart connects to the external services below to provide payment processing and merchant onboarding. Data is only sent when the corresponding feature is actively used.</p>
<h4>PayPal</h4>
<p>When a shopper checks out, or a merchant refunds, captures, or voids a transaction, TejCart calls PayPal’s REST API at <code>https://api-m.paypal.com</code> (live) or <code>https://api-m.sandbox.paypal.com</code> (sandbox). Order totals, line items, billing and shipping addresses, and buyer contact information are sent as part of the checkout flow. The plugin also loads the PayPal JavaScript SDK from <code>https://www.paypal.com/sdk/js</code> and the partner-onboarding lightbox from <code>https://www.paypal.com/webapps/merchantboarding/js/lib/lightbox/partner.js</code> on the connect screen.</p>
<ul>
<li>Service provider: PayPal, Inc.</li>
<li>Terms of service: https://www.paypal.com/us/legalhub/useragreement-full</li>
<li>Privacy policy: https://www.paypal.com/us/legalhub/privacy-full</li>
</ul>
<h4>Google Pay</h4>
<p>When the merchant enables Google Pay, the plugin loads Google’s Pay JavaScript SDK from <code>https://pay.google.com/gp/p/js/pay.js</code> on the cart and checkout pages so the Google Pay button can render and tokenize the shopper’s card.</p>
<ul>
<li>Service provider: Google LLC</li>
<li>Terms of service: https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=googlepaytos&ldl=en</li>
<li>Privacy policy: https://policies.google.com/privacy</li>
</ul>
<h4>TejCart Partner Onboarding Proxy</h4>
<p>To enable one-click merchant onboarding without shipping partner credentials in the plugin, TejCart calls a proxy at <code>https://tejcart.com/ppcp-seller-onboarding/seller-onboarding.php</code>. The proxy is only contacted while a merchant is connecting or disconnecting a payment account. The plugin sends the merchant’s WordPress admin email, the environment (sandbox or live), a return URL pointing back to the WordPress admin, and the requested product bundle. No shopper data, order data, or API credentials are sent.</p>
<ul>
<li>Service provider: TejCart</li>
<li>Terms of service: https://tejcart.com/terms-of-service.html</li>
<li>Privacy policy: https://tejcart.com/privacy-policy.html</li>
</ul>
<h4>Optional bot-protection providers (disabled by default)</h4>
<p>The captcha providers below are opt-in. They are disabled by default and only become active after the merchant explicitly enables a provider under <strong>TejCart > Settings > Security</strong> and supplies their own site key + secret key. When enabled, the plugin verifies a challenge token on the cart, checkout, login, and registration forms by sending the visitor’s IP address and the challenge token to the provider’s <code>siteverify</code> endpoint.</p>
<p><strong>hCaptcha</strong> — When enabled, the plugin calls <code>https://hcaptcha.com/siteverify</code> to verify a challenge response.</p>
<ul>
<li>Service provider: Intuition Machines, Inc. (hCaptcha)</li>
<li>Terms of service: https://www.hcaptcha.com/terms</li>
<li>Privacy policy: https://www.hcaptcha.com/privacy</li>
</ul>
<p><strong>Cloudflare Turnstile</strong> — When enabled, the plugin calls <code>https://challenges.cloudflare.com/turnstile/v0/siteverify</code> to verify a challenge response.</p>
<ul>
<li>Service provider: Cloudflare, Inc.</li>
<li>Terms of service: https://www.cloudflare.com/website-terms/</li>
<li>Privacy policy: https://www.cloudflare.com/privacypolicy/</li>
</ul>
<p><strong>Google reCAPTCHA</strong> — When enabled, the plugin calls <code>https://www.google.com/recaptcha/api/siteverify</code> to verify a challenge response.</p>
<ul>
<li>Service provider: Google LLC</li>
<li>Terms of service: https://policies.google.com/terms</li>
<li>Privacy policy: https://policies.google.com/privacy</li>
</ul>
<h4>Optional bundled-module services (disabled by default)</h4>
<p>TejCart ships several optional modules that are OFF by default. None of them contacts any third party until a merchant turns the module ON under <strong>TejCart > Modules</strong>, enables a specific provider, and enters that provider’s own API credentials. Each service below is only contacted when its feature is actively used.</p>
<p><strong>Live tax providers (Tax module).</strong> When a provider is enabled, TejCart sends the cart/line totals and the order’s billing/shipping address to calculate tax at checkout and, where supported, to record the finalised transaction.</p>
<ul>
<li>TaxJar — <code>https://api.taxjar.com</code> — Terms: https://www.taxjar.com/terms — Privacy: https://www.taxjar.com/privacy-policy</li>
<li>Avalara AvaTax — <code>https://rest.avatax.com</code> — Terms: https://www.avalara.com/us/en/legal/terms.html — Privacy: https://www.avalara.com/us/en/legal/privacy-policy.html</li>
<li>Stripe Tax — <code>https://api.stripe.com</code> — Terms: https://stripe.com/legal/ssa — Privacy: https://stripe.com/privacy</li>
</ul>
<p><strong>Carrier shipping rates, labels & tracking (Shipping module).</strong> When a carrier is enabled, TejCart sends the ship-from and destination address, parcel weight/dimensions, and (for labels) order contents when a rate, label, or tracking request is made.</p>
<ul>
<li>FedEx — <code>https://apis.fedex.com</code> — Terms: https://www.fedex.com/en-us/terms-of-use.html — Privacy: https://www.fedex.com/en-us/trust-center/global-privacy-policy.html</li>
<li>UPS — <code>https://onlinetools.ups.com</code> — Terms: https://www.ups.com/us/en/support/shipping-support/legal-terms-conditions.page — Privacy: https://www.ups.com/us/en/support/shipping-support/legal-terms-conditions/privacy-notice.page</li>
<li>USPS — <code>https://apis.usps.com</code> — Terms: https://www.usps.com/termsofuse.htm — Privacy: https://about.usps.com/who/legal/privacy-policy/welcome.htm</li>
<li>DHL Express — <code>https://express.api.dhl.com</code> — Terms: https://developer.dhl.com/terms-conditions — Privacy: https://www.dhl.com/global-en/home/footer/privacy-notice.html</li>
<li>Canada Post — <code>https://soa-gw.canadapost.ca</code> — Terms: https://www.canadapost-postescanada.ca/cpc/en/our-company/about-us/legal.page — Privacy: https://www.canadapost-postescanada.ca/cpc/en/our-company/about-us/privacy-policy.page</li>
<li>Australia Post — <code>https://digitalapi.auspost.com.au</code> — Terms: https://auspost.com.au/terms-conditions — Privacy: https://auspost.com.au/privacy</li>
<li>EasyPost — <code>https://api.easypost.com</code> — Terms: https://www.easypost.com/legal/terms — Privacy: https://www.easypost.com/privacy</li>
<li>Shippo — <code>https://api.goshippo.com</code> — Terms: https://goshippo.com/terms — Privacy: https://goshippo.com/privacy</li>
<li>Sendle — <code>https://api.sendle.com</code> — Terms: https://www.sendle.com/terms-of-use — Privacy: https://www.sendle.com/privacy</li>
<li>Delhivery — <code>https://track.delhivery.com</code> — Terms: https://www.delhivery.com/terms-and-conditions — Privacy: https://www.delhivery.com/privacy-policy</li>
<li>Shiprocket — <code>https://apiv2.shiprocket.in</code> — Terms: https://www.shiprocket.in/terms-conditions/ — Privacy: https://www.shiprocket.in/privacy-policy/</li>
</ul>
<p><strong>Shipment tracking providers (Order Tracking module).</strong> When a provider is enabled, TejCart sends the carrier name and tracking number to fetch delivery status.</p>
<ul>
<li>AfterShip — <code>https://api.aftership.com</code> — Terms: https://www.aftership.com/terms — Privacy: https://www.aftership.com/privacy</li>
<li>EasyPost — <code>https://api.easypost.com</code> — Terms: https://www.easypost.com/legal/terms — Privacy: https://www.easypost.com/privacy</li>
</ul>
<p><strong>Server-side analytics & marketing (Analytics module).</strong> When a destination is connected, TejCart forwards e-commerce events (product views, add-to-cart, checkout, purchase) with order data and, where you configure it, customer contact data (e.g. email, hashed where the provider requires it).</p>
<ul>
<li>Google Analytics 4 (Measurement Protocol) — <code>https://www.google-analytics.com</code> — Terms: https://marketingplatform.google.com/about/analytics/terms/us/ — Privacy: https://policies.google.com/privacy</li>
<li>Meta Conversions API — <code>https://graph.facebook.com</code> — Terms: https://www.facebook.com/legal/terms — Privacy: https://www.facebook.com/privacy/policy/</li>
<li>Klaviyo — <code>https://a.klaviyo.com</code> — Terms: https://www.klaviyo.com/legal/terms-of-service — Privacy: https://www.klaviyo.com/legal/privacy/privacy-notice</li>
<li>Mailchimp — <code>https://<dc>.api.mailchimp.com</code> — Terms: https://mailchimp.com/legal/terms/ — Privacy: https://www.intuit.com/privacy/statement/</li>
</ul>
<p><strong>Sales channels (Channels modules).</strong> When a channel is connected, TejCart syncs your product catalog, inventory, and prices to the marketplace, imports orders, and (where enabled) sends server-side conversion events.</p>
<ul>
<li>Amazon Selling Partner API — <code>https://sellingpartnerapi-na.amazon.com</code> — Terms: https://developer-docs.amazon.com/sp-api/docs/development-process (Amazon Services Business Solutions Agreement) — Privacy: https://www.amazon.com/gp/help/customer/display.html?nodeId=GX7NJQ4ZB8MHFRNJ</li>
<li>Meta (Facebook & Instagram Shopping) — <code>https://graph.facebook.com</code> — Terms: https://www.facebook.com/legal/terms — Privacy: https://www.facebook.com/privacy/policy/</li>
<li>TikTok Shop & Events API — <code>https://open-api.tiktokglobalshop.com</code> and <code>https://business-api.tiktok.com</code> — Terms: https://www.tiktok.com/legal/page/global/terms-of-service/en — Privacy: https://www.tiktok.com/legal/page/global/privacy-policy/en</li>
</ul>
<p><strong>Multi-currency exchange rates (Currency Switcher module).</strong> When enabled, TejCart requests the latest base<span aria-hidden="true" class="wp-exclude-emoji">→</span>target exchange rate. Only the two ISO 4217 currency codes are sent — no shopper, order, or store data.</p>
<ul>
<li>Nexa Plugins exchange-rate API — <code>https://nexaplugins.com/api/v1/exchange-rate.php</code> — Service provider: Nexa Plugins — Terms: https://nexaplugins.com/terms-of-service.html — Privacy: https://nexaplugins.com/privacy-policy.html</li>
</ul>
<p><strong>AI product-content generation (AI Content SmartSuite module).</strong> When enabled, TejCart sends the product fields you choose (e.g. title, attributes) and your prompt to the AI provider you configure, to generate titles, descriptions, tags, or FAQs. No data is sent until you click generate.</p>
<ul>
<li>OpenAI — <code>https://api.openai.com</code> — Terms: https://openai.com/policies/terms-of-use — Privacy: https://openai.com/policies/privacy-policy</li>
</ul>


Pippin Williamson

Easy Digital Downloads

Andrew Munro / AffiliateWP

Chris Klosowski

John Parris

Robin Cornett

<p>This plugin now requires <a href="https://wordpress.org/plugins/easy-digital-downloads/" title="Easy Digital Downloads" rel="ugc">Easy Digital Downloads</a> 2.9 or greater.</p>
<p>Once activated, EDD Auto Register will create a WordPress user account for your customer at checkout, without the need for the customer to enter any additional information. This eliminates the need for the default EDD registration form, and drastically reduces the time it takes your customers to complete their purchase.</p>
<p>Guest checkout is required so the plugin overrides the setting. The registration form is hidden on checkout while the plugin is active.</p>
<p>There are various filters available for developers, see the FAQ tab for more information.</p>
<p><strong>More extensions for Easy Digital Downloads</strong></p>
<p>You can find more extensions (both free and commercial) from <a href="https://easydigitaldownloads.com/downloads/" title="Easy Digital Downloads" rel="nofollow ugc">Easy Digital Downloads’ website</a></p>


EDD Auto Register

I wish there was an option to enable the introduction of the password directly from the form



Works perfectly

Keep your checkout fields minimal to improve conversions while still getting your customer accounts established.

Definitely a key add-on for my EDD sites. Can't do without it now.

Great for checkout conversions

Security is sadly a topic that the EDD people to not care about. Sending clear text passwords out to people should not be done. I have fixed this with this code. This hides the field be then tells the users after the did the purchase that they should create a password. Not very user friendly, I currently had disabled it but I am thinking of activating it again because I think my sales gone down because if this.


<?php
namespace nextgenthemes\website;

add_filter( 'edd_auto_register_email_body', __NAMESPACE__ . '\\edd_auto_register_email_body', 10, 4 );

function edd_auto_register_email_body( $default_email_body, $first_name, $username, $password ) {

	// Email body
	$out = __( "Dear", "edd-auto-register" ) . ' ' . $first_name . ",\n\n";
	$out .= sprintf(
		__( "Thanks for your purchase! A account with a random password has been created for you. Please <a href='%s'>follow the lost password procedure</a> to create a secure password for your account in case you want to ask a support question or access your downloads. (For security reasons passwords are not send out in cleartext)", "nextgenthemes-website" ),
		wp_lostpassword_url()
	) . "\n\n";
	$out .= __( "Your Username:", "edd-auto-register" ) . ' ' . $username . "\n\n";

	return $out;
}




Also using emails and usernames isn't exactly great either as you can guess them form the author slugs WP generates from them.

My Idea would be so simply use javascript on checkout to fill in a random generate password on checkout automatically. WP already has a function for this. And do not display the 2nd password confirm field at all, and maybe even autofill the username field with something based on the first/last name they enter.

To elaborate on my point that this is not the first time I notice this pattern from EDD:

They had ssl_verify => false all over their code, I think its now changed it now changed some areas, or at least the is a option to verify your shops ssl. But with the software licensing extension those API calls and downloads are (or at lease were) totally unresponsively ignoring SSL altogether. Because some WP bug that was fixed like 10 years ago. Their entire attitude to simply ignore it because it may fail in some very rare cases is very bad.

It could lead to a chain reaction from a MITM attack on easydigitaldownloads.com that all extensions they ship to customers would ship from hackers sites instead with malicious code and given that many of their customers use EDD SL as well they could spread it from there. Because all the API calls simple ignor(ed) SSL! Not a security expert but at least I pay a little bit attention.

Also, and my guess is that this is very common in this industry. They do support via email and they expect you to send them passwords to your sites in cleartext!

Great Idea, bad execution.

Its horrible security to send out passwords in cleartext.

This is an excellent extension to add to Easy Digital Downloads. It eliminates confusion and friction for users when they purchase something on your site because it automatically creates an account for them and logs them in.

It's especially useful when selling online courses or memberships on your site. I use it specifically for LearnDash and it works great. Because it creates the account & logs the user in immediately after a purchase, they can begin consuming your content or taking your course right away.

Works Well. Saves Time. Eliminates Confusion.

Just wanted to stop by and say thank you for the recent updates!

I've been using this plugin for almost 2 years, and was happy that it always just worked. But, since it was never updated I was always waiting for it to crash after an update of WordPress. It didn't, fortunately. :-)

Happy to see that you guys are giving it some love again :-)

Long time user. Very excited about the recent updates!

Automatically creates a WP user account at checkout, based on customer's email address.

TejCart vs EDD Auto Register