Title: Autify Digital Lloyds® Gateway for WooCommerce
Author: Autify Digital
Published: <strong>September 13, 2025</strong>
Last modified: September 2, 2026

---

Search plugins

![](https://ps.w.org/autifydigital-lloyds-cardnet/assets/icon-256x256.jpg?rev=3472430)

# Autify Digital Lloyds® Gateway for WooCommerce

 By [Autify Digital](https://profiles.wordpress.org/supportautify/)

[Download](https://downloads.wordpress.org/plugin/autifydigital-lloyds-cardnet.3.0.15.zip)

 * [Details](https://srd.wordpress.org/plugins/autifydigital-lloyds-cardnet/#description)
 * [Reviews](https://srd.wordpress.org/plugins/autifydigital-lloyds-cardnet/#reviews)
 *  [Installation](https://srd.wordpress.org/plugins/autifydigital-lloyds-cardnet/#installation)
 * [Development](https://srd.wordpress.org/plugins/autifydigital-lloyds-cardnet/#developers)

 [Support](https://wordpress.org/support/plugin/autifydigital-lloyds-cardnet/)

## Description

Connect your WooCommerce store to Lloyds Merchant Services with this secure payment
gateway plugin by Autify. Offer your customers a reliable and seamless way to pay
using Visa, Mastercard, American Express, and digital wallets directly from your
online store, with real-time processing and flexible configuration options to suit
your business needs.

#### What is Lloyds?

Lloyds offer a secure card payment solution that enables businesses to accept a 
variety of payment methods, including credit and debit cards, Apple Pay, and Google
Pay, through their WooCommerce store. This integration with the Autify plugin seamlessly
enhances transaction efficiency and improves customer experience by offering a smooth,
uninterrupted payment journey.

#### How the Plugin Works

The Autify plugin for WooCommerce connects with the Lloyds Gateway enabling your
customers to pay securely using their preferred payment method at checkout. Choose
between an embedded payment form (Payment.JS) directly on your checkout page or 
a redirect to the secure Lloyds hosted payment page. Once the transaction is authorised,
the payment is confirmed in real time through webhook integration, and order statuses
are updated automatically.

From your WooCommerce admin panel, you have complete control over the payment experience.
Configure payment methods, manage tokenised cards, process refunds, and monitor 
all transactions through the built-in reporting dashboard. The plugin supports recurring
payments for subscription-based products, MOTO transactions for phone/email orders,
and express checkout with Apple Pay and Google Pay on product, cart, and checkout
pages.

#### When to Use This Plugin

This plugin is ideal for any WooCommerce merchant who needs to accept card payments
through Lloyds. Whether you run an online retail store, offer subscription services,
or need to process phone orders, the Lloyds Gateway provides a secure, PCI-compliant
payment solution that integrates directly into your WooCommerce checkout flow.

#### Features

 * **Embedded Payment (Payment.JS)** — Seamless checkout with a secure payment form
   directly on your site using iframes. Card data is handled entirely by Lloyds —
   never touches your server.
 * **Hosted Payment Page (HPP)** — Redirect customers to the secure Lloyds hosted
   payment page for PCI compliance with minimal integration effort.
 * **Apple Pay Support** — Allow customers to pay quickly using Apple Pay on compatible
   devices and browsers for a fast, native payment experience.
 * **Google Pay Support** — Accept payments via Google Pay for a frictionless checkout
   experience across Android and Chrome.
 * **Express Checkout** — Display Apple Pay and Google Pay buttons on product, cart,
   and checkout pages, allowing customers to skip the standard checkout process.
 * **Card Tokenisation** — Allow customers to securely save card details for faster
   future purchases. Card data is never stored on your server.
 * **Subscription Support** — Set up recurring payments for subscription-based services
   with automatic renewal processing via card payments.
 * **MOTO Payments** — Process Mail Order/Telephone Order payments securely from
   the WooCommerce admin panel.
 * **Refund Management** — Process full or partial refunds directly from the WooCommerce
   order page with automatic gateway integration.
 * **3D Secure 2 (3DS2)** — Smart authentication with dynamic challenge requirements
   supporting Strong Customer Authentication (SCA) under PSD2 regulations.
 * **Transaction Reporting** — Comprehensive reporting dashboard with advanced filtering,
   CSV export, and traffic light verification status indicators.
 * **Real-Time Processing** — Instant payment confirmations and status updates via
   webhook integration.
 * **Sandbox/Test Mode** — Test transactions without processing real payments using
   Lloyds sandbox credentials.
 * **Multi-Currency Support** — Configure multiple currencies and selling locations
   based on your merchant account capabilities.
 * **WooCommerce Blocks** — Support for both classic and block-based checkout.
 * **HPOS Compatible** — Full support for WooCommerce High-Performance Order Storage.
 * **Dedicated Customer Support** — Reliable installation and post-integration support
   from Autify Digital.

#### Security & Compliance

The Autify plugin working with Lloyds uses embedded payment forms and hosted payment
pages to ensure the highest level of security for your business and your customers.
All sensitive payment information, including credit and debit card details, is handled
directly by Lloyds Bank’s PCI DSS Level 1 certified infrastructure — never on your
WordPress server.

This approach means that no customer payment data is entered into, processed by,
or stored on your server at any point during the transaction. Your server only receives
non-sensitive transaction confirmation data via secure webhook notifications, such
as the payment status and reference number. As a result, this integration supports**
PCI DSS SAQ A compliance**, significantly reducing your compliance obligations and
security risks.

All API communications are encrypted via HTTPS/TLS. The plugin supports 3D Secure
2 authentication for Strong Customer Authentication (SCA) compliance under PSD2 
regulations.

Businesses are responsible for ensuring they are compliant with any necessary financial
regulations when using Lloyds.

#### Account & Pricing

A separate Lloyds merchant services account is required to use this plugin. The 
account must be set up directly with Lloyds before installing and configuring the
plugin — it is not created during the plugin installation process.

To apply for a Lloyds account, visit: [Lloyds Bank](https://www.lloydsbank.com/business/take-payments-with-cardnet.html)

Additional fees apply for payment processing services provided by Lloyds. These 
fees are separate from the cost of this plugin and are determined by Lloyds based
on your business requirements and transaction volumes. For detailed pricing information,
please visit the Lloyds website or contact their sales team directly.

Please note, Autify Digital cannot assist with the Lloyds account setup process 
or pricing enquiries. For account-related questions, please contact Lloyds directly
through their website.

**Additional requirements:**

 * For embedded payments (Payment.JS): REST API Key and API Secret from the Developer
   Portal, linked to your Store ID by Lloyds Bank.
 * For Apple Pay: An Apple Developer account with a configured Apple Pay merchant
   identifier and certificates.
 * For Google Pay: A Google Pay merchant account (for production use).

#### Customise Your Integration

Looking for something more specific? Get in touch to discuss any custom features
or tailored configurations that might enhance your Lloyds Gateway integration for
WooCommerce. Contact us via cardnet@autify.co.uk.

#### Trademark

Lloyds and Lloyds Bank are trading names of Lloyds Bank plc. Registered Office: 
25 Gresham Street, London EC2V 7HN. Registered in England and Wales no. 2065. Lloyds
Bank plc is authorised by the Prudential Regulation Authority and regulated by the
Financial Conduct Authority and the Prudential Regulation Authority under registration
number 119278.

Apple Pay and Apple are trademarks of Apple Inc., registered in the U.S. and other
countries and regions. Use of the Apple Pay mark is subject to Apple’s guidelines
and requires compliance with the [Apple Pay Platform Web Merchant Terms and Conditions](https://developer.apple.com/apple-pay/terms/apple-pay-web/).

Google Pay is a trademark of Google LLC. Use of the Google Pay mark is subject to
the [Google Pay API Terms of Service](https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=googlepaytos)
and [Google Pay Brand Guidelines](https://developers.google.com/pay/api/web/guides/brand-guidelines).

All trademarks, service marks, and trade names referenced in this material are the
property of their respective owners.

#### Support

For technical support, customization requests, or general inquiries:

 * Email: cardnet@autify.co.uk
 * Helpdesk: https://support.autify.co.uk/
 * Visit: https://www.autify.co.uk

If you find this plugin useful, please [leave a review on WordPress.org](https://wordpress.org/support/plugin/autifydigital-lloyds-cardnet/reviews/#new-post)—
it helps us a lot!

#### External Services

This plugin relies on several third-party services to provide its functionality.
By using this plugin, you acknowledge that data will be transmitted to these external
services as described below. Please review the respective terms and privacy policies.

**1. Lloyds Bank Payment Gateway**

Lloyds Bank is the merchant services provider that facilitates the payment processing
relationship for all card transactions.

What data is sent:

 * Customer billing information (name, address, email, phone)
 * Customer shipping information (if provided)
 * Payment amount and currency
 * Transaction reference/order ID
 * Store credentials for authentication

When data is sent:

 * When a customer initiates a payment at checkout
 * When processing refunds through the WooCommerce admin panel

Service Provider: Lloyds Bank plc

 * [Service Information](https://www.lloydsbank.com/business/take-payments-with-cardnet/existing-customers/getting-started.html)
 * [Terms of Use](https://www.lloydsbank.com/business/product-terms-and-conditions.html)
 * [Privacy Policy](https://www.lloydsbank.com/business/privacy.html)

**2. First Data / Fiserv Payment Processing (IPG Online)**

This service processes hosted payment page (redirect) transactions, Payment JS embedded
payments, and refunds via the First Data API.

What data is sent:

 * Store ID and API credentials
 * Payment amounts and currency
 * Order reference and customer billing/shipping address
 * Card tokens (for tokenised payments and subscriptions)
 * Refund details (for refund operations)

When data is sent:

 * When a customer makes a payment via the hosted payment page or embedded form
 * When a session is initialised for embedded payments (Payment.JS)
 * When a merchant processes a refund from the order page

API Endpoints:

 * Hosted Payment Page (Sandbox): https://test.ipg-online.com/connect/gateway/processing
 * Hosted Payment Page (Production): https://www.ipg-online.com/connect/gateway/
   processing
 * API (Sandbox): https://cert.api.firstdata.com/
 * API (Production): https://prod.api.firstdata.com/

Service Provider: Fiserv (formerly First Data)

 * [Terms of Use](https://www.fiserv.com/en/about-fiserv/terms-of-use.html)
 * [Privacy Policy](https://www.fiserv.com/en/about-fiserv/privacy-notice.html)

**3. First Data Payment JS Client Library**

A JavaScript library loaded from First Data servers to render the secure embedded
payment form (card number, expiry, CVV fields) on the checkout page. The library
handles card data directly — no card details pass through your server. The plugin
receives a payment token in return.

When data is sent:

 * When the checkout page renders with the embedded payment method enabled

JavaScript Endpoints:

 * Sandbox: https://lib.paymentjs.firstdata.com/uat/client-2.0.0.js
 * Production: https://lib.paymentjs.firstdata.com/prod/client-2.0.0.js

Service Provider: Fiserv (formerly First Data)

 * [Documentation](https://docs.paymentjs.firstdata.com/)
 * [Terms of Use](https://www.fiserv.com/en/about-fiserv/terms-of-use.html)
 * [Privacy Policy](https://www.fiserv.com/en/about-fiserv/privacy-notice.html)

**4. Apple Pay**

Used to enable Apple Pay as an express payment method on product, cart, and checkout
pages. Only active if Apple Pay is enabled in the plugin settings and the customer
is on a compatible Apple device or browser.

What data is sent:

 * Merchant identifier, site domain, and display name (sent to Apple during merchant
   validation)
 * Payment request details (amount, currency, merchant info)
 * Transaction token after customer authorisation (processed through the First Data/
   Fiserv API)

When data is sent:

 * When a customer initiates an Apple Pay payment
 * When validating the merchant session with Apple

API Endpoint: Apple Pay merchant validation endpoints (*.apple.com)

Service Provider: Apple Inc.

 * [Apple Pay for Developers](https://developer.apple.com/apple-pay/)
 * [Apple Pay Platform Web Merchant Terms](https://developer.apple.com/apple-pay/terms/apple-pay-web/)
 * [Privacy Policy](https://www.apple.com/legal/privacy/)

**5. Google Pay**

Used to enable Google Pay as an express payment method on product, cart, and checkout
pages. A JavaScript library is loaded from Google servers to render the Google Pay
button and handle the payment flow. Only active if Google Pay is enabled in the 
plugin settings.

What data is sent:

 * Payment request details (amount, currency, merchant info)
 * Payment token data (encrypted by Google) and customer shipping/billing details(
   processed through the First Data / Fiserv API)

When data is sent:

 * When a customer chooses to pay with Google Pay
 * When the Google Pay button is loaded on the checkout, cart, or product page

API Endpoint: https://pay.google.com/gp/p/js/pay.js

Service Provider: Google

 * [Google Pay for Developers](https://pay.google.com/)
 * [Terms of Service](https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=buyertos)
 * [Privacy Policy](https://policies.google.com/privacy)

**6. Autify Digital License API**

Used to validate and manage the plugin licence. The plugin contacts Autify Digital’s
licence server to verify that the licence key is valid and active.

What data is sent:

 * Your website domain name
 * Plugin version number
 * Licence key (for activation and verification)
 * Admin email address (for licence and support purposes)
 * Admin contact name (if available)
 * Activation status (active/inactive/deactivated)

When data is sent:

 * When the licence is activated or deactivated
 * When the licence is periodically synced via the background cron job

API Endpoint: https://plugin-licenses.autify.co.uk/wp-json/autifydigital/v1/plugin

Service Provider: Autify Digital Ltd

 * [Website](https://www.autify.co.uk)
 * [Terms of Service](https://www.autify.co.uk/terms-conditions/)
 * [Privacy Policy](https://www.autify.co.uk/privacy-policy/)
 * Contact: cardnet@autify.co.uk

Note: Licence activation is required to access premium support. The plugin’s core
payment functionality operates independently of licence status.

**Privacy Notice**

Please review the privacy policies of all third-party services listed above to understand
how your data and your customers’ data is handled. It is your responsibility to 
ensure compliance with applicable data protection regulations (such as GDPR) when
using this plugin. For any questions about data handling or privacy, please contact:
cardnet@autify.co.uk

## Screenshots

[⌊Plugin Settings - Configure your Lloyds Bank payment gateway with Store ID, API
credentials, and payment mode selection.⌉⌊Plugin Settings - Configure your Lloyds
Bank payment gateway with Store ID, API credentials, and payment mode selection.⌉[

Plugin Settings – Configure your Lloyds Bank payment gateway with Store ID, API 
credentials, and payment mode selection.

[⌊Payment Failed Page - Clear error messaging when a payment is declined, allowing
customers to retry with alternative payment methods.⌉⌊Payment Failed Page - Clear
error messaging when a payment is declined, allowing customers to retry with alternative
payment methods.⌉[

Payment Failed Page – Clear error messaging when a payment is declined, allowing
customers to retry with alternative payment methods.

[⌊Order Management - View and manage orders with complete transaction details including
payment reference and customer information.⌉⌊Order Management - View and manage 
orders with complete transaction details including payment reference and customer
information.⌉[

Order Management – View and manage orders with complete transaction details including
payment reference and customer information.

[⌊Refund Processing - Process full or partial refunds directly from the WooCommerce
order page with automatic gateway integration.⌉⌊Refund Processing - Process full
or partial refunds directly from the WooCommerce order page with automatic gateway
integration.⌉[

Refund Processing – Process full or partial refunds directly from the WooCommerce
order page with automatic gateway integration.

[⌊Order Confirmation - Customer order received page showing successful transaction
completion with order details.⌉⌊Order Confirmation - Customer order received page
showing successful transaction completion with order details.⌉[

Order Confirmation – Customer order received page showing successful transaction
completion with order details.

[⌊Transaction Reports - Comprehensive transaction reporting dashboard showing payment
status, order IDs, and transaction history.⌉⌊Transaction Reports - Comprehensive
transaction reporting dashboard showing payment status, order IDs, and transaction
history.⌉[

Transaction Reports – Comprehensive transaction reporting dashboard showing payment
status, order IDs, and transaction history.

[⌊Checkout Experience - Embedded payment form (Payment.JS) integrated directly into
the WooCommerce checkout page with card details input and Google Pay option.⌉⌊Checkout
Experience - Embedded payment form (Payment.JS) integrated directly into the WooCommerce
checkout page with card details input and Google Pay option.⌉[

Checkout Experience – Embedded payment form (Payment.JS) integrated directly into
the WooCommerce checkout page with card details input and Google Pay option.

## Installation

 1. Upload the plugin to the ‘/wp-content/plugins/’ directory.
 2. Activate the plugin through the ‘Plugins’ menu in WordPress.
 3. Navigate to WooCommerce > Settings > Payments and enable the Lloyds Gateway.
 4. Enter your Lloyds credentials (Store ID, Shared Secret).
 5. For embedded payments, add your REST API Key and API Secret from the Developer 
    Portal.
 6. Configure your payment methods, tokenisation, and notification settings as needed.
 7. Test with sandbox credentials before going live.

## FAQ

### Do I need a Lloyds Bank merchant account?

Yes. A separate Lloyds Bank merchant account is required. You must apply directly
with Lloyds before installing and configuring the plugin. To apply, visit: [Lloyds Bank](https://www.lloydsbank.com/business/take-payments-with-cardnet.html)

### Is customer payment data stored on my server?

No. The plugin uses embedded payment forms and hosted payment pages. All sensitive
payment information is handled directly by Lloyds Bank’s PCI DSS compliant servers—
never on your WordPress website. This supports PCI DSS SAQ A compliance.

### What payment methods are supported?

The plugin supports all major credit and debit cards (Visa, Mastercard, American
Express, etc.) via embedded Payment.JS or hosted payment page, plus Apple Pay and
Google Pay digital wallets.

### Can I offer both redirect and embedded payment options?

No, you need to choose one payment method — either the redirect to hosted payment
page OR the embedded Payment.JS solution on your checkout page.

### Can I process refunds?

Yes. Full or partial refunds can be processed directly from the WooCommerce order
management interface.

### Does the plugin support subscriptions?

Yes, the plugin supports recurring payments for subscription services. This feature
is only available with card payments (not digital wallets).

### What is MOTO payment functionality?

MOTO (Mail Order/Telephone Order) allows you to securely process payments taken 
over the phone or email directly from the WooCommerce admin area.

### Can customers save their card details?

Yes, through tokenisation, customers can securely save their card details for faster
checkout in future purchases. The actual card data is never stored on your server.

### What credentials do I need from Lloyds Bank?

You will need your Store ID and Shared Secret (provided when setting up your merchant
account). For embedded payments, you will also need a REST API Key and API Secret
from the Developer Portal, linked to your Store ID by Lloyds Bank.

### Is professional installation available?

Yes, Autify Digital offers a professional installation service where their technical
team will configure the plugin to your requirements.

### Can I test the plugin before going live?

Yes, Lloyds Bank provides test credentials and a sandbox environment. Configure 
these in the plugin settings to test transactions without processing real payments.

### How do I get support?

For technical support, customisation requests, or general inquiries, contact us 
at cardnet@autify.co.uk or visit [autify.co.uk](https://www.autify.co.uk).

## Reviews

There are no reviews for this plugin.

## Contributors & Developers

“Autify Digital Lloyds® Gateway for WooCommerce” is open source software. The following
people have contributed to this plugin.

Contributors

 *   [ Autify Digital ](https://profiles.wordpress.org/supportautify/)

[Translate “Autify Digital Lloyds® Gateway for WooCommerce” into your language.](https://translate.wordpress.org/projects/wp-plugins/autifydigital-lloyds-cardnet)

### Interested in development?

[Browse the code](https://plugins.trac.wordpress.org/browser/autifydigital-lloyds-cardnet/),
check out the [SVN repository](https://plugins.svn.wordpress.org/autifydigital-lloyds-cardnet/),
or subscribe to the [development log](https://plugins.trac.wordpress.org/log/autifydigital-lloyds-cardnet/)
by [RSS](https://plugins.trac.wordpress.org/log/autifydigital-lloyds-cardnet/?limit=100&mode=stop_on_copy&format=rss).

## Changelog

#### 3.0.15

 * Fixed – Incorrect call to an internal meta key
 * Security – Hardened webhook and order-confirmation callback handling to reject
   requests with an invalid response signature before any order status change is
   applied
 * Security – Added request-signature verification to the PaymentJS 3D Secure status
   and method-notification callback endpoints
 * Security – Added stricter order-state validation before applying 3D Secure method-
   notification updates
 * Security – Moved 3D Secure challenge parameters out of redirect URLs into server-
   side session storage
 * Security – Replaced a non-cryptographic random number generator with a cryptographically
   secure generator for transaction reference IDs
 * Security – Strengthened session validation on Checkout Solution payment callbacks

#### 3.0.14

 * Fixed – Google Pay 3DS issue

#### 3.0.13

 * Bump – Readme update

#### 3.0.13

 * Fixed – Fatal error when WooPayments is active alongside the plugin, caused by
   wc_get_checkout_url() being called before WordPress rewrite rules are initialised
 * Fixed – Failed card payments incorrectly displaying as “PayPal” in WooCommerce
   order details when a previous PayPal attempt was made on the same order
 * Fixed – Fatal error in updateWcOrderStatus() when order lookup returns false 
   due to reversed condition check
 * Fixed – Fatal error in Checkout Solution when store ID validation fails due to
   referencing undefined paymentJsHelper property
 * Fixed – Fatal error in PaymentJS gateway when an invalid or deleted saved card
   token is used for payment
 * Fixed – Fatal error in PaymentJS 3DS status controller when order does not exist,
   added null check with redirect
 * Fixed – Fatal error in redirect payment controller when order does not exist,
   added null check with redirect
 * Fixed – Redirect payment gateway admin settings were never saved due to missing
   parent::process_admin_options() call
 * Fixed – Sensitive data (orderId, purchaseOrderNumber) not being redacted in logs
   due to case-sensitive key comparison
 * Fixed – DateTime::setTimestamp() receiving ISO 8601 string instead of integer
   in 3DS status response, causing TypeError on PHP 8
 * Fixed – Checkout Solution API signature using incorrect timestamp multiplier (
   100000 instead of 1000 for milliseconds)
 * Fixed – 3DS challenge always required for saved card tokens due to $requireChallenge
   being overwritten unconditionally
 * Fixed – Missing die() after wp_safe_redirect() in PaymentJS 3DS status controller
   allowing continued execution
 * Fixed – Undefined array key warning in 3DS response code lookup when response
   code is not in the lookup array
 * Fixed – Session null access fatal error in clear_session_and_delete_client_token()
   when triggered via admin/cron/REST context
 * Fixed – Null safety checks for WC()->cart in Apple Pay and Google Pay wallet 
   enqueue scripts
 * Fixed – Null safety checks for wc_get_product() in Apple Pay and Google Pay product
   page scripts
 * Fixed – Missing isset() guards on Google Pay product page merchant_name and merchant_id
   config values
 * Fixed – Undefined array key warnings from getAllConfig() and getAllPaymentjsConfig()
   when plugin settings are not yet configured
 * Fixed – Missing is_wp_error() check on wp_remote_post() in Checkout Solution 
   payment processing
 * Fixed – Potential infinite recursion from current_user_can() inside user_has_cap
   filter callback
 * Fixed – Product added to cart before validation in wallet express add-to-cart
   handler
 * Fixed – License manager class not loaded before calling clear_license_sync_cron()
   during plugin deactivation
 * Fixed – Replaced deprecated current_time(‘timestamp’) with time() in unpaid orders
   cron
 * Fixed – Inconsistent use of raw $order_number instead of prefixed $autify_lloyds_order_number
   in redirect form
 * Fixed – Uncaught exception in PaymentJS authorize session AJAX handler causing
   500 error, now returns clean JSON error response
 * Fixed – Session null access in PaymentJS authorize session when WC()->session
   is not initialised
 * Fixed – Missing isset() guard on live_api_secret in getAllPaymentjsConfig() live
   mode branch
 * Fixed – Undefined property access on iframe_received in method notification URL
   when database has not been migrated
 * Fixed – Added isset() guards on all getAllConfig() and getAllPaymentjsConfig()
   array key accesses across the plugin to prevent PHP 8 undefined array key warnings
 * Fixed – Session null access in saveCard() and save card preference AJAX handler
   when WC()->session is not initialised

#### 3.0.12

 * Compliance – Renamed all script, style, and AJAX action handles to use unique“
   autify-lloyds-” prefix to meet WordPress plugin directory naming standards
 * Compliance – Updated nonce names, transient keys, and lock keys with plugin-specific
   prefixes to prevent namespace collisions
 * Compliance – Renamed global JavaScript variables with “autifyLloyds” namespace
   to avoid global scope conflicts
 * Security – Added nonce verification for Apple Pay and Google Pay payment processing
   AJAX requests (CSRF protection)
 * Security – Added recursive sanitisation of webhook data using sanitize_text_field()
   across all webhook handlers
 * Security – Added input sanitisation for $_GET parameters in admin pages using
   sanitize_text_field() and wp_unslash()
 * Security – Added JSON validation and error checking in PaymentJS webhook handler
 * Security – Added header value sanitisation in PaymentJS webhook processing
 * Fixed – Added null-safety checks for wc_get_order() across all payment handlers
   to prevent fatal errors on missing orders
 * Fixed – Added isset() guards for AVS/CVV response fields, cart totals, and shipping
   address data to prevent undefined index notices
 * Fixed – Improved JSON decode error handling in Google Pay payment data processing
 * Fixed – Added proper validation for shipping methods array access and WP_Query
   availability checks
 * Improved – Order not found errors now display user-friendly notices and redirect
   to checkout instead of failing silently
 * Improved – Improved transaction notification URL validation for incomplete webhook
   data
 * Removed – Legacy deleteOldLogFiles() method from Gateway Helper
 * Updated – CSS file references to use prefixed filenames

#### 3.0.11

 * Compliance – Removed hard-coded “Powered by” credit link from public-facing payment
   form to comply with WordPress plugin directory attribution guidelines
 * Compliance – Updated External Services section with full disclosure of all third-
   party services including Terms of Use and Privacy Policy links
 * Compliance – Added disclosure for Fiserv Checkout Solution, Apple Pay, Google
   Pay, and Autify Digital License API external services
 * Compliance – Added Fiserv Terms of Use and Privacy Notice links for First Data/
   IPG Online and Payment JS services
 * Fixed – Google Pay shipment issues

#### 3.0.10

 * Performance – Removed flush_rewrite_rules from every page load, now only runs
   on plugin activation/deactivation
 * Fixed – WordPress PHPCS compliance improvements
 * Improved – 3DS flow improvements

#### 3.0.9

 * Added – Configuration to enable or disable subscription
 * Fixed – Double Subscription Request
 * Fixed – WordPress PHPCS compliance improvements

#### 3.0.8

 * Fixed – WordPress PHPCS compliance improvements
 * Fixed – GET method call curl issue for the decline transaction

#### 3.0.7

 * Added – Transaction Reports table with advanced filtering (status, payment method,
   date range)
 * Added – CSV export functionality for transaction reports with all filters applied
 * Added – Full-text search across all transaction columns (Order ID, Amount, Status,
   Card Details, IPs, etc.)
 * Added – Transaction summary statistics showing total transactions, amounts, and
   refunds
 * Added – Traffic light verification status indicators (CVV, Street, Postcode checks)
   in reports
 * Added – Transaction details meta box on WooCommerce order view page with payment
   and fraud details
 * Added – Cardnet Status column in WooCommerce order grid with payment status, 
   verification indicators, and card info
 * Added – License sync cron job for automatic license validation
 * Improved – Unified refund processing across all payment methods (Card, Apple 
   Pay, Google Pay)
 * Improved – Centralised table name management in gateway helper
 * Improved – External CSS file for admin styles instead of inline styles
 * Improved – Support for both legacy post-based orders and HPOS (High-Performance
   Order Storage)
 * Fixed – WordPress PHPCS compliance improvements
 * Fixed – Added translator comments for i18n strings with placeholders
 * Fixed – Proper variable prefixing for WordPress coding standards

#### 3.0.6

 * Security – Fixed security vulnerabilities with proper sanitisation of $_GET, 
   $_POST, $_REQUEST data
 * Security – Added proper validation and sanitisation using sanitize_text_field()
   and wp_unslash()
 * Improved – Made debug logging conditional – error_log() now only runs when WP_DEBUG
   is enabled
 * Improved – Complete WooCommerce address line 2 support across all payment methods(
   Payment JS, Apple Pay, Google Pay, HPP)
 * Fixed – Enhanced security for payment token handling and form processing
 * Fixed – Improved address data handling in redirect payment forms and wallet payments

#### 3.0.5

 * Improved – Full tokenisation support for HPP/Redirect payment gateway – customers
   can now save cards for future use
 * Improved – Smart 3D Secure handling with dynamic challenge indicators based on
   transaction type
 * Improved – Subscription support improvements with proper token handling for recurring
   payments
 * Fixed – Duplicate token saving issue between webhook and order confirmation resolved
 * Fixed – Session dependency removed from webhook – now uses order meta for reliable
   server-to-server communication
 * Fixed – Improved shipping method calculation for wallet payments (Apple Pay and
   Google Pay)
 * Fixed – Shipping options now properly update based on customer location
 * Fixed – Shipping methods now respect WooCommerce zone restrictions and conditions
 * Fixed – Total calculation now uses backend-calculated values for accuracy
 * Improved – Dynamic shipping option updates when address changes in wallet payments
 * Improved – Proper tax and shipping recalculation based on selected address
 * Removed – Deprecated class-autify-lloyds-shop-page-handler.php file

#### 3.0.4

 * Added – WooCommerce HPOS (High Performance Order Storage) compatibility

#### 3.0.3

 * Fixed – Domain issue, as WooCommerce covers it already
 * Fixed – Apple Pay removal of EMV, as this is not supported
 * Improved – Code improvements

#### 3.0.2

 * Added – Dynamic Order Data configuration and Clear Cookies for My account

#### 3.0.1

 * Added – Fallback to Hosted Payment Method support
 * Added – Configuration option in Payment JS to enable or disable logging
 * Improved – Logger standardised to use the WooCommerce logging system

#### 3.0.0

 * Added – On-site Wallets for Google Pay and Apple Pay directly from the product,
   cart, and checkout pages
 * Added – Tokenisation allowing customers to save their cards for future transactions
 * Added – Subscription support for card payments
 * Added – MOTO transaction support from the Administrator account

#### 2.0.14

 * Fixed – Column addition issue and removed sleep() function

#### 2.0.13

 * Fixed – Load Domain translation issue

#### 2.0.12

 * Added – Configuration for the Order ID suffix as timestamp

#### 2.0.11

 * Fixed – Country restriction for Embedded Payment and GooglePay Wallet issue

#### 2.0.10

 * Added – Configuration to pass the order ID or not

## Meta

 *  Version **3.0.15**
 *  Last updated **2 months ago**
 *  Active installations **100+**
 *  WordPress version ** 6.0 or higher **
 *  Tested up to **7.0.7**
 *  PHP version ** 7.4 or higher **
 *  Language
 * [English (US)](https://wordpress.org/plugins/autifydigital-lloyds-cardnet/)
 * Tags
 * [apple pay](https://srd.wordpress.org/plugins/tags/apple-pay/)[google pay](https://srd.wordpress.org/plugins/tags/google-pay/)
   [Lloyds](https://srd.wordpress.org/plugins/tags/lloyds/)[payment gateway](https://srd.wordpress.org/plugins/tags/payment-gateway/)
   [woocommerce](https://srd.wordpress.org/plugins/tags/woocommerce/)
 *  [Advanced View](https://srd.wordpress.org/plugins/autifydigital-lloyds-cardnet/advanced/)

## Ratings

No reviews have been submitted yet.

[Your review](https://wordpress.org/support/plugin/autifydigital-lloyds-cardnet/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/autifydigital-lloyds-cardnet/reviews/)

## Contributors

 *   [ Autify Digital ](https://profiles.wordpress.org/supportautify/)

## Support

Got something to say? Need help?

 [View support forum](https://wordpress.org/support/plugin/autifydigital-lloyds-cardnet/)