HDWebmobile Pre-Orders

HDWebmobile Pre-Orders

Sell products before they are released, with a chosen availability date — a pre-order’s status is derived from the product and the order itself, never from a request parameter.

Overview

HDWebmobile Pre-Orders lets you sell a product before it is available. Tick “Pre-order” on the product, set an “Available from” date, and buyers can order it right away: the add-to-cart button becomes “Pre-order,” the product page and cart show when it ships, and the order confirmation and emails carry an estimated availability date. When you’re ready, one click on the order marks it released and notifies the customer. After the release date, the product simply sells as normal.

A competing “Pre-Orders for WooCommerce” plugin (versions 2.3 and earlier) shipped CVE-2026-84849 — an authentication-bypass-by-spoofing flaw (CWE-290, CVSS 6.5) that let an unauthenticated request reach pre-order data (customer names, addresses, payment details) and create or alter orders. This plugin is built so that whole class of bug has nowhere to live: it adds no custom AJAX or REST endpoint at all, a customer only ever sees their own pre-orders inside WooCommerce’s own My Account area. Identity is never taken from a request — every customer reference is $order->get_customer_id() or get_current_user_id(), never an id, email, or token supplied by the caller. Pre-order status is derived, not declared: it’s computed from the products actually purchased and their admin-only settings, with no request parameter that says “this is a pre-order” or changes one. The only state-changing action — “Release now & notify customer” — is an authenticated admin request that checks manage_woocommerce and a nonce, and reads exactly one value: an order ID.

Key Features

• Per-product “Pre-order” toggle and “Available from” date — no separate pre-order product type to manage
• Add-to-cart button becomes “Pre-order”; product page, cart, checkout, confirmation and emails all show the availability date
• One-click “Release now” on the order marks it shipped-ready and sends the customer a note
• A hub list of every order still awaiting a pre-order release
• Automatically reverts to a normal sale once the release date passes
• Works for guests and logged-in shoppers, on classic and block-based Checkout

Limitations

Please read before installing:

• “Charge now” only — no “charge on release” / tokenized later payment in this version
• No pre-order price adjustment — the pre-order price is just the product price
• No per-customer pre-order limits or pre-order stock cap
• The “Available from” date is a single global date per product, not per-variation

Quick Setup

1. Upload the plugin files to the /wp-content/plugins/hdwebmobile-pre-orders directory, or install through the Plugins screen directly.
2. Activate the plugin through the ‘Plugins’ screen in WordPress. WooCommerce must already be installed and active.
3. Edit any product, tick “Pre-order,” and set the “Available from” date.

Latest Version

Current stable version in readme: 1.0.0 (Initial release: per-product pre-order toggle, order-derived status, one-click release, no custom AJAX/REST surface.)

See our other WordPress plugins for more WooCommerce and site-utility tools.