SSRF-safe webhook test — the webhook "Test" button now uses WordPress's SSRF-protected HTTP client, matching the live webhook sends.
Security hardening in 1.3.1
- SSRF-safe webhook test — the webhook "Test" button now uses WordPress's SSRF-protected HTTP client, matching the live webhook sends.
- Pro: expiring portal & contract links — client portal and contract links now expire (default 180 days, sliding — the window refreshes each time the client opens the link) instead of being permanent bearer links. Added a "Reset link" button on the client profile to revoke a shared portal link immediately. Existing links are given a bounded expiry on upgrade.
Terms & conditions is now a rich-text editor — a single editor with a formatting toolbar (bold, italic, strikethrough, headings, lists, quotes, inline code, links, undo/redo) repla
What's new in 1.3.0
- Terms & conditions is now a rich-text editor — a single editor with a formatting toolbar (bold, italic, strikethrough, headings, lists, quotes, inline code, links, undo/redo) replaces the separate clause rows. Your existing terms carry over automatically, and they still render at the bottom of every quote PDF.
- Pro: deposit due now — set a "Deposit due now (%)" on any quote to show clients a clear "Due now / Due on completion" breakdown on the quote page and PDF.
- Pro: payment terms note — new option under Settings → Terms & conditions: add a short note, an optional "Update payment method" portal link, and a default deposit percentage for new quotes.
Email notifications now work — get an email when a quote is sent, accepted, declined, or a client requests a revision. New Settings → Email notifications panel with a master switch
What's new in 1.2.0
- Email notifications now work — get an email when a quote is sent, accepted, declined, or a client requests a revision. New Settings → Email notifications panel with a master switch, recipients, and per-event toggles. (This feature previously appeared in the docs but never actually sent.)
- Editable email templates — customize the subject and body per event with merge fields like
{client_name}, {number}, and {amount}. Each template has its own "Send test email" button that previews it with sample data, sent to you — never your team list.
- SMTP "Test connection" — verify your server, port, encryption, and credentials before saving, without sending an email. "Send test email" now shows its result inline instead of reloading the page.
- Appearance toggle — choose Light, Dark, or System (follows your OS) from the toolbar.
- Client profile improvements — the Activity feed moved below the Account note with more room and pagination; the header Email button and the Engaged services card were removed.
- Smarter send-quote recipients — the dialog now pre-selects the client's primary and secondary contacts, with "send me a copy" as before.
- Edition badge — a "Lite" badge next to the logo shows which edition is running.
- Fix — the line-items column header now correctly reads "Name" (the description expands beneath each item).
No database changes.
Reworked quote line-item builder — add items by searching your library, or create a one-off custom item in a focused dialog. Click any item name or description to edit it inline.
What's new in 1.1.0
- Reworked quote line-item builder — add items by searching your library, or create a one-off custom item in a focused dialog. Click any item name or description to edit it inline.
- No more sideways scrolling in the line-item table — columns are sized to fit, and the item name and description get room to read.
- Editable term length for every billing period, shown as N/A for one-time engagements.
- Cleaner one-time quotes — "Equivalent MRR" is no longer shown for one-time quotes (they have no recurring value).
- New About page in the Quottum menu, with a link to quottum.io and a support contact.
- Clearer "Declined" status — now a distinct red instead of looking like an accepted quote.
- Client-driven approvals — accepting or declining a quote is the client's decision via their secure link; the admin-side shortcuts were removed.
- Dark-mode fix — the billing-period and other dropdowns now show their selected value clearly.
- Security hardening — executable/script file uploads are always rejected regardless of the configured allow-list, imported settings are sanitised on restore, and several input-handling and output-escaping paths were tightened.
No database changes.
Maintenance release that cleans up "Quottum Pro" copy left over from before the Pro tier was dropped (2026-06-18, SaaS pivot — see the [Quottum product page](https://app.notion.com
Maintenance release that cleans up "Quottum Pro" copy left over from before the Pro tier was dropped (2026-06-18, SaaS pivot — see the Quottum product page).
What's changed
- readme.txt — removed the "Quottum Pro (separate upgrade)" paragraph from the WordPress.org description
- Dashboard — removed the in-admin "Quottum Pro" upsell card (eyebrow + heading + feature list + Explore Pro button)
- Quote detail — accept-quote button now always says "Mark as accepted" instead of branching on a phantom Pro flag
Why a version bump
Trunk-only edits don't reliably refresh the cached wordpress.org listing page. Bumping the Stable tag forces a re-index so users see the cleaned-up description.
No database changes, no behavior changes.
Compatibility
🎉 Quottum is live on WordPress.org! Approved by the WP.org reviewer on 2026-06-20; SVN trunk + `tags/1.0.0` published on 2026-06-24.
🎉 Quottum is live on WordPress.org! Approved by the WP.org reviewer on 2026-06-20; SVN trunk + tags/1.0.0 published on 2026-06-24.
Public listing: https://wordpress.org/plugins/quottum
What's in v1.0.0
- Quote builder with live preview, per-line discount, tax, and multi-currency
- Reusable line-item library organised by editable categories and service groups
- Tokenized client pages — accept, decline, or request a revision; feedback captured on the quote
- Clean, downloadable quote PDF; renew an expired quote with a fresh link
- Clients directory with company and contact details
- Activity timeline — every quote change recorded with actor + timestamp
- Email (SMTP) settings with save-and-test
- Branded login option (opt-in)
- Full internationalization (
quottum text domain), output escaping, input sanitization
- "Powered by Quottum" opt-in toggle (WP.org guideline compliance)
Compliance
- WP.org enqueue compliance: no inline JS/CSS — everything via
wp_enqueue_script / wp_enqueue_style
- Plugin Check (PCP): 0 errors
- DNS verification TXT record for
quottum.io confirmed
Requirements
Next
- Plugin assets (icon, banner, screenshots) coming soon
- Public changelog instance at
changelogwp.quottum.io