===Admin and Customer Messages After Order for WooCommerce: OrderConvo===
**Contributors**: nmedia  
**Tags**: woocommerce order communication, woocommerce customer vendor chat, woocommerce order messaging, woocommerce order notes, woocommerce order file attachments, woocommerce order chat, woocommerce vendor communication, woocommerce customer support, woocommerce admin customer messages, woocommerce order management
**Donate link**: [Donate Here](https://najeebmedia.com/donate/)  
**Requires at least**: WordPress 4.0
**Tested up to**: WordPress 6.9
**Stable tag**: 15  
**Requires PHP**: 7.2  
**License**: GPLv2 or later  
**License URI**: [GPL License](http://www.gnu.org/licenses/gpl-2.0.html)

OrderConvo: Enable seamless post-order communication between vendors/admins and customers in WooCommerce.

==Description==
OrderConvo is a lightweight and efficient WooCommerce plugin that allows vendors and customers to exchange messages after an order is placed. Both admin/vendors and customers can send messages or files related to the order. Customers can access the OrderConvo message box from `My Account -> Orders`, where each order has its own messaging area. The plugin adds a responsive, AJAX-powered message box on the order details page, ensuring compatibility with all WooCommerce themes.

==How It Works==
[Watch the Demo](https://vimeo.com/288485898)

**Live Demo Instructions**
* [Click here](https://najeebmedia.com/wooconvo-demo) to launch the demo.
* Once the demo is live, navigate to **Settings > NM Demo**.
* Click **Initialize Demo: OrderConvo** to create demo orders and products.
* Explore the plugin's features and functionalities.
* **Note**: If the Messages tab (My Account > Messages) does not work, re-save the permalink settings to resolve the issue.

==Free Version Features==
* Enable communication between customers and vendors/admins for each order.
* Unlimited messages per order.
* Customize message button labels.
* Customize message placeholder text.


**OrderConvo Supports Single Store and Marketplace Setups**
* Fully compatible with single WooCommerce stores.

==Marketplaces Supported==
* **Dokan Marketplace**
* **WC Product Vendors**
* **MultiVendorX**
* **YITH Multi-Vendor**
* **WCFM Marketplace**

==PRO Features==
* Send and receive file attachments.
* Control file types and file size limits.
* Attach images with automatic thumbnail previews.
* Email notifications for new messages.
* Customize email templates using the WooCommerce Email Template Manager.
* New message alerts on the order page.
* Rich text editor for enhanced message formatting.
* Access to a dedicated support forum.
* New message notifications in the WordPress dashboard.

[**Learn More About PRO**](https://najeebmedia.com/wordpress-plugin/wooconvo-woocommerce/)

**Why Use OrderConvo for Vendor-Customer Communication?**

With over 12 years of experience in WordPress and WooCommerce development, N-Media has received many requests for improved post-order communication. **OrderConvo** addresses this need, allowing for smooth communication between customers and vendors. Here’s why **OrderConvo** is a must-have for your store:

**For Customers:**
* Customers can request changes to the delivery address or date after placing the order.
* They can also modify order quantities or request revisions or replacements, helping avoid negative feedback.
  
**For WooCommerce Vendors:**
* Vendors can provide order updates, share prototypes, or get feedback before final shipment, especially useful for digital goods or custom orders.

==OrderConvo Add-ons==

If the free or PRO version doesn't fully meet your needs, check out our range of **OrderConvo Add-ons**:

* **OrderConvo AWS S3 Add-on**  
  Upload all attachments to AWS S3 for faster and more efficient file management. Simply add your S3 credentials to get started, ideal for large file uploads.
  
* **OrderConvo Quick Message Add-on**  
  Create pre-saved message templates for quick replies, saving time and streamlining communication with customers.
  
* **OrderConvo Revisions Add-on**  
  Allow customers to request revisions before finalizing their orders, perfect for businesses like printing companies that need client approval on designs.
  
* **OrderConvo Live Chat Add-on**  
  Enable real-time communication between vendors and customers with an AJAX-powered live chat. Chat can be disabled when not needed to save server resources.
  
* **OrderConvo Marketplace Add-on**  
  Supports major marketplace plugins like Dokan, MultiVendorX, WCFM, YITH, and WC Product Vendors.

[Explore All Add-ons](https://najeebmedia.com/wordpress-plugin/wooconvo-woocommerce/)

==Our Top Plugins:==
* [WooCommerce Bulk Product Sync](https://najeebmedia.com/bps) – Manage WooCommerce products using Google Sheets™.
* [WooHero](https://najeebmedia.com/woohero) – Customize WooCommerce buttons, tabs, and more without writing code.

[See All Plugins](https://najeebmedia.com/wordpress-plugins)

==Installation==
1. Upload the plugin directory to `/wp-content/plugins/`.
2. Activate the plugin from the **Plugins** menu in WordPress.
3. Configure settings under `WooCommerce -> Admin and Customer Messages After Order`.

==Frequently Asked Questions==

**How can a customer send a message to the admin/vendor?**  
Once the order is placed, customers can send messages from the `My Account -> Orders` page by clicking the message button next to each order.

**Where can admins see customer messages?**  
Admins can view messages directly within the order edit page in WooCommerce.

**Can users or admins send files or images with messages?**  
Yes, but file attachments are a PRO feature.

**What is the difference between Vendor and Admin?**  
For a single store, the admin is the vendor. In multi-vendor setups, the "vendor" role is specific to marketplace functionality.

**Do email notifications get sent when new messages are sent?**  
Yes, email notifications can be enabled in the plugin settings.

**Can customer messages be included in email notifications?**  
Yes, using the WooCommerce Email Template Manager, you can add message variables to the email body.

== Screenshots ==
1. Admin Settings
2. All Message (Admin)
3. All Messages (Customer)
4. Single Message
5. Live Chat Addon View
6. Yith Vendor Messages 
7. Yith Vendor Message Single
8. Dokan Vendor Messages 
9. Dokan Vendor Message Single

== Changelog ==
= 15.0 December 14, 2024
* Security fix: Fixed unauthorized access vulnerability (CVE-2025-13389) - Added proper authorization checks to prevent unauthenticated users from accessing order details
* Security fix: Fixed user impersonation vulnerability (CVE-2025-13452) - Prevented unauthenticated users from injecting messages as any user
* Security enhancement: Removed debug bypass that allowed unauthenticated API access
* Security enhancement: Added proper user authentication and order access validation
= 14 September 15, 2025
* Security fix: Fixed directory traversal vulnerability in file download endpoint
* Security enhancement: Added proper path validation to prevent unauthorized file access
= 13.5 February 15, 2025
* Bug fixed: Attachment issues fixed for non-images
= 13.4 February 8, 2025
* Feature: Revision Addon Feature: Now customer can accept revision and close message (mark order completed optionall)
= 13.3 January 15, 2024
* Bug fixed: Some security related issue fixed highlighted by Wordfence Team
= 13.2 December 11, 2024
* Feature: Audio Message Addon Added
= 13.1 July 29, 2024
* Feature: Missing translation added
= 13.0 May 22, 2024
* Bug fixed: Quick Reply messages were not correctly linked with settings.
= 12.9 May 2, 2024
* Bug fixed: Typo issue fixed in httpsService for respons to response
= 12.8 March 27, 2024
* Bug fixed: Settings were not saving due to permissions updated, now fixed.
= 12.7 March 27, 2024
* Bug fixed: OrderConvo Frontend rendering issue fixed
= 12.6 March 27, 2024
* Bug fixed: File upload/download issue fixed
* Bug fixed: Message inside My Account -> Orders will only show when user logged in issue fixed
* Bug fixed: Message inside My Account -> Orders will only show when user logged in issue fixed
= 12.5 March 11, 2024
* Bug fixed: Nonce verification added for security reasons
* Feature: All Conversations now loading inside admin panel
= 12.4 March 10, 2024
* Bug fixed: On completed order conversation stop settings now working
= 12.3 February 27, 2024
* Feature: Mark unread when message is opened
* Feature: Mobile Responsive 
* Bug fixed: Translations ready 
= 12.2 February 8, 2024
* Bug fixed: Compatible with WC Vendors Marketplace plugin.
= 12.1 January 28, 2024
* Bug fixed: Email notification issue fixed when message sent by customer from myaccount > order
= 12.0 January 17, 2024
* Feature: Attachments and text will be clear after message post.
* Major Updated: [OrderConvo is now compatible with WooCommerce HPOS for optimized solution](https://woo.com/document/high-performance-order-storage/)
= 11.3 January 16, 2024
* Bug fixed: [WC has updated orders post type from shop_order to settings page, so now OrderConvo will work for both](https://wordpress.org/support/topic/free-version-is-not-working-4/)
= 11.2 December 1, 2023
* Feature: Now compatibility added with WC Product Vendors inside Marketplace Addons
* Feature: Vendors/Admins/Users now cat messages read and unread
* Bug fixed: Security related issue fixed
= 11.1 November 26, 2023
* Bug fixed: A security related bug fixed
= 11.0 November 22, 2023
* Bug fixed: Date format issue fixed
* Feature: Sequential Order Number plugin compatibility added
* Feature: WCFM Marketplace Addon compatibility added.
= 10.0 September 18, 2023
* Bug fixed: Date difference issue fixed.
* Bug fixed: File preview was not clear after upload, fixed now
* Bug fixed: Different avartar/letters show on myaccount and single orders for same user issue fixed
* Bug fixed: Date format issue fixed on messages list
= 9.2 July 14, 2023
* Bug fixed: missing scripts added.
= 9.1 July 14, 2023
* Feature: OrerConvo was not showing for existing orders after installed, now it will show all orders.
= 9.0 July 11, 2023
* Feature: Render OrderConvo inside each orders in admin side and on frontend.
= 8.7 April 26, 2023
* Feature: [Shop Manager role now can access to OrderConvo menu](https://clients.najeebmedia.com/forums/topic/orderconvo-pro-only-admin-user-can-see-orderconvo-in-nav/)
= 8.6 April 1, 2023
* Feature: Now messages window will also be showing inside each orders for frontend
* Bug fixed: Nulled messages sent on enter issues fixed
* Bug fixed: Order notices were not showing
= 8.5 March 30, 2023
* Bug fixed: Warning removed due to last version
= 8.4 March 29, 2023
* Tweak: Year updated to full from 23 to 2023.
* Tweak: Extra/development code removed
= 8.3 March 27, 2023
* Bug fixed: Null message were sent on enter
* Feature: Multiline text as answer (option available)
* Feature: Single Orders now can access OrderConvo
* Feature: Order notices not showing up in conversations if order status is changed.
* Feature: Communication now disabled for 'Cancelled' order status as well.
= 8.2 March 8, 2023
* Bug fixed: When user first_name is null the plugin broken, it is fixed now
= 8.1 March 2, 2023
* Bug fixed: Settings were not saving when single quote is used inside any text
= 8.0 February 27, 2023
* Feature: New UI with ReactJS and Material UI
* Feature: Easy and fast access to the messages
* Feature: Email Templates for Vendor and Customers
* Feature: Render via Shortcode
= 7.19 September 28, 2022
* Bug fixed: Some outdated code and libraries are updated.
* Tweak: Due to some branding issues name changed from WooConvo to OrderConvo
= 7.18 September 28, 2022
* Bug fixed: [File type spaces issue fixed](https://wordpress.org/support/topic/not-able-to-upload-files-3/#post-16051332)
= 7.17 September 1, 2022
* New Feature: New messages now can be easily access via WP Dashboard
= 7.16 April 29, 2022
* Feature: Filter 'Admin and Customer Messages After Order for WooCommerce_render_message_text_input' added
* Revision addon issue fixed
= 7.15 April 29, 2022
* Feature: [WC Booking support added](https://wordpress.org/support/topic/message-box-not-showing-on-edit-bookings-page/)
= 7.14 April 29, 2022
* Bug fixed: Dokan Vendor Email and Names issue fixed
= 7.13 April 12, 2022
* Bug fixed: CSS conflict removed due to Live Chat Toggle button
= 7.12 March 22, 2022
* Feature: Filter added for message text: apply_filters('wooconvo_message_text', $message, $order_id, $current_user);
* Feature: Avada theme overrides some hooks and the frontend view not rendering. Now it is supported by the Avada theme.
= 7.11 February 23, 2022
* Feature: The file Upload script is nice and cleaner in the upload.js file
= 7.10 February 9, 2022
* Bug fixed: Revision addons were not working, it is fixed now.
= 7.9 February 7, 2022
* Feature: [Scroll down to latest messages](https://wordpress.org/support/topic/the-problem-with-scrolling-messages-in-the-chat/)
* Bug fixed: [File attachment issue fixed](https://clients.najeebmedia.com/forums/topic/attachments-are-still-not-showing-in-chat-window/)
= 7.8 January 26, 2022
* Bug fixed: [Email notification issue fixed](https://clients.najeebmedia.com/forums/topic/e-mail-notification-doesnt-work/)
= 7.7 January 4, 2022
* Bug fixed: [Chat option was not showing to clients, now it is fixed](https://wordpress.org/support/topic/the-plugin-does-not-work-in-the-order-card-frontend/)
= 7.6 January 4, 2022
* Feature: [Send file links in email is added back](https://clients.najeebmedia.com/forums/topic/file-sent-in-email-error/)
= 7.5 August 12, 2021
* Bug fixed: [First WooConvo thread/message was not showing now it is fixed](https://clients.najeebmedia.com/forums/topic/i-cannot-see-the-1st-message-in-the-customer-area/)
= 7.4 August 12, 2021
* Feature: Now connected with two new Addons QuickMessage and AWS S3[https://najeebmedia.com/wordpress-plugin/wooconvo-woocommerce/]
= 7.3 August 12, 2021
* Feature: Email notification integration with WC Email system with template vars improved.
= 7.2 August 6, 2021
* Bug fixed: Email template vars were not linked
= 7.1 July 5, 2021
* Feature: Email notification sent via WC Email Template system
* Feature: New Addon: WooConvo Yith multi-vendor released
= 7.0 May 8, 2021
* Bug fixed: [First messages not showing without refresh](https://clients.najeebmedia.com/forums/topic/urgent-bug-in-wooconvo-pro/)
* Bug fixed: Multiple recipients issue fixed
= 6.9 Sep 2, 2020 =
* Feature: Open image files in a new tab instead download.
= 6.8 Aug 12, 2020 =
* Feature: Live Chat Addon
* Feature: Rich Editor For Text Box
* Feature:[Compatible with WooCommerce Sequential Order Numbers](https://wordpress.org/support/topic/add-the-woocommerce-heading-email-as-per-email-customize/)
* Bug Fixed: Send button did not break the line
= 6.7 July 14, 2020 =
* Feature: Show message box after checkout on the thanks page
= 6.6 June 25, 2020 =
* Feature: Chat Reverse Order
* Bug Fixed: Revision Addon Bugs Fixed
* Bug Fixed: blank message send in an email
= 6.5 June 2, 2020 =
* Feature: [Compatible with WooCommerce Sequential Order Numbers](https://clients.najeebmedia.com/forums/topic/email-title-problem/#post-17234)
= 6.4 May 17, 2020 =
* Feature: [Admin and Customer Messages After Order for WooCommerce Revision Addon](https://najeebmedia.com/wooconvo/)
* Feature: File filed required
* Bug Fixed: WCMP suborder design
* Bug Fixed: WCMP suborder design
= 6.3 May 05, 2020 =
* Bug Fixed: get_wcmp_suborders undefine.
= 6.2 April 30, 2020 =
* Feature: Once the files are sent then automatically files are removed from the select area. no longer attach to other msg.
* Feature: Setting user can send the image or file links in the email.
* Feature: Only files can be sent in chatbox without text.
* Feature: Chatbox hides on parent order.
* Feature: Change the file's design.
* Feature: Compatible with WCMP plugin.
= 6.1 Jan 27, 2020 =
* Feature: [New notification handle with WCMP](https://wordpress.org/support/topic/pre-purchase-questions-37/)
* Bug fixed : Remove the footer-text form email template.
= 6.0 Dec 17, 2019 =
* Bug fixed: Settings page responsive on mobile
* Bug fixed: Messages area render on the user order page
= 5.9 Dec 16, 2019 =
* Bug fixed: Screen options disabled issue fixed
= 5.8 Dec 7, 2019 = 
* Feature: [New message notification in orders manager ](https://ppom.nmdevteam.com/wp-content/uploads/2019/12/Capture.png)
* Feature: Change the setting UI
= 5.7 Sep 9, 2019 = 
* Feature:  WCMp latest version compatibility added
* Bug fixed: WC email template integration
* Bug fixed: Email notification vendor to admin.
= 5.6 Aug 27, 2019 =
* Feature: Notification email connected with WC Emails Settings.
= 5.5 May 20, 2019 =
* Feature: [Now text message can be added inside Notification Email](https://clients.najeebmedia.com/forums/topic/message-sent-successfully-email-notification-couldnt-be-sent/)
= 5.4 March 2, 2019 =
* Bug fixed: Attachments download issue fixed
= 5.3 December 15, 2018 =
* Bug fixed: Vendor Display Name fixed in the message when used with WCMP
* Bug fixed: Extra spaces removed from the end of all files.
= 5.2 December 10, 2018 =
* Bug fixed: CSS issue fixed for the large message being hidden under Send button
* Tweak: WooCommerce 3.5 and WordPress 5.0 Check
= 5.1 November 15, 2018 =
* Bug fixed: Order URL wrong for when used with WCMp (WooCommerce Marketplace) plugin
= 5.0 October 16, 2018 =
* Features: Language translation support added
= 4.3 October 10, 2018 =
* Bug fixed: Order URL issue fixed with WCMP
= 4.2 September 26, 2018 =
* Bug fixed: [Safar/iPohne issue fixed for file uploader](https://clients.najeebmedia.com/forums/topic/upload-button-not-working-on-mobile-on-view-order-page/#post-9427)
* Bug fixed: Avatar was not working, it's fixed
* Features: Plupload loaded from WP Core
* Features: Code optimized for fast response, extra code removed
* Features: Control location for conversation box on the order page (after/before order details)
* Features: UI Block added while uploading the file
= 4.1 September 11, 2018 =
* Features: Column added in WooCommerce Orders list to quickly access conversation [screenshot-5.jpg]
= 4.0 September 6, 2018 =
* Bug fixed: Deprecated functions removed
* Bug fixed: Some warnings removed
* Features: Supported with [WooCommerce Product Vendors](https://woocommerce.com/products/product-vendors/)
* Features: Supported with [WooCommerce Marketplace (WCMp)](https://wc-marketplace.com/)

= 1.1 May 15, 2017 =
* Bug fixed: Plupload script removed
* Bug fixed: some function renamed
* Bug fixed: Sanitized all input field
* Bug fixed: use current_user_can() function for ajax requests
* Bug fixed: Removed unnecessary functions
* Bug fixed: EasyTabs replaced with WordPress core jquery-ui script

= 1.0 March 20, 2017 =
* Initial Release

== Upgrade Notice ==
= !! Love For All Hatred For None !! =