Paymattic 4.6.27: Custom Webhook Header Keys, Smarter Quantity Validation, and More!

Paymattic 4.6.27 adds flexible custom webhook headers, stronger quantity validation, and targeted fixes for Stripe subscription security and receipt settings.

What’s new in 4.6.27

Custom header key names for webhook feeds

Webhook feeds now support custom header names for integrations that require proprietary authentication, routing, or environment headers.

In the webhook editor, select Add Custom Header, then enter the header key your receiving service expects. Header names are validated as you type, and spaces are automatically converted to hyphens so the final value is a valid HTTP header name.

This supports use cases such as:

• API key headers like X-API-Key and X-App-Token
• Internal routing or tenant headers such as X-Service-Route and X-Tenant-ID
• Third-party integration secrets such as X-Zapier-Token and X-Make-Secret
• Environment headers for development, staging, and production workflows

You can now configure these webhook requirements without custom code or server-side workarounds.

Improvements

Required product quantities are validated server-side

A required product with a blank or zero quantity could previously create a $0 submission. Paymattic 4.6.27 validates the quantity on the server before accepting the submission.

Blank, zero, and other non-positive values now return a clear validation error, helping prevent phantom orders and inaccurate entry data.

Fixes

Stripe subscription cancellations are restricted to the owner

Subscription cancellation now verifies the authenticated user against the subscription owner. A logged-in user cannot cancel another user’s Stripe subscription using only its submission ID.

Receipt settings are preserved when confirmation settings are saved

Saving confirmation message settings no longer overwrites receipt configuration. Confirmation and receipt settings are now saved independently.

Update to Paymattic 4.6.27

Update from WordPress Dashboard → Plugins → Updates, or download the release from your Paymattic account.

If you use webhook feeds, required product quantities, Stripe subscriptions, or receipt settings, review these areas after updating to confirm they behave as expected.